steamcomumnity[.]com

PhishDestroy identifies steamcomumnity.com as an active phishing domain designed to mimic the legitimate Steam Community login page, harvesting user credentials for Steam accounts. The domain is classified under generic_phishing, a high-risk category targeting unsuspecting Steam users who may confuse it for the authentic site. This threat specifically involves credential theft, where victims are lured to a fake login portal and prompted to enter their Steam credentials, which are then harvested for malicious use such as account takeover or credential stuffing attacks. The high similarity in the domain name to the legitimate steamcommunity.com further increases the risk of successful deception. This domain was flagged after security researchers detected its presence on three active blocklists: OpenPhish, PhishingArmy, and DiscordPhishing. The domain was registered through Global Domain Group LLC and resolves to the IP address 62.60.226.105. Its SSL certificate is issued by Let’s Encrypt, which does not validate the legitimacy of the domain itself. Registered on April 01, 2026, the domain currently shows 0 detections out of 95 on VirusTotal, indicating a low immediate detection rate despite its malicious intent. While it lacks widespread recognition, the combination of recent registration, low detection score, and presence on multiple blocklists suggests an emerging and active threat. Users and security teams should immediately block access to steamcomumnity.com at the network and browser levels to prevent credential theft. Avoid entering any login credentials on this domain. If a user suspects they have entered their Steam credentials on this site, they should change their Steam password immediately and enable two-factor authentication (2FA). Report any interaction with this domain to Steam’s support and local cybersecurity teams. Always verify domain spellings and use bookmarked official links for Steam logins to prevent falling victim to similar credential-phishing schemes.