store[.]workshopmodsrating[.]com

This domain, store.workshopmodsrating.com, is currently flagged as an active brand impersonation threat specifically targeting Counter-Strike, a widely recognized gaming franchise. Analysis confirms the domain is designed to deceive users by mimicking legitimate Steam Workshop content, as evidenced by the page title 'Steam Workshop::MAC-10 | Poison Revenge [TOXIC]', which aligns with in-game item naming conventions to enhance credibility. Infrastructure analysis reveals multiple high-risk indicators: the domain is flagged by 21 of 95 security vendors on VirusTotal, registered through Global Domain Group LLC, and hosted on Cloudflare infrastructure (IP 188.114.96.3, AS13335). Created on December 22, 2025, the domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate, issued by Google Trust Services (WE1), provides a superficial layer of legitimacy but does not mitigate the underlying threat. The use of Cloudflare's content delivery network further complicates attribution and takedown efforts, as it obscures the true origin of the malicious content. Current status remains active, with elevated risk to end-users, particularly those engaged in the Counter-Strike community. Immediate mitigation steps are recommended: network-level blocking of the domain and its resolving IP (188.114.96.3), validation of all in-game item downloads through official Steam Workshop channels, and monitoring for similar impersonation patterns using the domain's registration details (Global Domain Group LLC) as a pivot point. Users should be advised to verify URLs before interaction and report any suspicious activity to relevant security teams for further analysis.