Security Report: steamcommunity-com-profiles-76561198036-friends-t4.surge.sh - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5d5e79cd-6939-498b-bad5-ae1a14e02fed Domain and IP registration (RDAP)/api/v1/rdap/5d5e79cd-6939-498b-bad5-ae1a14e02fedHow often this domain was scanned/api/v1/domain/stats/steamcommunity-com-profiles-76561198036-friends-t4.surge.sh Scan history for this domain/api/v1/domain/history/steamcommunity-com-profiles-76561198036-friends-t4.surge.sh?limit=15

This website contacted 8 IPs in 3 countries across 5 domains to perform 15 HTTP transactions. The main domain is surge.sh and was registered 12 years ago.

Submitted URL: https://steamcommunity-com-profiles-76561198036-friends-t4.surge.sh/?r=dg2foy

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Fake Госуслуги security-alert page on a surge.sh subdomain disguised as a Steam profile URL; impersonates the Russian government portal and routes visitors to fake support via ngrok/trycloudflare tunnels.

Risk Factors (5)

Impersonation of a different entity's brand (Госуслуги / Минцифры России) on a non-official domain

Deceptive hostname imitating a Steam Community profile URL

Fake 'suspicious login / unsafe device' security alert with urgency and a support call to action

Cross-origin beacons to ngrok-free and trycloudflare tunnel endpoints

Free instant-publish hosting subdomain of unknown creation age

Domain age information unavailable

Details

Page Title

Госуслуги — Личный кабинет

Scan Type

public

Domain Name Analysis

You're looking at domain 'steamcommunity-com-profiles-76561198036-friends-t4.surge.sh' on the .sh country-code top-level domain, featuring subdomain 'steamcommunity-com-profiles-76561198036-friends-t4'. The second-level label 'surge' is 5 characters long split between two vowels and three consonants. Word splitting yields 1 word: surge. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.17s

Total Load Time

39 KB

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:80%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:ru

Text Length:662 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service82% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

82%

phishing scam

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	138.68.112.220	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
1	104.16.231.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	18.158.249.75Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	188.166.132.94	Amsterdam, North Holland, Netherlands	AS14061DigitalOcean, LLC
1	104.16.230.132Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	18.192.31.165Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	3.125.102.39Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
15	8	-	-