store[.]workshopcommunityrare[.]com

Analysis of the domain store.workshopcommunityrare.com indicates a brand impersonation campaign targeting Counter-Strike users, classified as a crypto scam. The domain was registered on February 21, 2026, and is currently offline. It was flagged by 15 of 93 security vendors on VirusTotal, though this does not represent exhaustive detection coverage. The domain appears on one security blocklist and was blocked by PhishDestroy.

Infrastructure analysis reveals the domain resolved to IP address 104.21.46.42, hosted on Cloudflare's network (AS13335) in the United States. The SSL certificate is issued by WE1, a low-assurance provider often associated with short-lived malicious domains. The page title, 'Steam Workshop::AUG | Poseidon v1,' suggests an attempt to mimic Steam Workshop content, likely to lure users into fraudulent crypto transactions under the guise of Counter-Strike-related offers. Gridinsoft assigned a trust score of 0/100, reinforcing the domain's malicious classification.

Defenders should treat this domain as a confirmed threat vector for Counter-Strike-themed crypto scams. Blocking the domain and its resolved IP at perimeter security controls is recommended. Further investigation into associated wallet addresses or payment redirects is advised, though no specific indicators beyond the domain and IP are currently available. The exact content of the site remains unanalyzed due to its offline status, limiting deeper forensic insights.