support[.]useraccountverify[.]com

The domain support.useraccountverify.com is identified as a credential phishing site specifically targeting users of the Steam platform. Analysis confirms this domain was actively impersonating Steam Support pages to harvest user account credentials. As of the latest assessment, the domain has been taken offline, though prior activity remains a verified threat. Infrastructure analysis reveals critical indicators of malicious intent. The domain was registered on February 23, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with high-risk domains. It resolved to the IP address 45.148.244.204, hosted under AS200019 (ALEXHOST SRL) in the Netherlands, a network segment with a history of hosting phishing and malware distribution sites. The domain was flagged by 21 of 95 security vendors on VirusTotal, and appeared on at least one security blocklist. Notably, the site lacked SSL encryption, a common red flag for fraudulent credential collection pages. The page title was explicitly set to 'Steam Support,' reinforcing the impersonation of legitimate Steam services. Current status indicates the domain is offline, though residual risk persists due to potential re-activation or migration to similar infrastructure. Organizations and users are advised to block the domain and its associated IP at the network perimeter. Security teams should monitor for related domains registered through the same registrar or hosted on the same autonomous system. End users who may have interacted with the site should immediately reset their Steam credentials via official channels and enable multi-factor authentication. Proactive threat hunting should include reviewing logs for connections to 45.148.244.204 and domains with similar naming patterns.