store[.]workshopartisthub[.]com

This domain, store.workshopartisthub.com, is flagged as a brand impersonation threat targeting Counter-Strike, a widely recognized gaming franchise. Analysis of the page title, "Steam Workshop::Famas | The Legend of Marble Mountain (Light)", indicates an attempt to deceive users by mimicking legitimate Steam Workshop content, likely to distribute malicious payloads or harvest credentials under false pretenses. No crypto drainer kit signatures were observed, but the domain’s structure and branding align with known impersonation tactics used in gaming-related fraud campaigns.

Infrastructure analysis reveals the following technical indicators: the domain was registered on December 05, 2025, through MAT BAO CORPORATION and resolves to IP address 172.67.180.151, hosted on Cloudflare’s network (AS13335). VirusTotal detection shows 14 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and no SSL certificate was detected. Google Safe Browsing status could not be confirmed at the time of analysis, but the absence of encryption further elevates risk for potential victims.

As of the latest assessment, store.workshopartisthub.com has been taken offline, reducing immediate exposure. However, the infrastructure remains a residual risk, as threat actors may reactivate or repurpose the domain for future campaigns. Organizations and users are advised to monitor for related indicators, including the IP address and registrar details, and implement blocklist updates to prevent access. Given the domain’s association with gaming fraud, targeted awareness campaigns for Counter-Strike and Steam communities are recommended to mitigate social engineering risks.