admin[.]jlsmladmin[.]non-steam[.]com

The domain admin.jlsmladmin.non-steam.com is currently active and hosts a page titled “Non-steam client panel.” The site was registered on August 23, 2019 through Danesco Trading Ltd. and resolves to the IPv4 address 81.91.178.184. DNS resolution is managed by Cloudflare, using the nameservers ian.ns.cloudflare.com and rita.ns.cloudflare.com, which obscures the true hosting infrastructure and complicates attribution. VirusTotal has recorded eight detections out of ninety‑five scanned security vendors, indicating that a subset of AV engines have flagged the domain as malicious. The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a high‑risk phishing resource. No public SSL certificate details, HTTP response codes, or Safe Browsing verdicts are available from the supplied intelligence, so the transport security posture cannot be fully assessed. The limited data suggest the operator is leveraging a deceptive “Non‑steam” label to lure users seeking a Steam client, likely aiming to harvest credentials or deliver further payloads. Defenders should add the domain and its IP address to internal blocklists, monitor DNS queries for the associated Cloudflare nameservers, and update intrusion detection signatures to include the observed detection patterns. Continuous re‑scanning of the host and correlation with emerging threat intel are recommended to capture any changes in the domain’s behavior or hosting environment.