steam22[.]ai-cryptolist[.]com

The domain steam22.ai-cryptolist.com is confirmed to be a generic phishing site. It does not appear to be targeting a specific brand or using a drainer kit. However, the domain has been flagged for its involvement in phishing activities, posing a significant risk to unsuspecting users.

Infrastructure analysis reveals that the domain is registered through Key-Systems GmbH and was created on April 11, 2026. It currently resolves to the IP address 188.114.96.3. The domain has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus among security experts. Additionally, it appears on 1 security blocklist, further corroborating its malicious nature. The SSL certificate is issued by Google Trust Services, which can sometimes lend a false sense of security to users. The technologies detected on the domain include IPFS, Vue.js, and Cloudflare, with the site utilizing HTTP/3. The page title, 'Just a moment...', suggests that the domain may be using Cloudflare's security services to mask its true content or to delay access to the phishing page. The Gridinsoft trust score for this domain is 0/100, indicating a complete lack of trustworthiness.

The domain is currently offline, which may indicate that it has been taken down by the registrar or a security organization. Despite its current offline status, the risk remains elevated due to the potential for rapid re-deployment. Security teams are advised to monitor for any resurgence of the domain and to ensure that all endpoints are updated with the latest security patches and threat intelligence. Users should be educated to recognize and avoid phishing sites, especially those that may appear legitimate due to the use of trusted SSL certificates and delay tactics.