storefirearb[.]store

Analysis of storefirearb.store indicates that the domain was registered on February 21, 2026 and is currently taken offline. The authoritative name resolution returns a single IPv6 address 2a02:4780:42:351a:3bf5:4e69:4b62:38bc, which is assigned to AS47583 operated by Hostinger International Limited and geolocated to Germany. The site presents a HTTP response with the title "403 Forbidden", suggesting that the web server is configured to deny access, which is consistent with the reported offline status. Reputation services have identified the domain as malicious: PhishDestroy has blocked it, and it appears on one public blocklist.

Gridinsoft assigns a trust score of 0 out of 100, indicating a complete lack of confidence. VirusTotal scans show that two out of ninety‑five antivirus engines flagged the domain, providing additional corroboration of its malicious nature. The SSL certificate presented is identified only as "WR1", offering no meaningful validation of the operator’s identity. No further intelligence such as targeted brand, phishing kit, or detailed payload has been disclosed.

Defenders should continue to block the IPv6 address and domain at perimeter devices, update local blocklists, and monitor for any re‑registration attempts. Given the limited detection count, additional scrutiny of related hostnames and sub‑nets associated with the same AS may be warranted. Until the domain is definitively removed from the threat landscape, it should be treated as a high‑confidence phishing indicator.