Security Review

Is steamex.sh legit or a scam?

Our verdict:Suspicious· 55/100

Young piracy-linked streaming site with hidden ownership, flagged as suspicious by independent security reviewers and blacklisted by multiple vendors.

steamex.shScanned 12h ago
0
Trust score
SUSPICIOUS
Heuristics 95·MT 40
Category tags
piracysuspicious streaming#Fake Shop78% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Suspicious
High likelihood · 78% confidence
SUSPICIOUS

Warning signs detected

Young piracy-linked streaming site with hidden ownership, flagged as suspicious by independent security reviewers and blacklisted by multiple vendors. Several risk indicators suggest caution. This site might be legitimate — but treat it as unverified until you can independently confirm.

Website Preview

Screenshot of steamex.sh
LIVE RENDER
steamex.sh

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspection
0%
Confidence
The domain was registered only 4 months ago and is hidden behind a privacy service (Njalla Okta LLC) in St. Kitts & Nevis, a common pattern for sites operating outside normal business oversight. Independent security reviewers have assigned it low trust scores: one gave it 25%, another 34/100, citing blacklist detections and suspicious categorization. The site presents itself as a free streaming aggregator that links to third-party hosted content, a model commonly associated with piracy and copyright infringement. While our antivirus network shows no detections and the SSL certificate is valid, the combination of extreme youth, hidden ownership, piracy classification, and negative independent reviews creates a high-risk profile. The lack of verifiable business registration despite claims of operation adds to the concern.
Full dossier
Analysis complete

Page Content

The site operates as a free movie, TV, and anime streaming aggregator, claiming to link only to third-party hosted media rather than storing files directly. This model is typical of piracy-aggregator sites that circumvent copyright enforcement by hosting links rather than content.

Infrastructure

Domain uses valid SSL (ZeroSSL, 45 days to expiry), hosted on IP 34.117.176.22 with zero abuse reports and clean IP reputation. However, the domain itself is very new (registered February 24, 2026, ~4 months old) and not indexed in global traffic rankings, suggesting minimal legitimate traffic or recent launch.

Domain History

Registered via Immaterialism Limited with ownership hidden behind Njalla Okta LLC privacy service in Charlestown, St. Kitts & Nevis. No verifiable active business registration found in any jurisdiction. The use of privacy services combined with the young age and piracy classification is a red flag for operators seeking anonymity.

Web Reputation

Independent security reviewers have flagged the domain as suspicious: one assigned 25% trust score with a warning to be wary, another gave 34/100 and noted blacklist detections, and a third categorized it as Piracy/Plagiarism/Suspicious with 2 of 91 security engines flagging it. Three scam complaints were found in public databases. Our antivirus network shows no detections, but the independent consensus is negative.

Risk Factors
7
  • Domain registered only 4 months ago with no established business history or reputation.
  • Ownership hidden behind privacy service (Njalla Okta LLC) in St. Kitts & Nevis, obscuring operator identity.
  • Multiple independent security reviewers assigned low trust scores (25%, 34/100) and flagged as suspicious or blacklisted.
  • Site categorized as piracy/plagiarism aggregator, linking to third-party hosted copyrighted content.
  • No verifiable business registration found despite operational claims.
  • Three scam complaints recorded in public databases.
  • Not indexed in global traffic rankings, suggesting minimal legitimate user base or recent suspicious launch.
Positive Signals
4
  • Valid SSL certificate issued by ZeroSSL with 45 days remaining.
  • Hosting IP (34.117.176.22) has zero abuse reports and clean reputation score.
  • Our antivirus network detected no malicious code or phishing indicators.
  • No evidence of cloning a major legitimate brand like Steam or Netflix.
AI Recommendation
Avoid using this site. Do not enter payment information, personal details, or login credentials. If you need legitimate streaming, use licensed services like Netflix, Disney+, or Amazon Prime Video.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for steamex.sh, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Not found · St. Kitts & Nevis
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain registered February 24, 2026 (very young, ~4 months old at time of analysis), expires February 2027.
  • WHOIS owner hidden behind Njalla Okta LLC privacy service in St. Kitts & Nevis.
  • ScamDoc gives 25% trust score and advises users to be wary; Gridinsoft flags as suspicious with 34/100 score and blacklist detections.
  • PCRisk scanner categorizes as Piracy, Plagiarism, Suspicious with 2/91 engines flagging and 70/100 trust.
  • Site presents as free movie/TV/anime streaming aggregator: "This site does not store any files on the server, we only linked to the media which is hosted on 3rd party services."
  • Scamadviser notes young domain, hidden owner identity, movie downloads offered, yet summarizes as likely safe with valid SSL.
  • Cyberclaims article on Streamex.net (related) describes it as a crypto trading platform with common withdrawal scam concerns (delays, extra fees, unresponsive support) — unclear if same operator.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • ScamDocopen

    "Streamex.sh reviews | Poor Trust Score: 25%. ... You should be wary."

  • Gridinsoftopen

    "Streamex.sh Scam Check: Blacklist Warning (34/100 Trust Score). Suspicious Website. ... Multiple security vendors blacklist Streamex.sh"

  • PCRisk Scanneropen

    "Category: Piracy, Plagiarism, Suspicious. ... 2 out of 91 security engines flagged the domain, and a malware scan marked the main page as potentially suspicious"

Business registration
Status: not found · St. Kitts & Nevis

Owner listed as Njalla Okta LLC (privacy service), Charlestown, KN. Domain registered via Immaterialism Limited. No verifiable active business registration found.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Independent security reviewers have consistently flagged streamex.sh as suspicious. One source assigned a 25% trust score with explicit warning to be wary; another gave 34/100 and noted multiple security vendors blacklist the domain; a third categorized it as Piracy, Plagiarism, and Suspicious with 2 of 91 security engines flagging it. Three scam complaints were recorded in public databases. The domain's very young age (4 months), hidden ownership via a privacy service in St. Kitts & Nevis, and piracy classification align with the negative independent assessments. No positive reviews or trust endorsements were found.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious57Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerZeroSSL GmbH · ZeroSSL ECC DV SSL CA 2
ExpiresAug 1, 2026 (45d)
Self-signedNo
Hosting & Technology
HostingGoogle LLC
Server locationUS

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1307http://steamex.sh/
  • 2307https://steamex.sh/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPGoogle LLC
Usage typeContent Delivery Network

Proceed with caution

Our automated review flagged enough risk that you should treat this site as unverified.

  • Treat steamex.sh as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked steamex.sh as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • steamex.sh currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. steamex.sh presents a valid TLSv1.3 certificate issued by ZeroSSL GmbH · ZeroSSL ECC DV SSL CA 2, expiring in 45 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report steamex.sh as clean.
  • No. steamex.sh is not currently listed on the major browser blocklist feeds that modern browsers use.
  • steamex.sh resolves to an IP operated by Google LLC in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 17, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around steamex.sh have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·steamex.sh
SUSPICIOUS

Streamex.sh is a free movie and TV streaming aggregator with a very young domain (4 months old), hidden ownership behind a privacy service, and multiple independent security reviewers flagging it as suspicious or untrustworthy. Do not enter payment information or personal details.

Avoid using this site. Do not enter payment information, personal details, or login credentials. If you need legitimate streaming, use licensed services like Netflix, Disney+, or Amazon Prime Video.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.