swstorebd[.]com

This domain, swstorebd.com, is currently flagged as a high-risk phishing domain targeting Steam Wallet users. The domain was registered through NameCheap, Inc. on May 17, 2026, and is actively hosted on an IP address located in Germany (136.243.106.228) managed by Hetzner. The presence of a Let's Encrypt SSL certificate (E7) may give an initial false sense of security, but it is important to note that SSL certificates do not guarantee the legitimacy of a website. The domain has been identified in one threat intelligence pulse on AlienVault OTX, which suggests that it has been associated with malicious activities. Additionally, the domain has been added to the PhishDestroy blocklist, further indicating its involvement in phishing operations. The Gridinsoft trust score for this domain is 0 out of 100, which is the lowest possible score and indicates a significant level of risk. Only one security vendor out of 95 on VirusTotal has flagged this domain, which might suggest that it is relatively new or has not been widely recognized yet. However, the low trust score and presence on a security blocklist provide strong indicators of its malicious intent. Defenders should immediately block this domain in their network security configurations and monitor for any attempts by users to access it. Given the domain's focus on a popular gaming service, it is likely that the phishing campaign is targeting gamers who may be looking to purchase Steam Wallet credits. Security teams should also educate users about the risks of phishing and the importance of verifying the legitimacy of websites before entering sensitive information. Regularly updating threat intelligence feeds and implementing multi-factor authentication can further mitigate the risk of credential theft and other related attacks.