8s[.]non-steam[.]com

The domain 8s.non-steam.com is currently active and has been classified as a high‑risk generic phishing operation. Registration records show that the domain was created on August 23, 2019 and is listed under the registrar Danesco Trading Ltd. The authoritative name servers are ian.ns.cloudflare.com and rita.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s DNS service. DNS resolution points to the IPv4 address 81.91.178.184, which is the sole IP address associated with the domain in the available intelligence.

Multiple defensive feeds have flagged the domain. It is blocked by PhishDestroy and appears on one additional security blocklist, confirming that at least two independent sources have taken mitigation actions. VirusTotal analysis reports that eight of ninety‑five scanning engines have generated a detection for the domain, reinforcing the perception of malicious intent. No further public threat‑intel platforms such as OTX or Safe Browsing are referenced in the supplied data.

The evidence base is limited to registration metadata, DNS infrastructure, and the detection counts described above. No information is available regarding SSL certificate details, HTTP response codes, page titles, or the specific phishing kit employed, leaving the exact content and targeting mechanisms of the site uncertain. Consequently, defenders cannot assess the precise lure or credential‑harvesting technique used, only that the domain aligns with a generic phishing profile.

Given the high risk rating, the active status, and the corroborating detections, security teams should prioritize the inclusion of 8s.non-steam.com in network‑level blocklists and endpoint protection rules. Continuous monitoring of the associated IP address (81.91.178.184) is advised, as well as periodic re‑query of VirusTotal and other scanning services to capture any changes in detection posture.