s[.]teamqqe[.]com

The domain s.teamqqe.com has been identified as a credential phishing site specifically targeting users of the Steam Community platform. Analysis of the page title, 'Steam Community :: Meow ❤️,' confirms the impersonation of Steam’s official interface, likely designed to harvest login credentials or personal information. The domain is currently offline, though its prior activity and infrastructure warrant further scrutiny. Infrastructure analysis reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on June 16, 2026, an unusually future-dated creation that may indicate domain spoofing or a placeholder entry. It resolved to the IP address 104.21.92.152 and was flagged by 15 of 95 security vendors on VirusTotal, indicating a moderate but notable detection rate. The domain appears on one security blocklist, and its SSL certificate was issued by Google Trust Services, a common tactic to lend superficial legitimacy to phishing sites. The combination of a Steam-themed page title, low-to-moderate vendor detections, and a single blocklist presence suggests targeted or low-volume phishing activity. Current status indicates the domain has been taken offline, potentially due to enforcement actions or abandonment by the threat actor. However, the infrastructure remains a residual risk, particularly if the IP address or registrar is reused for future campaigns. Organizations and users are advised to block the domain and its associated IP at the network level, monitor for similar Steam-themed phishing attempts, and verify the legitimacy of any unexpected login prompts. Security teams should review logs for prior connections to 104.21.92.152 and investigate any credential exposure linked to this domain. Proactive measures, such as multi-factor authentication and user education on phishing tactics, are recommended to mitigate similar threats.