steamcommunuity[.]cc

steamcommunuity.cc targets Steam users with a phishing scam aimed at capturing login credentials. The domain, cleverly mimicking the legitimate Steam community URL, was flagged by 16 out of 95 vendors on VirusTotal, highlighting its malicious intent. It was listed on public blocklists by PhishDestroy and PhishingDB, indicating its recognition as a threat by multiple security entities.

The domain was registered with NiceNIC International Group Co., Limited and hosted on an IP managed by Cloudflare, Inc. in the United States. Despite its offline status, the domain's previous activity posed a significant risk to unsuspecting users. The SSL certificate issued by Google Trust Services suggests an attempt to appear legitimate, potentially deceiving users into believing they were on a secure platform.

PhishDestroy identified steamcommunuity.cc on February 26, 2026, shortly after its creation on February 21, 2026. This rapid detection underscores the effectiveness of PhishDestroy's monitoring systems, which operate upstream of traditional antivirus vendors. The platform risk score of 83 out of 100 further emphasizes the threat level posed by this domain. Although the site is currently offline, its existence serves as a reminder of the ongoing threat posed by phishing scams in the gaming community.