login[.]workshopcommunityrare[.]com

This report analyzes the domain login.workshopcommunityrare.com, which was identified as a phishing threat. The site's page title, "Inloggen," and its impersonation of the brand "cs2" indicate it was designed as a fraudulent login page. The threat posed is credential theft, as the site likely aimed to capture user passwords and account details by mimicking a legitimate authentication portal for the cs2 platform.

Technical evidence confirms the malicious nature of the site. VirusTotal detected it as malicious by 8 out of 95 security vendors, with specific flags from ADMINUSLabs, CRDF, CyRadar, Fortinet, and Phishing Database. The domain is listed on 2 blocklists. It was created on 2026-02-21 and hosted on IP address 104.21.46.42 (United States), under AS13335 Cloudflare, Inc. The SSL certificate is type WE1.

As of the current assessment, the domain status is DOWN/OFFLINE, indicating it is no longer accessible. The risk level is elevated, supported by a GridinSoft trust score of 0 out of 100 and a DOM risk score of 63. The site presents a high risk for credential theft despite being offline.