login[.]cs-finals[.]com

The domain login.cs-finals.com is identified as a high-risk brand impersonation site currently offline. Analysis confirms it specifically targets Steam, a widely used digital distribution platform for gaming. The page title 'Anmelden,' German for 'Log In,' suggests an attempt to deceive users into entering credentials under the pretense of a legitimate Steam authentication process. Infrastructure analysis reveals the domain was registered through REGRU-RU on December 23, 2025, and resolves to the IP address 188.114.97.3, hosted on AS13335 Cloudflare, Inc. in the United States. The domain lacks an SSL certificate, a common red flag in phishing operations. Detection metrics indicate it is flagged by 19 of 95 security vendors on VirusTotal and appears on one security blocklist. Google Safe Browsing has also classified this domain as phishing, reinforcing its malicious classification. As of the latest assessment, login.cs-finals.com has been taken offline. However, users who may have interacted with the domain are advised to immediately reset their Steam account credentials and enable multi-factor authentication. Organizations should monitor network logs for connections to 188.114.97.3 and update blocklists to include this domain and associated IP. Vigilance is recommended, as similar domains may emerge using comparable naming conventions or infrastructure.