# tl-09-steam.pages.dev — MALICIOUS

> PhishDestroy warns that tl-09-steam.pages.dev is a crypto drainer impersonating Steam. With 9/95 VirusTotal flags, users should verify its legitimacy.

## Summary
PhishDestroy identifies tl-09-steam.pages.dev as an active crypto drainer masquerading as a Steam-related platform. This domain leverages a Cloudflare-hosted page on Google Trust Services infrastructure to deceive users into connecting crypto wallets under false pretenses.

This domain was flagged by 9 of 95 VirusTotal security vendors and resolves to IP 188.114.96.3. Registered via Cloudflare, Inc., it exhibits immediate red flags for malicious intent, including SSL certification through Google Trust Services despite no verified affiliation with Steam.

If you visited tl-09-steam.pages.dev, disconnect your crypto wallet immediately and scan for unauthorized transactions. Run a full malware scan on your device and change passwords for critical accounts. Report the domain to PhishDestroy for verification and add it to your browser blocklist to prevent future exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4aef0eb7-9c37-486e-bc20-43c32bfc4851
- PhishDestroy: https://phishdestroy.io/domain/tl-09-steam.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/tl-09-steam.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tl-09-steam.pages.dev/
Last updated: 2026-03-21