store[.]workshopcommunityhubs[.]com
“Steam Workshop::FAMAS | Fleur-de-Chevalier”
साक्ष्य सारांश
This domain is flagged for elevated-risk credential phishing targeting Steam users. The page title, Steam Workshop::FAMAS | Fleur-de-Chevalier, mimics legitimate Steam Workshop content to deceive users into submitting account credentials or downloading malicious files. Analysis indicates the domain is specifically designed to exploit trust in the Steam platform, a common tactic in gaming-related phishing campaigns. Infrastructure analysis reveals the domain was registered on March 11, 2026, through Global Domain Group LLC. It resolves to IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.) with no SSL certificate present. VirusTotal detections show 21 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently offline, though prior activity was recorded by PhishDestroy. Mitigation steps for this threat type include blocking the domain and its resolving IP (188.114.96.3) at the network perimeter. Organizations should monitor for credential theft attempts, particularly those involving Steam accounts, and enforce multi-factor authentication for gaming platforms. End users should verify domain authenticity before entering credentials and report suspicious links to platform security teams. Given the domain's recent creation and lack of SSL, additional scrutiny is warranted for similar domains registered via the same registrar.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260311-7C5852- कैप्चर किए गए पेज का शीर्षक
- Steam Workshop::FAMAS | Fleur-de-Chevalier
कानूनी आधार
प्रमाण का पूरा पाठ
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af69.js?v=vuq6pxaayowe&l=english&_cdn=akamai |
audit | Hunting_JS_WebAssembly |
| Nextron YARA rules | i.imgur.com/ibrk6tk.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | i.imgur.com/drh6pyn.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
Registration: workshopcommunityhubs.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain workshopcommunityhubs.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of store.workshopcommunityhubs.com · checked Mar 11, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।