steam[.]valvesecureip[.]com

The domain steam.valvesecureip.com is identified as a credential phishing site specifically designed to impersonate the Steam gaming platform. Analysis confirms its intent to harvest user credentials through deceptive login interfaces. Currently, the domain is offline, but prior activity indicates a targeted campaign against Steam account holders. Infrastructure analysis reveals the domain was registered through Global Domain Group LLC and created on May 17, 2026, an anomalous future date suggesting potential registration data manipulation. It resolves to the IP address 172.67.183.142 and has been flagged by 8 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and holds a Gridinsoft trust score of 0/100, further validating its malicious classification. Detection systems such as PhishDestroy have already blocked access to this domain. At present, steam.valvesecureip.com is inactive, though its infrastructure remains a latent threat. Organizations and individuals are advised to block the domain and its associated IP (172.67.183.142) at the network perimeter. Users who may have interacted with the site should immediately reset Steam credentials and enable multi-factor authentication. Security teams should monitor for related domains registered under the same registrar or resolving to identical IP ranges, as these may indicate follow-up campaigns.