New Registrations

Steam phishing domains

Newly registered lookalikes - tracked daily


Steam phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
6
New (24h)
0
vs avg
—
About
AIGaming-account-resale target. CSGO / Dota item-trade scams and 'free skins' lures are the typical patterns.
TLDs
.com (3) · .xyz (1) · .dev (1)
Countries
United StatesUnited States (4) · CanadaCanada (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) ▾ URL Screenshot Flags Details
2026-10-07 13:54 2026-10-07 13:54
https://steampowered.xyz
Screenshot of steampowered.xyz Details
2026-10-07 13:53 2026-10-07 13:53
https://steamcommunityc.com
Screenshot of steamcommunityc.com Details
2026-10-05 13:51 2026-10-05 13:51
https://steamcommunitywatch.com
Screenshot of steamcommunitywatch.com Details
2026-10-04 13:49 2026-10-04 13:49
https://steampoweredlegal.com
Screenshot of steampoweredlegal.com Details
2026-10-02 14:34 2026-10-02 14:34
https://steampowered.dev
Screenshot of steampowered.dev Details
2026-10-02 14:33 2026-10-02 14:33
https://steamcommunity.wtf
Screenshot of steamcommunity.wtf Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://steampowered.xyz
Screenshot of steampowered.xyz Details
https://steamcommunityc.com
Screenshot of steamcommunityc.com Details
https://steamcommunitywatch.c…
Screenshot of steamcommunitywatch.com Details
https://steampoweredlegal.com
Screenshot of steampoweredlegal.com Details
https://steampowered.dev
Screenshot of steampowered.dev Details
https://steamcommunity.wtf
Screenshot of steamcommunity.wtf Details

AIHow to verify a real Steam URL

  • Legitimate Steam URLs always end in store.steampowered.com (e.g. www.store.steampowered.com, account.store.steampowered.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Steam.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — Steam has owned store.steampowered.com for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open store.steampowered.com from your browser bookmark or type the domain manually.
  • Real Steam pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.