steamcommunitly-balanceglock[.]shop

PhishDestroy first observed steamcommunitly-balanceglock.shop on Sep 9, 2026. Stored content metadata identifies Counter-strike as the apparent target. Page analysis recorded additional brand references to Cs2, Facebook, Reddit, Steam, Valve, and YouTube. Current evidence score: 80/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and Google Safe Browsing. On Sep 9, 2026 at 03:10 UTC, VirusTotal recorded 6 detections among 89 engines: alphaMountain.ai, CRDF, Fortinet, Gridinsoft, LevelBlue, Webroot; Google Safe Browsing flagged the domain: Social Engineering. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 9, 2026 at 03:11 UTC. The separate external-blocklist snapshot contained no matches on Sep 8, 2026 at 22:20 UTC. URLScan captured the page on Sep 9, 2026 at 00:30 UTC.

The collector marked the hostname reachable on Sep 9, 2026 at 00:30 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 9, 2026 at 02:22 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Google Trust Services / WE1 as the certificate issuer with validity through Dec 3, 2026; checked Sep 9, 2026 at 01:02 UTC.

The content indicators and 2 positive source findings support the current Counter-strike impersonation and phishing classification. The target field identifies Counter-strike, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.