corte-montiego[.]icu

The domain corte-montiego.icu was registered on May 31, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and is presently taken offline. DNS resolution points to 104.21.87.15, an address owned by Cloudflare, Inc. (AS13335) and hosted in the United States. Both authoritative nameservers, keaton.ns.cloudflare.com and ziggy.ns.cloudflare.com, belong to Cloudflare’s DNS service, indicating the infrastructure is leveraged for rapid content delivery or concealment. No TLS certificate was observed for the domain, meaning traffic would be unencrypted if the site were active.

The page title returned by the server, "Iniciar sessão," is Portuguese for "Log in," and aligns with the reported brand impersonation of Steam, though the content of the page has not been examined. Reputation services assign extremely low trust scores: Scamadviser rates the domain 1 / 100 and Gridinsoft 0 / 100. PhishDestroy has listed the domain as blocked, and Google Safe Browsing flags it for social engineering. VirusTotal analysis shows that 16 of 95 scanning engines flagged the domain, reflecting a consensus of malicious behavior.

AlienVault OTX cites the domain in two threat‑intelligence pulses, and it appears on one additional security blocklist. The evidence collectively points to a high‑risk Steam brand‑impersonation operation. Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms because the site content was not captured before takedown. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any resurgence of the same host or associated IP range, and enforce multi‑factor authentication for Steam accounts to mitigate credential compromise.