cn-store-steampowered[.]com[.]cn

Analysis of www.cn-store-steampowered.com.cn indicates that the domain was registered on June 01 2026 through the registrar 浙江贰贰网络有限公司 and is currently hosted at IP 154.91.90.242. The authoritative name servers are ns1.22.cn and ns2.22.cn. VirusTotal reports that 13 of 91 security vendors have flagged the domain as malicious, which aligns with its classification as a generic phishing site and its high‑risk rating.

The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that threat‑intelligence sources consider it active and dangerous. No additional public data such as SSL certificate details, HTTP response codes, or page title have been published, so the exact content served by the site remains unverified. The limited visibility of the infrastructure—only one IP address and two Chinese‑based name servers—suggests a low‑profile hosting arrangement, but the rapid creation date and immediate detection by multiple vendors point to a purposeful phishing campaign.

Defenders should add the domain and its resolving IP to network‑level deny lists, enforce URL filtering in web proxies, and monitor DNS queries for the associated name servers. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in detection scores. Because the domain is still marked as active, organizations handling credentials related to the targeted brand should assume compromise risk and enforce credential rotation if any user interaction is suspected.