stadym[.]onelink[.]me

The domain stadym.onelink.me is a phishing site engaged in brand impersonation targeting the 'blast' platform. It presents itself as a Steam-related trading bot under the title 'CS.MONEY — Trading Bot for fast CS:GO/CS2 skins trade', but its primary threat type is identified as a Steam phishing scam designed to steal user credentials or digital assets. As of the latest verification, stadym.onelink.me has been taken offline, though it previously operated without detection by major security vendors.

Technical indicators for stadym.onelink.me show 0 of 95 VirusTotal vendors flagging the domain, and Google Safe Browsing does not list it as malicious. The domain appears on 1 security blocklist (PhishDestroy) and is registered through OneLink (Branch) with a creation date of February 21, 2026. It resolves to the IP address 104.20.18.108, hosted by Cloudflare in the US (AS13335), and uses an SSL certificate issued by E1. The Gridinsoft trust score for the domain is 0/100, further indicating its suspicious nature.

Users who may have interacted with stadym.onelink.me should immediately change their Steam account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor account activity for signs of fraud, such as unauthorized trades or logins. Report the phishing domain to Steam support and consider submitting it to platforms like PhishTank or the Anti-Phishing Working Group to aid in broader takedown efforts.