steamcuommunity[.]com

Analysis of the domain steamcuommunity.com confirms its classification as a brand-impersonation phishing site targeting Steam users. Registered on November 29, 2025, through MAT BAO CORPORATION, the domain was hosted on IP address 62.60.226.105, geolocated in Germany under AS214351 (FEMO IT SOLUTIONS LIMITED). Infrastructure analysis reveals the use of nameservers ns1.eternitynames.net, ns2.eternitynames.net, ns3.eternitynames.net, and ns4.eternitynames.net, a pattern consistent with other phishing campaigns leveraging the same DNS provider. At the time of assessment, the domain resolved to a page titled 'Example,' though the exact content remains unanalyzed due to its offline status.

No SSL certificate was present, increasing the likelihood of unencrypted credential harvesting. Detection metrics indicate elevated risk: 13 of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on at least one security blocklist. AlienVault OTX records the domain in four threat intelligence pulses, further corroborating its association with phishing activity. The domain was actively blocked by PhishDestroy and assigned a trust score of 0/100 by Gridinsoft, reinforcing its malicious classification.

While the specific phishing kit or lure mechanism is not confirmed, the domain’s naming convention—closely resembling Steam’s official community portal—aligns with known tactics to deceive users into divulging account credentials. Defenders should treat this domain as compromised and prioritize blocking both the domain and its resolved IP within security controls. Given its offline status, continuous monitoring is advised to detect potential re-emergence under altered infrastructure.