Phishing detection: steamcommunity-balanceworkshop.shop
Steam Investigate
Domain
steamcommunity-balanceworkshop.shop0 CT hosts on apex
IP
104.21.73.12
URL
https://steamcommunity-balanceworkshop.shop
Cert
WE1
Phishunt analysis Beta
28
low suspicionheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +3.7 Brand in domain label
- +2.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.7 Suspicious TLD
- +0.6 Long domain
- +0.3 Free CA
- +0.1 Hyphens
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Steam Community using a lookalike domain under the .shop TLD, hosted behind Cloudflare. It appears designed to harvest Steam account credentials or manipulate wallet balances. Google Safe Browsing has flagged it as social engineering.
Brand in domain labelGoogle Safe BrowsingKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-02 · confidence 72%
Domain & Network
Whois
Network
IP
104.21.73.12
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
WE1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise