steamcommunniity[.]com

The domain steamcommunniity.com was registered on 7 June 2025 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IPv4 address 185.106.93.161, which is assigned to FIRST SERVER LIMITED in Finland (AS200740). No TLS certificate is presented; HTTP requests return a 404 error with the page title “Error 404: Nothing found”. The site is currently taken offline, and both PhishDestroy and DiscordPhishing have listed it on their blocklists. Additional intelligence indicates that the domain appears in sixteen AlienVault OTX pulses and is present on two other security blocklists.

VirusTotal scans show that sixteen of ninety‑three antivirus engines flagged the domain, and Gridinsoft assigned a trust score of zero out of one hundred, suggesting a high likelihood of malicious intent. The domain is classified as a gaming‑related scam that impersonates the Steam brand. The combination of a recent registration date, dedicated hosting in a single Finnish ASN, lack of SSL, and multiple vendor detections aligns with typical infrastructure used for brand‑impersonation campaigns. While the 404 response prevents direct observation of malicious content, the presence of the domain on multiple blocklists and the low trust score provide sufficient evidence for defensive action.

Analysts should continue to monitor the IP address for any re‑activation and add the domain to URL filtering and sinkhole lists. Network defenders are advised to block outbound connections to 185.106.93.161 and to enforce strict validation of Steam‑related URLs, especially those that deviate from official steamcommunity.com domains. Threat hunters should correlate any internal logs referencing this domain with the listed blocklists and consider it a high‑confidence indicator of a gaming‑scam campaign targeting Steam users. Further investigation is required to determine whether the domain ever served a phishing page before being taken offline, but current data justifies proactive mitigation.