store[.]gerald1main[.]shop

The domain store.gerald1main.shop is a phishing site engaged in brand impersonation targeting Steam users. It presents a fraudulent login page titled 'Anmelden' designed to harvest Steam credentials, posing an elevated risk of account compromise. As of the latest verification, store.gerald1main.shop has been taken offline, though it previously operated without a known crypto drainer kit.

Technical indicators confirm the domain's malicious nature. store.gerald1main.shop was flagged by 2 of 95 VirusTotal security vendors, including SOCRadar and Trustwave, and appears on 1 security blocklist (PhishDestroy). The domain was created on February 21, 2026, and resolved to the IP address 104.21.73.235, hosted on Cloudflare's network (AS13335) in the US. No SSL certificate was issued for the domain, and the registrar information remains unavailable. Gridinsoft assigned a trust score of 0 out of 100, further indicating its fraudulent intent.

Victims of store.gerald1main.shop should immediately change their Steam account password and enable two-factor authentication to prevent unauthorized access. Monitor the account for suspicious activity, such as unauthorized purchases or logins, and report any fraud to Steam support. The domain can also be reported to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader takedown efforts.