https://www.steam.muratcanoksum.com/login

Impersonating Steam

Intent: Credential collection

• Domain is not operated by Steam
• TLS certificate has no organization information
• Mail servers do not match Steam's known infrastructure
• Domain not registered through Steam's usual registrar
• SPF record does not reference Steam's infrastructure

Steam-branded login form asking for email and password