steamworlds[.]shop

PhishDestroy identifies steamworlds.shop as an active fake Steam gift card phishing domain designed to trick users into surrendering personal or financial information under the guise of offering free game credit codes. The domain leverages urgency—such as limited-time offers—to prompt victims into clicking malicious links or submitting data on spoofed forms that mimic the legitimate Steam platform. Once engaged, users may unknowingly install malware, lose account access, or expose payment credentials to threat actors operating the site. This is not a random scam but a targeted social engineering campaign aimed at Steam users seeking free or discounted content.

This domain was flagged by 11 out of 95 VirusTotal security vendors and resolves to IP 64.118.140.109, hosted under a Let's Encrypt SSL certificate to appear legitimate. The site uses a deceptive naming strategy that includes 'steam' to exploit brand recognition and bypass user skepticism. Based on domain intelligence, the site is actively distributing phishing content and remains unblocked by major browsers or DNS filters at the time of analysis. The combination of a spoofed brand, live phishing content, and high-risk behavior categorizes this domain as elevated risk, indicating a real and immediate threat to visitors.

If you have visited steamworlds.shop, immediately cease any interaction and close the browser tab. Do not enter any login credentials, payment details, or personal information. Scan your device using updated antivirus software such as Malwarebytes, Windows Defender, or ClamAV to detect and remove potential malware. Revoke any session cookies related to Steam in your browser settings and log out of all Steam sessions on other devices. Enable Steam Guard with two-factor authentication to protect your account from unauthorized access. Report the domain to Google Safe Browsing via their official form and share this advisory with others to prevent further victimization. Monitor financial accounts and Steam transaction logs for suspicious activity.