steamcomnunmity[.]cfd

Analysis of the domain steamcomnunmity.cfd indicates confirmed phishing infrastructure targeting Steam users, classified as a gaming scam. The domain was registered on November 4, 2025, through Web Commerce Communications Limited and is currently offline. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers jeff.ns.cloudflare.com and lady.ns.cloudflare.com, resolving to the IPv6 address 2a06:98c1:3120::3. No SSL certificate is present, increasing the risk of unencrypted credential harvesting.

Detection data shows 14 of 95 security vendors on VirusTotal flagging the domain as malicious, while AlienVault OTX lists it in 15 threat intelligence pulses. The domain appears on one security blocklist and is blocked by PhishDestroy. The page title, 'Steam Gift Activation,' directly aligns with the reported scam type, suggesting an attempt to deceive users into submitting account credentials or payment details under the guise of fake gift activations.

Gridinsoft assigns a trust score of 0/100, reinforcing the malicious classification. While the exact content of the phishing page remains unanalyzed, the combination of brand impersonation, detection vendor flags, and blocklist inclusion provides sufficient evidence for defenders to treat this domain as confirmed malicious infrastructure. Network defenders should ensure this domain is blocked at the DNS and proxy levels, and security teams should monitor for related indicators in logs or user reports.