steamcomnumity[.]cfd

The domain steamcomnumity.cfd was registered through Web Commerce Communications Limited dba WebNic.cc and first appeared on February 21 2026. The site presented a page titled “Steam Gift Activation”, indicating an attempt to impersonate the Steam brand. Infrastructure analysis shows the domain resolves to IP 104.21.112.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The SSL certificate is issued under the identifier “WE1”, providing no indication of legitimate ownership. The site’s trust score from Gridinsoft is 0 out of 100, reflecting a complete lack of trust.

On VirusTotal, 15 of 93 scanning engines flagged the domain as malicious, and the domain appears in two AlienVault OTX pulses as well as a single security blocklist. PhishDestroy has also listed the domain as blocked. The nameservers ns100.webnic.cc and ns101.webnic.cc are consistent with the registrar’s infrastructure. The current operational status is offline, which limits real‑time observation, but the historical evidence points to a gaming‑related scam that likely attempts to harvest Steam credentials or redeem fraudulent gift codes.

No additional payload or kit information has been released, and the exact content served before takedown remains unverified. Defenders should add steamcomnumity.cfd to URL filtering and endpoint allow‑list exclusions, monitor for any DNS queries to the associated Cloudflare IP, and enforce brand‑specific email and web filters for Steam‑related communications. Incident response teams should also correlate any user reports of unexpected Steam gift activation requests with this indicator and consider blocking the domain at the network perimeter. Continued tracking of the IP address and related Cloudflare‑hosted domains is advised, as the attacker may shift to new domains while retaining the same hosting infrastructure.