communitymarketsdevs[.]com

Communitymarketsdevs.com targets users by impersonating the Steam Workshop platform. The domain's page title, "Stеаm Workshop::AWP | Ancient Heritage," suggests an attempt to lure users interested in gaming content. Although the domain is now offline, it was flagged as malicious by 14 out of 95 vendors on VirusTotal, indicating significant detection across security platforms.

Registered through GRANSY S.R.O D/B/A SUBREG.CZ, communitymarketsdevs.com was hosted on IP address 94.74.164.255 in Germany under ASN AS212238, managed by Datacamp Limited. Despite its current offline status, the domain was operational long enough to attract attention and be listed on one public blocklist, specifically by PhishDestroy. This highlights its potential threat level during its active period.

The absence of an SSL certificate might have been a red flag for some users, but phishing domains often exploit the initial hours or days post-registration when security solutions are still updating their databases. PhishDestroy's early detection on October 17, 2025, underscores the importance of proactive threat intelligence in identifying and mitigating such threats before they cause widespread harm.