store[.]glock18-workshop[.]com

store.glock18-workshop.com was observed as a generic phishing infrastructure and is presently taken offline. The HTTP response returned a 403 Forbidden status, indicating that the web server is actively denying access to the requested resource. The domain was registered on February 21, 2026 and resolves to the IP address 188.114.96.3, which belongs to AS13335 operated by Cloudflare, Inc., located in the United States. Reputation services assign the lowest possible scores: Scamadviser reports a trust score of 0 out of 100, and Gridinsoft likewise rates the domain at 0 out of 100, reflecting a high probability of malicious use.

The site is listed on a single security blocklist and is specifically blocked by the PhishDestroy feed, confirming that threat‑intelligence providers have identified it as abusive. VirusTotal analysis shows that 11 out of 93 scanning engines flagged the domain as malicious, providing additional corroboration of its nefarious intent. The SSL certificate identifier “WE1” is present, but no further certificate details are disclosed, and the HTTPS handshake does not appear to mitigate the risk.

No safe‑browsing or OTX entries are available for this domain, and the registrar information has not been disclosed, limiting attribution of ownership. Given the limited but consistent evidence of malicious activity, defenders should add the domain and its associated IP address to outbound and inbound deny lists, ensure that DNS resolvers block resolution, and monitor for any resurgence of the domain or related sub‑domains. Continuous intelligence feeds should be consulted for updates, and any internal logs referencing the domain should be investigated for possible compromise attempts.