s[.]team-rus[.]com

This domain, s.team-rus.com, is identified as a brand impersonation threat targeting Counter-Strike, a widely recognized gaming platform. The domain is currently classified under the specific threat type of phishing, designed to deceive users into believing they are interacting with legitimate Counter-Strike or Steam Community resources. As of the latest assessment, the domain has been taken offline, though prior activity and infrastructure analysis indicate a deliberate attempt to exploit user trust in the targeted brand. Analysis of the domain reveals multiple technical indicators of malicious intent. The domain was created on October 09, 2025, and is registered through GRANSY S.R.O D/B/A SUBREG.CZ. It resolves to the IP address 104.21.35.152, hosted on infrastructure associated with AS13335 Cloudflare, Inc. in the United States. Security vendors on VirusTotal have flagged this domain, with 15 out of 95 vendors marking it as malicious. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB. The page title, "Steam Community :: :P," further suggests an attempt to mimic legitimate Steam Community pages, a common tactic in phishing campaigns. Notably, the domain lacks an SSL certificate, increasing the risk of unencrypted data transmission and potential interception. The current status of s.team-rus.com is offline, reducing immediate exposure to users. However, the domain's prior activity and infrastructure warrant continued monitoring. Organizations and individuals are advised to block the domain and its associated IP address (104.21.35.152) at the network level to prevent potential re-emergence. Users should be educated on recognizing phishing attempts, particularly those impersonating gaming platforms, and encouraged to verify domain authenticity before entering credentials or personal information. Security teams are recommended to review logs for any prior interactions with this domain and investigate potential compromise indicators.