store[.]steampowered[.]app491281[.]com

This domain, store.steampowered.app491281.com, is flagged for posing a high-risk threat through brand impersonation. The domain mimics the legitimate Steam brand, potentially leading users to believe they are interacting with an official Steam website. Such impersonation can be used to deceive users into providing sensitive information, such as login credentials, personal data, or financial details, which can be exploited by malicious actors for various nefarious purposes.

Analysis indicates that store.steampowered.app491281.com has been identified by 15 out of 95 security vendors on VirusTotal as a phishing domain, highlighting the significant risk it poses. The domain was registered through GMO Internet Group, Inc. d/b/a Onamae.com on February 21, 2026. It appears on 2 security blocklists, including PhishDestroy and PhishingDB, and has been flagged by Google Safe Browsing for phishing activities. These multiple detections and flags underscore the domain's malicious intent and the need for user vigilance.

If users have visited store.steampowered.app491281.com, they should immediately check their accounts for any unauthorized activity. It is recommended to change passwords for Steam and any other accounts that may have been compromised. Users should also monitor their financial statements for any unusual transactions. Reporting the incident to Steam's customer support and enabling two-factor authentication (2FA) can further enhance account security.