store[.]communitymarketsdevs[.]com

store.communitymarketsdevs.com is a subdomain of communitymarketsdevs.com. PhishDestroy first observed the hostname on Oct 17, 2025. Stored content metadata identifies Steam as the apparent target. The captured page title is “Stеаm Workshop::AWP | Ancient Heritage”. Current evidence score: 89/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and URLScan. VirusTotal recorded 13 detections among 95 engines: alphaMountain.ai, BitDefender, CyRadar, Fortinet, G-Data, Kaspersky, Lionic, MalwareURL, Seclookup, SOCRadar, Sophos, Trustwave, Webroot on Feb 23, 2026 at 06:00 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Steam and assigned phishing as its category on Jul 29, 2026 at 03:38 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:25 UTC; content was unavailable. Registration records for the registrable domain communitymarketsdevs.com list GRANSY S.R.O D/B/A SUBREG.CZ as the registrar and Oct 10, 2025 as the creation date. Registration preceded first observation by 6 days. At collection time, the hostname resolved to 94.74.164.255 on AS214196 (Vladylsav-Naumets Vladylsav Naumets, UA). The recorded endpoint location is Frankfurt am Main, DE. The stored server header is nginx. DOM analysis on Apr 23, 2026 at 15:23 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 3 visual captures from PhishDestroy and URLScan.

The content indicators and 2 positive source findings support the current Steam impersonation and phishing classification. The target field identifies Steam, but the record does not establish whether the page requested credentials, a seed phrase, or a wallet connection.