store[.]workshopscommunityratemods[.]com

Analysis of store.workshopscommunityratemods.com indicates that the domain was registered on July 26, 2026 through Global Domain Group LLC and is currently resolving to the IP address 188.114.97.3. The authoritative name servers are listed as mack.ns.cloudflare.com and perla.ns.cloudflare.com, confirming that the domain is hosted behind Cloudflare’s DNS infrastructure. VirusTotal records show that the domain was scanned by ninety‑one commercial and open‑source security vendors; none of the scanners raised a detection at the time of analysis. While the absence of detections does not constitute evidence of benign behavior, it demonstrates that the domain has not yet been flagged by the majority of automated malware and URL reputation engines.

The domain appears on a single threat blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one independent anti‑phishing platform has identified it as malicious. No public Safe Browsing, Open Threat Exchange, or similar reputation feeds have reported additional observations for this host. No SSL certificate details, HTTP response codes, page titles, or content snapshots have been disclosed, leaving the exact phishing lure or targeted brand unknown.

Consequently, the primary confidence in the threat assessment derives from the recent creation date, the presence on a known phishing blocklist, and the association with a Cloudflare‑protected IP that is frequently leveraged by abuse actors. Defenders should consider adding the domain and its resolved IP address to outbound filtering rules, monitor DNS queries for the domain, and flag any authentication attempts that involve the host. Ongoing observation of the IP reputation and periodic re‑scans with VirusTotal or comparable services are recommended to capture any future shifts in detection status.