store[.]workshop-glock18[.]com

The domain store.workshop-glock18.com was registered on February 21, 2026 and is presently taken offline, having been blocked by the PhishDestroy mitigation service. DNS resolution points to the IP address 104.21.55.13, which belongs to Cloudflare, Inc. (ASN 13335) and is geolocated to the United States. The SSL certificate presented for the host is identified as WE1, indicating a standard TLS deployment without additional validation of the certificate authority.

Reputation scoring from Gridinsoft assigns the domain a trust score of 0 out of 100, reflecting an extremely low confidence level in its legitimacy. VirusTotal analysis shows that 13 of 93 security vendors have flagged the domain as malicious, providing independent corroboration of its suspicious nature. The domain appears on a single security blocklist, further confirming that defensive feeds have recognized it as a threat vector.

No additional intelligence such as a page title, brand targeting, or detailed payload description is currently available, leaving the exact phishing lure and victim profile unconfirmed. Defenders should prioritize adding the domain and its associated IP address to deny‑list rules, enforce DNS sinkholing where possible, and monitor for any re‑use of the same Cloudflare edge node in future campaigns. Continuous re‑scanning of the domain, especially if it reappears online, is recommended to capture any evolving indicators of compromise.