Is steampunk.xyz safe?

No. MalwareAnalyzer scanned steampunk.xyz on 22 Aug 2026 and returned a suspicious verdict with a score of 45 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was steampunk.xyz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

steampunk.xyz - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned steampunk.xyz and returned a suspicious verdict (score 45), categorised as phishing. The page resolved to 44.232.173.249 on Amazon.com, Inc. in US. 4 domains and 3 IPs were contacted, over 35 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 45) · Confidence 54%
Scanned URL: https://steampunk.xyz/
Domain: steampunk.xyz · IP: 44.232.173.249 · AS16509 · US
Server: openresty
Page title: SteamPunk.xyz for sale | Spaceship.com
HTTP status: 200 · text/html
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 20 05: · subject CN=steampunk.xyz
HTTP requests captured: 35 · outgoing links: 5
Scan tier: standard · observed 2026-08-22 11:11:05 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates steam (combosquat)
Abuse-heavy TLD .xyz
Certificate issued < 48h ago

Contacted infrastructure

44.232.173.249 - AS16509 Amazon.com, Inc. (United States)
52.40.42.113 - AS16509 Amazon Technologies Inc. (United States)

Observed indicators

steampunk.xyz
forsale.spaceship-cdn.com
www.spaceship.com
marketplacestats.service.spaceship.com
44.232.173.249
52.40.42.113
172.66.166.73
https://steampunk.xyz/
https://forsale.spaceship-cdn.com/
https://forsale.spaceship-cdn.com/static/latest/5.latest/main.css
https://forsale.spaceship-cdn.com/static/assets/fonts/d859cbb66446191425f0.woff2
https://forsale.spaceship-cdn.com/static/assets/fonts/355eece7fa95947e67a5.woff2
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/images/bg-1_dark.svg
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/images/bg-1_dark_mobile.svg
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-57x57.png
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-60x60.png
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-72x72.png
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-76x76.png
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-114x114.png
https://forsale.spaceship-cdn.com/static/latest/5.latest/assets/fonts/apple-touch-icon-120x120.png

Questions about steampunk.xyz

Is steampunk.xyz safe?: No. MalwareAnalyzer scanned steampunk.xyz on 22 Aug 2026 and returned a suspicious verdict with a score of 45 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was steampunk.xyz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of steampunk.xyz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan