store[.]workshopmodvoting[.]com

store.workshopmodvoting.com was registered on 21 February 2026. Within weeks it appeared on multiple security monitoring services. PhishDestroy listed the domain as blocked, and it is present on one public blocklist. VirusTotal reports that 18 of 93 scanning engines flagged the domain as malicious, indicating a consensus among a subset of vendors that the site hosted phishing content.

Gridinsoft assigned a trust score of 0 out of 100, the lowest possible rating, reinforcing the malicious classification. The page title returned by the server is identical to the domain name, providing no additional context about the alleged target. The intelligence tags the activity as a banking phishing campaign, suggesting attempts to harvest credentials for financial accounts. The current operational status is offline, implying that the hosting has been taken down or the domain has been seized.

No public information on the hosting IP, ASN, SSL certificate, or geographic location is available in the supplied data. Defenders should continue to enforce blocklist rules that include this domain, monitor for any re‑registration attempts, and consider adding the domain to internal deny lists. Given the low trust score and vendor detections, any email or web traffic that references this domain should be treated as malicious.