steamcounmunity[.]com

steamcounmunity.com, a domain impersonating Steam, has been flagged by 21 out of 93 vendors on VirusTotal for malicious activity. The domain, which was registered with Cosmotown, Inc. and hosted on an IP managed by Cloudflare, Inc., aimed to deceive users into divulging their Steam credentials. Despite its takedown, it initially posed a significant threat to the gaming community.

The domain's creation on February 21, 2026, and subsequent detection by PhishDestroy on February 26, 2026, highlights the rapid deployment of such scams. With a platform risk score of 83 out of 100, it was a high-risk entity during its active period. The phishing site exploited the similarity in its name to the legitimate Steam community site, attempting to trick users into believing they were accessing a genuine Steam service.

Although the site is currently offline, its previous presence on public blocklists such as PhishDestroy and PhishingDB underscores the importance of early detection systems. The domain's SSL certificate was issued by Google Trust Services, which may have lent it an appearance of legitimacy. This case exemplifies how phishing domains can quickly emerge and target specific user groups, in this instance, gamers, before being shut down.