store[.]workpoweredshopitem[.]com

The domain store.workpoweredshopitem.com poses an elevated risk of brand impersonation, specifically targeting the CS2 brand. This threat can lead to unauthorized access to user credentials, financial loss, and reputational damage for both users and the brand.

Analysis indicates that the domain was created on November 05, 2025, and is registered through REGRU-RU. The domain resolves to the IP address 188.114.97.3, which is located in the United States and associated with AS13335 Cloudflare, Inc. Notably, 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The domain appears on two security blocklists: PhishDestroy and PhishingDB. The absence of an SSL certificate further diminishes the trustworthiness of the site, potentially exposing users to man-in-the-middle attacks and data interception.

To mitigate the risks associated with this brand impersonation threat, users should avoid clicking on any links or entering credentials on pages related to store.workpoweredshopitem.com. Organizations should update their threat intelligence feeds to include this domain and IP address, and implement web filtering solutions to block access to the site. Security awareness training should be reinforced to educate users about the signs of brand impersonation and the importance of verifying URLs and SSL certificates before engaging with any online content.