2112056192[.]dojiner[.]at

This domain, 2112056192.dojiner.at, is identified as a high-risk brand impersonation threat specifically targeting Steam, a widely used digital distribution platform. The domain presents a fraudulent login interface titled 'Sign In,' designed to deceive users into submitting their credentials. Analysis indicates the intent is credential theft, enabling unauthorized access to Steam accounts, which may lead to financial fraud, unauthorized purchases, or further exploitation of linked services such as payment methods or personal data stored within the account. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification. The domain was registered on February 21, 2026, through AS214351 (FEMO IT SOLUTIONS LIMITED), and resolves to the IP address 62.60.226.105, located in Germany. It is associated with a Let's Encrypt SSL certificate (R12) and appears on one security blocklist. VirusTotal detection metrics show 22 out of 95 security vendors flagging the domain as malicious. The page title 'Sign In' further aligns with common credential harvesting tactics, reinforcing the domain's role in targeted brand impersonation. Users who visited 2112056192.dojiner.at or entered credentials on the site should immediately take corrective actions. Reset Steam account passwords using a secure device and enable multi-factor authentication if not already active. Review recent account activity for unauthorized transactions or modifications. Monitor linked payment methods for suspicious charges and consider revoking access to third-party applications connected to the Steam account. If financial data was exposed, notify relevant institutions to prevent fraudulent transactions. Additionally, scan the device used to access the domain for malware, as credential theft sites may deploy secondary payloads.