other · US-WA

Steam

Valve Corporation

Game distribution platform.

Primary official domain
steampowered.com
Reviewed official domains
2 (directory review; organization has not verified)
Directory source
DomainSpoof directory · Suggest a correction
Matching domains, 30 days
13
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
15
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 0/10 lookups · checked 2026-10-18 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
steamcommunitysteampowered
Label aliases
Steam Community · steampowered · Steam
Official domains
steampowered.com · steamcommunity.com (all)
Generated spellings
301 tracked · 4 observed somewhere · 297 not observed (all)

Official domains and email policies

Domains reviewed as belonging to Steam. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.

DomainRelationshipEvidenceDMARC policyPolicy sourceSPFReportingLast check
steampowered.com
primaryReviewed 2026-10-18
DomainSpoof directory (seed)rejectDirect-all · 0/10 lookupsAggregate reports requested (rua)2026-10-18 22:03 UTC
Records and check details

Published records

DMARC (_dmarc.steampowered.com)
v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s; pct=100; rua=mailto:…@rep.dmarcanalyzer.com; ruf=mailto:…@for.dmarcanalyzer.com; fo=1
SPF (steampowered.com)
v=spf1 ip4:208.64.202.32/27 ip6:2602:801:f000:1234::/64 ip4:208.64.202.128/27 ip6:2602:801:f00c:1234::/64 ip4:208.64.202.192/27 ip6:2602:801:f00f:1234::/64 -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Strict DKIM alignment (adkim=s).
  • Strict SPF alignment (aspf=s).
  • pct=100 is a legacy tag removed by RFC 9989; its effect is receiver-dependent.
  • -all: unlisted hosts fail SPF.
  • 0 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Checked with an earlier assessment that did not validate IP mechanism syntax or resolve a/mx/exists targets; it is re-assessed on the next check.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.steampowered.com: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:03 UTC: DMARC reject; SPF -all

Assessment posture-v1. DNS lookup failures leave the policy unknown.

steamcommunity.com
subsidiaryReviewed 2026-10-18
DomainSpoof directory (seed)rejectDirect-all · 10/10 lookupsAggregate reports requested (rua)2026-10-18 22:03 UTC
Records and check details

Published records

DMARC (_dmarc.steamcommunity.com)
v=DMARC1; p=reject; rua=mailto:…@rep.dmarcanalyzer.com; ruf=mailto:…@for.dmarcanalyzer.com; pct=100; sp=reject; adkim=s; aspf=s; fo=1;
SPF (steamcommunity.com)
v=spf1 mx include:_netblocks.mimecast.com -all
DKIM
Unknown (no known selector). DKIM use requires a known selector or message to assess; a published key alone cannot confirm signing.

Interpretation

  • p=reject: receivers are asked to reject failing mail.
  • Strict DKIM alignment (adkim=s).
  • Strict SPF alignment (aspf=s).
  • pct=100 is a legacy tag removed by RFC 9989; its effect is receiver-dependent.
  • -all: unlisted hosts fail SPF.
  • 10 DNS-querying terms (include, a, mx, ptr, exists, redirect), counted recursively; the limit is 10.
  • Checked with an earlier assessment that did not validate IP mechanism syntax or resolve a/mx/exists targets; it is re-assessed on the next check.

DMARC discovery (RFC 9989 tree walk)

  1. _dmarc.steamcommunity.com: ok, 1 DMARC record

Recent checks

  • 2026-10-18 22:03 UTC: DMARC reject; SPF -all

Assessment posture-v1. DNS lookup failures leave the policy unknown.

“Not checked”: no check yet. “Lookup failed”: DNS result unknown. Report mailbox names are redacted.

Reports on official domains appear under “Official assets with reports” on the Reported matches tab.