store[.]steampowered[.]app1928502[.]com

Analysis of the domain store.steampowered.app1928502.com indicates a targeted brand impersonation campaign against Steam, classified as a gaming scam. The domain was registered on February 21, 2026, and is currently offline as of July 23, 2026. Infrastructure analysis reveals it resolved to the IP address 92.118.112.22, hosted on AS215540 (GLOBAL CONNECTIVITY SOLUTIONS LLP) in the United States. The SSL certificate is issued by a low-reputation issuer (R11), a common trait in phishing infrastructure.

The page title 'Playtest on Steam' directly references Steam’s legitimate playtesting feature, suggesting an attempt to deceive users into engaging with fraudulent content. Detection data shows the domain is flagged by 16 of 93 security vendors on VirusTotal and appears on at least one security blocklist (PhishDestroy). Trust scores from Scamadviser (1/100) and Gridinsoft (0/100) further corroborate its malicious classification. While the exact mechanics of the scam remain unconfirmed due to the domain’s offline status, the combination of brand impersonation, low-reputation hosting, and detection by multiple security vendors indicates a deliberate effort to exploit Steam’s user base.

Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Additional monitoring of related infrastructure (e.g., IP 92.118.112.22, AS215540) is recommended to identify potential pivot domains or emerging threats. No further content analysis is available at this time.