Security Scan Report: steamrefund.com

Redirected to:
https://suspended.hawkhost.com/
Bot Protection Detected

This website is protected by Cloudflare bot protection. The page may show differently for regular users.

Submitted: Sep 25, 2026, 11:12:39 PMCompleted: Sep 25, 2026, 11:14:38 PMpubliccompleted

This website contacted 5 IPs in 1 country across 3 domains to perform 15 HTTP transactions. The main domain is suspended.hawkhost.com and was registered 17 years ago.

Submitted URL: https://steamrefund.com

Effective URL:

https://suspended.hawkhost.com/
Redirected

AI Security Verdict

Low Risk

Confidence: 40%

3
Risk Score

Capture is only a Cloudflare bot-protection wall ending on a host-suspension notice, so page content is unverified; the site's 'Steam refund' branding on a non-official, unranked domain plus account suspension warrants caution.

Risk Factors (4)
Hosting account for the scanned site is suspended (suspended.hawkhost.com landing), indicating the host disabled the account
Domain name advertises a third-party 'Steam refund' service on a non-official Valve/Steam domain
Scanned domain is unranked / absent from Cisco Umbrella top 1M
Real page content inaccessible behind a bot-protection challenge — actual behaviour unverified
Safety Factors (5)
No Indicators of Compromise matched the page or its loaded resources
No JavaScript malware (YARA) patterns and no high-precision native-YARA hits
No network-level IDS alerts
No known malicious kit identified in the analyst-vetted kit roster
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Domain Name Analysis

Domain 'steamrefund.com' uses the commercial generic top-level domain (.com). Its registrable label 'steamrefund' stretches across 11 characters with four vowels and 7 consonants. Tokenizing the label suggests 2 words: steam, refund. Expect 5.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://steamrefund.com

Page Load Overview

8.24s
Total Load Time
962 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:398 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software75% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
75%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.20.2.192Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3198.252.106.241Los Angeles, California, United States
AS20068Hawk Host Inc.
3104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.128.114Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
155--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14DD2DB73E714225B25238E9F7AE0FB84313191819E1563B5F9B275B48BC899227B33C3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ZmYTSWdSZBTx3T/VcxkO2IknB7xIE80GzAOW:qhc4xILHrW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30637:mElIrDIEpILEWIEiAA8AAMiABSEloo0IaTJlKgWTKpboQwEdvUCBFCQE0BQBBIAihSA5gIo8HCGTCVDhiAgNmaFCRQAOAASY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:efc7c3c7c7c3ffff
Perceptual Hash:b038cec7c3cd64cc
Difference Hash:089e161e1e16100c
Wavelet Hash:3f03030703033f03
Color Hash:#e0de6c

Other Hashes

Crop Resistant:089e161e1e16100c

Scan History

Scan history not available

Unable to load historical scan data