steam[.]beasiswa-amartha[.]org

PhishDestroy identifies steam.beasiswa-amartha.org as an active brand impersonation domain currently under investigation for phishing activities. The malicious domain mimics the Steam gaming platform to deceive users into surrendering their login credentials, posing significant risks to account security and personal data. Active status indicates ongoing threat potential with confirmed infrastructure used for fraudulent purposes.

This domain was flagged by zero of 95 VirusTotal vendors at initial analysis, indicating emerging or low-signal threat status despite active malicious hosting. Registered through GoDaddy.com, LLC on March 02, 2023, the domain resolves to IP address 188.114.96.3 using a Let’s Encrypt SSL certificate. No confirmed listings on major blocklists were detected at time of analysis, though reputation scores remain critically low due to recent creation and zero detections. Low detection rates emphasize the importance of proactive monitoring and user vigilance.

Current status remains active with confirmed infrastructure hosting credential theft operations. Safety recommendations include immediate blocking of the domain and IP at network and endpoint levels, user education to avoid entering credentials on non-official Steam domains, and continuous monitoring for evolving threat signatures. Domain reputation should be treated as high-risk due to active impersonation of a major gaming platform with zero current vendor detections.