yeezystream[.]tv

Analysis of the domain yeezystream.tv indicates it was actively impersonating Steam, a digital distribution platform, as of July 22, 2026. The domain was registered on May 29, 2025, through CNOBIN INFORMATION TECHNOLOGY LIMITED and resolved to Cloudflare IP 104.21.35.182 (AS13335, US). Infrastructure analysis reveals the use of Cloudflare nameservers (doug.ns.cloudflare.com and mallory.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. The domain lacked an SSL certificate, increasing the likelihood of interception or manipulation of user credentials.

The page title 'Anmelden' (German for 'Log in') suggests targeting of German-speaking users, though the exact content and functionality of the site remain unconfirmed due to its offline status at the time of assessment. The domain appears on one security blocklist and was flagged by PhishDestroy. Gridinsoft assigned a trust score of 0/100, reflecting high-risk characteristics. One of 95 security vendors on VirusTotal detected the domain as malicious, though this does not constitute exhaustive validation.

The domain's creation over a year prior to the report date may indicate a planned, long-term impersonation campaign rather than opportunistic registration. Defenders should treat this domain as compromised infrastructure and monitor for re-emergence under the same or similar naming conventions. Historical DNS records and WHOIS data may provide additional context for tracking related threats. No evidence of a phishing kit or specific scam category (e.g., credential harvesting, malware distribution) is available from the current data.