store[.]workshopvoteshare[.]com

This domain, store.workshopvoteshare.com, was identified as a brand impersonation threat targeting Counter-Strike, classified as a crypto scam. The domain was created on February 21, 2026, and at the time of analysis on July 23, 2026, it was reported as offline. The page title observed was 'Steam Workshop::AK-47 | Unbreakable Bond', which mimics legitimate Steam Workshop content to deceive users. The domain resolved to IP address 23.214.233.226, hosted in the United States under AS16625 (Akamai Technologies, Inc.), indicating use of a reputable content delivery network, which may have aided in evading initial detection. The SSL certificate was issued by DigiCert SHA2 Extended Validation Server CA, a legitimate certificate authority, adding a layer of apparent legitimacy.

Security analysis results are concerning: VirusTotal flagged the domain with 14 out of 95 security vendors marking it as malicious. It appears on one security blocklist, and was blocked by PhishDestroy. Trust scores are extremely low, with Gridinsoft scoring 0 out of 100 and Scamadviser scoring 1 out of 100, reinforcing the malicious assessment. The domain impersonates Counter-Strike, a popular gaming brand, to lure users into a crypto scam, likely involving fraudulent transactions or credential theft. Defenders should ensure that any historical access logs referencing this domain are investigated for potential compromise.

While the domain is currently offline, similar domains may appear under slightly varied names, so monitoring for related patterns is advised. No additional evidence links or OTX data were available for this analysis. The exact method of the crypto scam (e.g., fake giveaways, wallet drainers) is not specified in the available intelligence, but the brand impersonation and low trust scores confirm a high-risk profile. Defenders should block any residual network traffic to this domain and educate users about verifying Steam Workshop URLs directly through official channels.