store[.]poweredartitem[.]com

This domain was registered on October 19 2025 through Name SRS AB and resolves to the IP address 94.74.164.255, which belongs to AS212238 Datacamp Limited in Germany. Authoritative nameservers are dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com. No TLS certificate is presented, indicating the site is served over plain HTTP only. The only observed page title is "Steam Workshop::AK-47 | Eternal Decay", suggesting the content was crafted to attract Steam users interested in workshop items.

VirusTotal analysis shows that 14 of 95 scanning engines have flagged the domain as malicious. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist and is blocked by the PhishDestroy service. The domain is currently reported offline. The available evidence points to a generic phishing campaign targeting Steam users, but the precise credential‑harvesting mechanism or payload has not been publicly disclosed.

The combination of an unencrypted endpoint, a zero trust score, multiple vendor detections, and blocklist inclusion indicates a high likelihood of malicious intent. Defenders should add the IP 94.74.164.255 to network block lists, enforce DNS filtering for store.poweredartitem.com, and monitor traffic to the associated regway nameservers. Ongoing observation is advised in case the domain is re‑activated, and any new URLs should be submitted to threat‑intel platforms for rapid correlation.