Is en.steamnd.org safe?

No. MalwareAnalyzer scanned en.steamnd.org on 20 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was en.steamnd.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

en.steamnd.org - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned en.steamnd.org and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 172.66.3.8 on Cloudflare, Inc. in US. 4 domains and 4 IPs were contacted, over 25 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 33) · Confidence 39%
Scanned URL: https://en.steamnd.org/
Domain: en.steamnd.org · IP: 172.66.3.8 · AS13335 · US
Server: cloudflare
Page title: ConnectYourDomain Error | Wix.com
HTTP status: 404 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 17 20: · subject CN=en.steamnd.org
HTTP requests captured: 25 · cookies set: 1 · outgoing links: 4
Scan tier: standard · observed 2026-08-20 03:40:05 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates steam (combosquat)
Certificate issued < 48h ago

Detected technologies

Cloudflare
Fastly
React

Contacted infrastructure

172.66.3.8 - AS13335 Cloudflare, Inc. (United States)
162.159.143.12 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

en.steamnd.org
www.wix.com
static.parastorage.com
frog.wix.com
172.66.3.8
162.159.143.12
18.67.110.109
35.175.0.6
https://en.steamnd.org/
https://www.wix.com/favicon.ico
https://static.parastorage.com/polyfill/v2/polyfill.min.js?features=default,es6,es7,es2017&flags=gated&unknown=polyfill&rum=0
https://static.parastorage.com/unpkg-semver/fedops-logger@5/fedops-logger.bundle.min.js
https://static.parastorage.com/unpkg-semver/header-footer-provider/app.bundle.min.js
https://static.parastorage.com/unpkg/react@18.2.0/umd/react.production.min.js
https://static.parastorage.com/unpkg/react-dom@18.2.0/umd/react-dom.production.min.js
https://static.parastorage.com/services/classic-error-pages-statics/1.98.0/app.min.css
https://static.parastorage.com/unpkg/@wix/wix-fonts@1.14.0/media/WixMadeforTextVF_W_Wght.8022447a.woff2
https://static.parastorage.com/unpkg/@wix/wix-fonts@1.14.0/media/WixMadeforDisplayVF_W_Wght.ab35e4df.woff2
https://static.parastorage.com/unpkg/@wix/wix-fonts@1.14.0/madefor.min.css
https://static.parastorage.com/unpkg/@wix/wix-fonts@1.14.0/madeforDisplay.min.css

Questions about en.steamnd.org

Is en.steamnd.org safe?: No. MalwareAnalyzer scanned en.steamnd.org on 20 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was en.steamnd.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of en.steamnd.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan