store[.]workshopmodcharts[.]com

The domain store.workshopmodcharts.com was registered on 28 October 2025 through Web Commerce Communications Limited and currently resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is hosted on Cloudflare’s network and uses the nameservers bruce.ns.cloudflare.com and rayne.ns.cloudflare.com. No SSL certificate is presented, indicating that the site does not provide encrypted transport. VirusTotal scans have returned 15 positive detections out of 95 security vendors, confirming that a substantial portion of the security community classifies the domain as malicious.

It appears on at least one public blocklist and is specifically listed by PhishDestroy as a known threat. Gridinsoft assigns the domain a trust score of 0 out of 100, reinforcing the assessment of high risk. The page title observed during the brief analysis reads "Steam Workshop::AUG | Poseidon v1," and the domain is explicitly noted to impersonate the Steam brand, fitting the categorisation of a gaming‑related brand impersonation scam. The site’s current HTTP status is offline, which may be a temporary takedown or an intentional shutdown by the operators.

While the available data confirms the infrastructure, hosting, and detection profile, the exact content served by the site remains unverified because the page was not retrieved. Defenders should block the domain and its associated IP address at perimeter firewalls, update URL filtering and DNS threat intelligence feeds, and monitor for any reuse of the Cloudflare‑hosted IP range in future campaigns. Continuous observation of the registrar and any new sub‑domains is advised, as threat actors often recycle infrastructure. Incident response teams should also consider the domain’s presence on blocklists and the high vendor detection count as strong indicators for immediate containment.