Is ft.csteam.support safe?

No. MalwareAnalyzer scanned ft.csteam.support on 21 Aug 2026 and returned a malicious verdict with a score of 72 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was ft.csteam.support checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ft.csteam.support - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned ft.csteam.support and returned a malicious verdict (score 72), categorised as phishing. The page resolved to 104.21.59.236 on Cloudflare, Inc. in US. The domain was registered 983 days ago through NameCheap, Inc.. 13 domains and 9 IPs were contacted, over 61 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 72) · Confidence 78%
Scanned URL: https://ft.csteam.support/
Domain: ft.csteam.support · IP: 104.21.59.236 · AS13335 · US
Server: cloudflare
Page title: Inicio
HTTP status: 200 · text/html; charset=UTF-8
Registrar: NameCheap, Inc. · domain age 983 days · created 2023-12-12
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 18 21: · subject CN=csteam.support
HTTP requests captured: 61 · cookies set: 20 · outgoing links: 141
Scan tier: standard · observed 2026-08-21 23:42:38 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws
Domain impersonates steam (typosquat)

Detected technologies

Cloudflare
WordPress
Google Analytics
jQuery

Contacted infrastructure

104.21.59.236 - AS13335 Cloudflare, Inc. (United States)
142.250.183.40 - AS15169 Google LLC (US)
66.33.60.35 - AS16509 Vercel, Inc (United States)
157.240.8.23 - AS32934 Facebook, Inc. (Australia)
157.240.8.35 - AS32934 Facebook, Inc. (Australia)
172.64.149.246 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

ft.csteam.support
gmpg.org
cdn.jsdelivr.net
zuvio.site
www.googletagmanager.com
cdnjs.cloudflare.com
cdn.facilisto.com
www.chatbase.co
www.facebook.com
facilisto.com
connect.facebook.net
backend.chatbase.co
ov-1d104299d2a447049cdc73700c9309f7.ecs.us-west-2.on.aws
104.21.59.236
172.67.185.110
104.21.13.90
142.250.183.40
66.33.60.35
157.240.8.23
157.240.8.35

Questions about ft.csteam.support

Is ft.csteam.support safe?: No. MalwareAnalyzer scanned ft.csteam.support on 21 Aug 2026 and returned a malicious verdict with a score of 72 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was ft.csteam.support checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ft.csteam.support

Scanned on MalwareAnalyzer by Cyble · Open interactive scan