login[.]workshopratemods[.]com
Análisis de phishing y seguridad de login.workshopratemods.com
“サインイン”
login.workshopratemods.com — error del servidor (HTTP 502). Suplantación de marca: Cs2; Tipo de estafa: Gaming Scam. Resumen de las pruebas: VirusTotal 16/91 (BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; Google Safe Browsing flagged; Spamhaus DBL_SPAM; PhishDestroy score 95/100. Registrador: Global Domain Group.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
login.workshopratemods.com is a subdomain of workshopratemods.com. PhishDestroy first observed the hostname on Dec 29, 2025. Stored content metadata identifies Cs2 as the apparent target. The captured page title is “サインイン”. Page analysis recorded additional brand references to Dhl, Mexc, OKX, Steam, and Valve. Stored page analysis classifies the content as gaming scam. Current evidence score: 95/100 (critical).
Positive findings are stored from 5 sources: VirusTotal, Google Safe Browsing, Spamhaus DBL, URLQuery, and URLScan. VirusTotal recorded 16 detections among 91 engines: BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Google Safe Browsing, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, VIPRE, Webroot on Aug 1, 2026 at 02:43 UTC. Google Safe Browsing flagged the domain: Social Engineering on Feb 25, 2026 at 20:32 UTC. Spamhaus DBL: DBL_SPAM on Jul 14, 2026 at 14:32 UTC. URLQuery recorded 100 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Steam and assigned phishing as its category on Jul 29, 2026 at 03:29 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. PhishStats returned no feed match on Mar 1, 2026 at 17:08 UTC.
HTTP 502 server error was recorded on Aug 7, 2026 at 22:14 UTC. Registration records for the registrable domain workshopratemods.com list Global Domain Group LLC as the registrar and Dec 28, 2025 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 185.107.74.44 on AS215826 (Partner-Hosting-LTD Partner Hosting LTD, GB). The IP and ASN identify shared CDN edge infrastructure; the origin server is not established by this address. The stored server header is nginx. DOM analysis on Apr 23, 2026 at 07:22 UTC returned 10/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.
The content indicators and 5 positive source findings support the current Cs2-themed account-login phishing classification.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Registration: workshopratemods.com
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain workshopratemods.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.