store[.]workshopartistskin[.]com

store.workshopartistskin.com was registered on February 21, 2026 and is currently hosted behind Cloudflare (AS13335) with the resolved address 172.67.211.115 located in the United States. The TLS certificate presented is identified as WE1, and the HTTP response during the last observation returned a 522 “Connection timed out” status, indicating that the origin server was unreachable through Cloudflare. The domain is classified as a generic phishing site and appears on a single blocklist managed by PhishDestroy. Gridinsoft’s proprietary trust scoring assigned a value of 0 out of 100, reflecting an extremely low reputation.

VirusTotal analysis recorded 16 detections out of 93 scanning engines, confirming that multiple security vendors have flagged the domain as malicious. The site was taken offline before the time of reporting, and no additional content or credential‑harvesting pages have been captured. Because the domain’s infrastructure leverages Cloudflare, typical IP‑based blocking may be ineffective; defenders should consider DNS‑level denylisting for the fully qualified domain name and monitor for any future re‑hosting attempts.

Continuous re‑scanning of the domain through multi‑engine services is advised to capture any changes in payload or hosting. Log aggregation should include queries to the domain and any related subdomains, and intrusion‑detection signatures that flag outbound connections to the 172.67.211.115 address should be reviewed. Until further evidence is gathered, the recommendation is to maintain the domain on blocklists, enforce strict outbound filtering, and include it in threat‑intel feeds for rapid detection of any resurgence.