https://steamcounmunity.com/event/winter
104.21.35.141 · Cloudflare, Inc.
Toronto, Canada
205 days
200 · 37.2s
Valid· WE1, Google Trust Services, US
COMPLETED
No KB/IOK detections were recorded for this scan.
technology | entertainment | ecommerce · 4/5/2026
This page at steamcounmunity.com impersonates Steam. The page title and visible branding reference Steam, while the domain name is a misspelled imitation containing 'steam' and intent to clone the Steam UI. The SPA-like page loads Steam assets and uses scripts that render a Steam-like interface, suggesting credential collection via dynamic forms loaded by JavaScript. The domain is not the official Steam domain (store.steampowered.com or steampowered.com) and the SSL cert is valid for the impersonating domain, raising strong impersonation risk.
The site is actively impersonating a major brand. The domain ste amcounmunity.com is a deliberate typosquat designed to mimic Steam, with a page title and UI mirroring Steam’s storefront. The SPA approach and heavy use of Steam assets indicate intent to harvest credentials or other sensitive data through a forged login/participation flow. The absence of an actual login form in static HTML does not reduce risk, as the SPA may render credential fields at runtime. The presence of a new-ish SSL cert and the cloudflare hosting, plus WAF-like behavior, suggests evasive techniques to bypass automated scanners. This demands immediate action to block, suspend, and notify registrars and hosting providers.
Monitor