store[.]powereduseronline[.]shop

This domain, store.powereduseronline.shop, is designed to trick Steam users into handing over their account credentials. The page title claims to be a Steam Workshop item called "Toxic Affection | Warpaint," but it's actually a phishing page that mimics the legitimate Steam login interface. If you enter your username and password, the scammers capture them and can steal your account, including any valuable items or payment methods linked to it. This is a classic example of a credential harvesting attack, where the goal is to gain unauthorized access to your digital property.

PhishDestroy identified this threat through multiple security checks. The domain was registered on October 15, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a common registrar for malicious sites. It resolves to IP address 94.74.164.255 and has no SSL certificate, which is a red flag for any page that asks for sensitive information. VirusTotal shows that 14 out of 95 security vendors flag this domain as malicious, and it appears on two security blocklists. The domain is currently offline, but similar phishing sites pop up frequently, so staying vigilant is key.

If you visited this site and entered any information, change your Steam password immediately and enable two-factor authentication if you haven't already. Also, check your account for any unauthorized activity and contact Steam Support if you notice anything suspicious. To avoid future threats, always double-check the URL before logging in—legitimate Steam pages use 'steampowered.com' or 'steamcommunity.com,' not random domains like this one. Bookmark the official Steam login page and use PhishDestroy to verify any links that seem off. Remember, if an offer or login page feels urgent or too good to be true, it's likely a scam.