steam-games[.]top

Analysis of steam-games.top shows a recently registered domain that was used to impersonate the Steam gaming platform. The domain was created on February 21, 2026 and is registered through Gname.com Pte. Ltd. Its authoritative name servers are a.share-dns.com. and b.share-dns.net. DNS resolution points to the IP address 154.26.138.93, which is allocated to Contabo Asia Private Limited in Singapore under ASN 141995. No TLS certificate was observed for the host, indicating that any web service would have been delivered over plain HTTP.

The site’s page title, when captured, was simply "App", providing no additional context about the content. Threat intelligence indicates the domain was flagged by PhishDestroy and appears on one external security blocklist. VirusTotal scans show that seven of ninety‑five antivirus and URL‑reputation engines marked the domain as malicious, reinforcing the suspicion of abuse. The hosting provider and IP location suggest a low‑cost bulk hosting environment often leveraged for large‑scale scam campaigns. The domain is currently offline, having been taken down after detection.

Defenders should continue to block the domain and its associated IP address, add the host to internal URL filtering lists, and monitor for any newly created domains that resolve to the same IP range or share the same registrar and name‑server pattern. Because the site is no longer reachable, there is limited visible payload or credential‑harvesting behavior to evaluate, and the exact phishing landing page cannot be confirmed. However, the combination of brand impersonation of Steam, the “Gaming Scam” classification, the presence on a security blocklist, and multiple vendor detections provides sufficient evidence to treat steam-games.top as a confirmed malicious actor targeting Steam users. Ongoing surveillance of related infrastructure is recommended to pre‑empt future re‑hosting attempts.