marysteubersteamwor947df[.]myclickfunnels[.]com

This domain, marysteubersteamwor947df.myclickfunnels.com, is confirmed to engage in brand impersonation targeting Steam, a major digital distribution platform. The site mimics legitimate Steam pages to deceive users into entering account credentials, payment details, or downloading malicious software under the guise of promotions or account verification. The intent is likely credential theft or financial fraud, with potential secondary payloads such as malware or crypto drainers embedded in fake offers or downloads. Analysis indicates the domain was registered through GoDaddy.com, LLC on February 25, 2026, an anomalous future date suggesting possible manipulation or misconfiguration. It resolves to IP address 104.18.35.212 and is hosted behind Cloudflare, a common tactic to obscure origin infrastructure. The domain is flagged by 8 out of 95 security vendors on VirusTotal, appears on one security blocklist, and holds a trust score of 0/100. Detected technologies include Stripe and Recurly, which may be exploited to process fraudulent transactions. The SSL certificate is issued by Google Trust Services, providing a false sense of security to visitors. Users who visited marysteubersteamwor947df.myclickfunnels.com should immediately revoke any entered credentials, particularly Steam login details. Monitor financial accounts for unauthorized transactions and scan devices for malware using updated security tools. If payment information was submitted, contact financial institutions to dispute charges and request card replacements. Report the incident to the impersonated brand’s security team and consider enabling multi-factor authentication on all accounts. The domain is currently offline, but similar threats may reappear under different subdomains or URLs.