# menuitem.glock18-workshop.com — MALICIOUS

> Avoid menuitem.glock18-workshop.com as it hosts a high-risk phishing page. Users should not enter credentials and report suspicious activity immediately.

## Summary
PhishDestroy has identified menuitem.glock18-workshop.com as a confirmed phishing domain designed to steal user credentials. Classified under generic phishing, it masquerades as a legitimate sign-in portal, aiming to deceive visitors into submitting sensitive information.

The domain was registered on January 10, 2026, via REGRU-RU and resolves to the IP address 188.114.96.3. It currently appears on one security blocklist and has been flagged by 10 out of 95 security vendors on VirusTotal. The page title simply reads "Sign In," a common tactic to lure victims into providing login details.

This domain remains active and poses a significant risk to users. PhishDestroy advises avoiding any interaction with menuitem.glock18-workshop.com and recommends updating security defenses to block this infrastructure. Reporting this domain can help mitigate further phishing attempts.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Sign In

## Domain Intelligence
- Registered: 2026-01-10 19:49:50
- Registrar: REGRU-RU
- Country: RU
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["kanye.ns.cloudflare.com", "maria.ns.cloudflare.com"]
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 10 vendors flagged
  Vendors: ["ADMINUSLabs", "CRDF", "CyRadar", "Fortinet", "Kaspersky", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019baa05-2ea1-703d-9896-69db69442571.png
- PhishDestroy: https://phishdestroy.io/domain/menuitem.glock18-workshop.com/
- LLM endpoint: https://phishdestroy.io/domain/menuitem.glock18-workshop.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/menuitem.glock18-workshop.com/
Last updated: 2026-03-19