gifts[.]steampowered[.]com[.]de

The domain gifts.steampowered.com.de is a phishing site engaged in brand impersonation targeting Steam, a popular gaming platform. It poses as a legitimate Steam gift or promotion page to deceive users into entering credentials or personal information. No crypto drainer kit was identified, but the site is classified as a gaming scam. As of the latest verification, gifts.steampowered.com.de has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 1 of 95 VirusTotal security vendors, including Fortinet, and appears on 2 security blocklists (PhishDestroy and DiscordPhishing). It was created on February 21, 2026, and resolved to the IP address 54.153.56.183, hosted by Amazon.com, Inc. in the US. The SSL certificate was issued by R10, and the observed page title was 'US.COM | The Premium Global Domain for the U.S. Market'. Gridinsoft assigned a trust score of 0 out of 100, reinforcing its malicious classification.

Users who interacted with gifts.steampowered.com.de should immediately change their Steam account passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized purchases or logins. Report the domain to Steam’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.