com-en-us[.]team

The domain com-en-us.team is currently flagged for brand impersonation, specifically targeting Steam. Analysis indicates that this domain is actively involved in fraudulent activities, as it is associated with a high risk of brand impersonation. The domain was created on March 6, 2026, and has since been identified in 23 threat intelligence pulses on AlienVault OTX, suggesting its recognition within the cybersecurity community as a significant threat. Additionally, it has been blocked by multiple security platforms including SEAL, MetaMask, PhishDestroy, and BLP-Malware, further reinforcing its malicious intent. The Gridinsoft trust score for this domain is notably low at 0 out of 100, indicating a complete lack of trustworthiness.

The domain resolves to the IP address 188.114.97.3, which may be part of a wider infrastructure used for similar fraudulent activities. Furthermore, the SSL certificate is issued by Let's Encrypt, a common choice among scammers due to its accessibility. Despite being flagged by one of the 95 security vendors on VirusTotal, the domain remains active, which raises concerns about the potential for ongoing exploitation of unsuspecting users. The page title associated with this domain is 'FINANSAI · intelligent finance,' which does not directly reference Steam but may be designed to mislead users into believing they are interacting with a legitimate financial service.

Defenders should remain vigilant and monitor this domain closely. Given its presence on four security blocklists and the high-risk classification, any interactions with com-en-us.team should be treated with caution. Users should be educated about the risks of brand impersonation and advised to verify URLs before entering any personal information. Continuous monitoring and threat intelligence sharing are essential in mitigating the risks posed by this domain.