steamcommunityn[.]asia

The domain steamcommunityn.asia was registered on August 24, 2025 through DNSPod, Inc. and is currently resolved to the IPv4 address 62.60.226.105, which belongs to the German hosting network FEMO IT SOLUTIONS LIMITED (AS214351). The authoritative name servers for the zone are burke.dnspod.net and caroline.dnspod.net, both operated by the same registrar. An HTTPS service is presented using a Let’s Encrypt R12 certificate, and HTTP response headers reveal the presence of Nginx, OpenResty, and HTTP Strict Transport Security (HSTS). The page title returned by the server is "Sign In", matching the brand target Steam and confirming the domain’s intent to impersonate the Steam login portal.

VirusTotal analysis shows that 12 of 95 scanned security engines flagged the domain as malicious, indicating a moderate consensus among scanners. Further corroboration comes from AlienVault OTX, where the domain appears in two separate threat‑intelligence pulses, and from commercial blocklists operated by PhishDestroy and ScamSniffer, both of which have listed the domain. In total, the domain is present on two public security blocklists.

The site’s current status is offline, but historical activity suggests a short‑lived gaming‑scam campaign that leveraged the familiar "Sign In" phrasing to lure Steam users. Defenders should continue to block the domain at DNS and network layers, monitor for any re‑use of the associated IP address or name‑server infrastructure, and ensure that endpoint protection solutions incorporate the observed VirusTotal and OTX indicators. Additional investigation is required to determine whether the site hosted additional payloads or credential‑harvesting forms before being taken down, as no page content beyond the title has been publicly disclosed.