esportsvote[.]net

The domain esportsvote.net has been identified as a brand impersonation threat, specifically targeting Steam users. While the site is currently offline, its purpose was likely to host a phishing kit designed to steal login credentials and potentially other sensitive information from gamers. The threat type is brand impersonation, with Steam as the impersonated brand, and no specific drainer kit was identified from the available intelligence.

Technical indicators paint a clear picture of malicious intent. VirusTotal shows 2 out of 95 security vendors flagging this domain, and it appears on 1 security blocklist. The domain was registered through CNOBIN INFORMATION TECHNOLOGY LIMITED on March 11, 2026, and resolves to IP 172.67.151.120. The SSL certificate was issued by Let's Encrypt (E7), which is commonly abused by phishing sites. The page title was "League Platfrom" (a misspelling likely designed to evade detection), and it was found in 1 AlienVault OTX threat intelligence pulse.

Currently, the domain has been taken offline, which is a positive outcome. However, residual risk remains as the domain could be reactivated or the same operators may register new domains. Users who may have interacted with the site should change their Steam passwords immediately and enable two-factor authentication. It is also advisable to monitor accounts for any unauthorized activity. PhishDestroy recommends blocking the domain and IP at the network level to prevent any future access.