store[.]workshopratesmods[.]com

This domain, store.workshopratesmods.com, operates as a brand impersonation phishing site targeting users of the Counter-Strike gaming platform. The site presents itself as a legitimate Steam Workshop page, specifically displaying the title 'Steam Workshop::AUG | Poseidon v1,' to deceive victims into believing they are accessing authentic Counter-Strike modifications or content. Such impersonation tactics are commonly used to distribute malware, harvest login credentials, or facilitate unauthorized transactions under the guise of trusted gaming services.

Analysis of the domain reveals multiple indicators of malicious activity. The domain was registered on September 08, 2025, through Web Commerce Communications Limited and resolves to the IP address 94.74.164.47, hosted on AS212238 (Datacamp Limited) in Germany. Security vendors on VirusTotal flagged the domain, with 16 out of 95 engines detecting it as malicious. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB, and lacks an SSL certificate, further reducing its legitimacy. The infrastructure and registration patterns align with known phishing campaigns targeting gaming communities.

Users who visited store.workshopratesmods.com should take immediate action to mitigate potential risks. If any credentials were entered, those accounts should be secured by changing passwords and enabling multi-factor authentication. Devices used to access the site should be scanned for malware using updated security tools. Users are also advised to monitor financial transactions for unauthorized activity, as phishing sites of this nature may attempt to capture payment details or install cryptocurrency drainers. Reporting the domain to relevant security teams or gaming platform abuse channels can help prevent further exploitation.