https://steam.money/

Impersonating Steam

Intent: Data collection

• Domain is not operated by Steam
• TLS certificate has no organization information
• TLS certificate was issued very recently
• Mail servers do not match Steam's known infrastructure
• Domain not registered through Steam's usual registrar
• SPF record does not reference Steam's infrastructure

payment form to top up Steam account balance with login, amount, email, and payment method inputs