store.workshopcosmeticpower[.]com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of store.workshopcosmeticpower[.]com
This domain appears to host a small content-style website rather than a clearly established business or brand presence. The visible homepage uses generic headings such as "Main," "Articles," and "Contacts," and the screenshot shows broad promotional text like "Popular" and "Reviews" without a clear explanation of the site's purpose. Based on the page structure and linked files, it may be presenting itself as a general information or article portal.
The subdomain format, combined with the sparse branding and generic navigation, does not clearly identify a known operator. The domain name includes "store," but the visible homepage does not show obvious shopping features such as product listings, pricing, or a checkout flow. Based on available data, this appears to be a lightly branded web property with unclear ownership and limited transparency about who operates it.
Safety Assessment for store.workshopcosmeticpower[.]com
Several security signals raise concerns about this website at the time of the scan. Most notably, 8 out of 92 security engines flagged the domain, with multiple detections describing it as phishing-related or otherwise malicious. In addition, the domain is extremely new at only 4 days old, has no meaningful popularity ranking, and presents a generic-looking page with limited trust-building information. These factors can be consistent with short-lived deceptive sites, although they are not conclusive on their own.
At the same time, some checks were clean: the malware scan did not identify flagged files, and major blacklist and threat-database checks were clean at the time of this scan. However, clean file scanning does not outweigh a multi-engine phishing consensus, especially for a newly registered domain with minimal content and unclear ownership. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire on 2026-08-02. It resolves to IP address 185.139.215.162 and appears to be hosted by Alexhost SRL in Amsterdam, Netherlands. Nameservers are provided through Cloudflare, while DNSSEC appears to be unsigned.
From a security posture perspective, the presence of TLS is a basic positive sign, but it should not be treated as evidence of legitimacy. The combination of a very recent registration, unsigned DNSSEC, unclear server fingerprinting, and a subdomain-based deployment with generic content may indicate disposable or rapidly deployed infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?