Steam

Gaming United Statessteampowered.comRank 27 of the most impersonated
Cert findings · 24 h
1
Cert findings · 7 days
5
4 on phishing hosts · 1 on Spamhaus DROP
Registered lookalikes
718
75 listed by a source or an address list
Official domains
27
verified from Steam's own sites and records

Certificate findings for Steam

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Steam's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 7 findings, grouped by hostname

  1. steampowered.org US · AS46475 · Limestone Networks, Inc.2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 22 y ago
    DetailsHide
    Hostname
    steampowered.org
    First seen
    2026-11-05 09:01 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 69.162.80.57.
    1. Phishing-host list fetched with the address
    2. Resolved to 69.162.80.57
    Brand
    Steam
    Addresses
    69.162.80.57 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    69.162.80.60 · United States · AS46475 LIMESTONENETWORKS - Limestone Networks, Inc.
    Domain
    steampowered.org
    Registered
    2004-11-15 · GoDaddy.com, LLC
    MX
    Receives mail at mail.h-email.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:36 UTC

    Suggest a correction

  2. www.counterstrike2.com.pl FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    www.counterstrike2.com.pl
    First seen
    2026-11-01 14:37 UTC
    First published
    2026-11-01 15:18 UTC
    DNS
    Resolves · checked 2026-11-04 15:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.32.10.205.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.32.10.205
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 13:34 UTC to 2027-01-30 13:34 UTC
    Logged 2026-11-01 14:32 UTC in Google ParcelYard2027h1, entry 556,578,838
    SHA-256 34f40a378637955a69c7a99f5b5bf77471facc8dd7fc7702e206dd4d3eaa702a
    Public key SHA-256 e33e1adbc3014a242bd257a0cde215f8ed96f40bd401b83e06cf1a4aa5b36cf2
    Brand
    Steam
    Addresses
    213.32.10.205 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.32.10.205): a cloud provider. It rents servers and addresses to its customers.
    Domain
    counterstrike2.com.pl
    Registered
    2026-08-21 · OVH SAS
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  3. counterstrike2.com.pl FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 3 mo ago
    DetailsHide
    Hostname
    counterstrike2.com.pl
    First seen
    2026-11-01 13:41 UTC
    First published
    2026-11-01 14:12 UTC
    DNS
    Resolves · checked 2026-11-04 14:20 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 213.32.10.205.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 213.32.10.205
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-01 12:41 UTC to 2027-01-30 12:41 UTC
    Logged 2026-11-01 13:39 UTC in DigiCert Sphinx2027h1, entry 328,881,116
    SHA-256 7f7c6b22981634554576317dc2041961c430e6c07d7c68625b66145ebe04a904
    Public key SHA-256 0b3cbfc9bc61ae9bc218422af2352850b1fbe7ad5e32c4c6334935b8f690553f
    Brand
    Steam
    Addresses
    213.32.10.205 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.32.10.205): a cloud provider. It rents servers and addresses to its customers.
    Domain
    counterstrike2.com.pl
    Registered
    2026-08-21 · OVH SAS
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  4. steampowered988989.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 7 d ago
    DetailsHide
    Hostname
    steampowered988989.com
    First seen
    2026-10-31 12:52 UTC
    First published
    2026-10-31 13:42 UTC
    DNS
    Resolves · checked 2026-11-04 13:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 62.60.226.75.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 62.60.226.75
    4. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 62.60.226.75.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 62.60.226.75
    3. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-31 11:49 UTC to 2027-01-29 11:49 UTC
    Logged 2026-10-31 12:47 UTC in Geomys Tuscolo2027h1, entry 419,961,127
    SHA-256 0062b8af454c4bd9a74583b8996cc8fcb64b9ebc5bf0f9b57193b93a3dfef4b9
    Public key SHA-256 b75e1b16b4f422a03d158aecbecb4b5f716282aaad29419b15dec99e4c151d84
    Brand
    Steam
    Addresses
    62.60.226.75 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    steampowered988989.com
    Registered
    2026-10-29 · Dominet (HK) Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:34 UTC

    Suggest a correction

  5. www.counterstrike2.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    www.counterstrike2.fr
    First seen
    2026-10-27 23:36 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 54.36.91.62.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 54.36.91.62
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-27 22:36 UTC to 2027-01-25 22:36 UTC
    Logged 2026-10-27 23:34 UTC in Google ParcelYard2027h1, entry 479,278,297
    SHA-256 84118c660cc35550881efaaf912561668593f9a1f66ba204356937cbaa6b2ad0
    Public key SHA-256 068701e5e4789d342508f08f00ce13b2b8e31955eb02652c984464cd217a1bd0
    Brand
    Steam
    Addresses
    54.36.91.62 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (54.36.91.62): a cloud provider. It rents servers and addresses to its customers.
    Domain
    counterstrike2.fr
    Registered
    2023-03-22 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  6. counterstrike2.fr FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 4 y ago
    DetailsHide
    Hostname
    counterstrike2.fr
    First seen
    2026-10-27 20:01 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 54.36.91.62.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 54.36.91.62
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-27 19:01 UTC to 2027-01-25 19:01 UTC
    Logged 2026-10-27 19:59 UTC in DigiCert Wyvern2027h1, entry 324,313,171
    SHA-256 09335b942df2beab771f9da86b265caafa70ee68c0d2c1a98ae672ef1d15e41c
    Public key SHA-256 e88b3ebc959f332a934843f5450b26eb43e8a460b1ffd28ca1308ad7081dae63
    Brand
    Steam
    Addresses
    54.36.91.62 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (54.36.91.62): a cloud provider. It rents servers and addresses to its customers.
    Domain
    counterstrike2.fr
    Registered
    2023-03-22 · OVH
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Steam when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Gaming

All brands →