# arkanworkshop.com — SUSPICIOUS

> Stay vigilant: arkanworkshop.com is linked to phishing attempts. Avoid interacting with this domain to protect your information.

## Summary
PhishDestroy has identified arkanworkshop.com as an active phishing domain categorized under a low-risk threat level. The domain is primarily associated with generic phishing campaigns attempting to deceive users into divulging sensitive information. While the risk level remains low, caution is advised due to ongoing activity.

Supporting intelligence reveals that arkanworkshop.com was registered recently on August 11, 2025, through Ultahost, Inc., a registrar occasionally used for fraudulent activity. The domain resolves to the IP address 87.237.225.50, and VirusTotal analysis shows that 2 out of 95 security vendors flag this domain, indicating some degree of suspicion but not widespread consensus on its malicious nature. This combination of fresh registration and partial detection underscores the need for continued monitoring.

To mitigate risk, users and organizations should avoid accessing arkanworkshop.com and block it at the network level where possible. PhishDestroy recommends updating email and web filters to recognize this domain, as it remains active and capable of delivering phishing content. Users are encouraged to report any suspicious communication involving this domain to their security teams for further investigation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: ورشة سمكرة ودهان |ورشة ميكانيكا بالرياض|كهربائي بالرياض|رش بوية فرن| افضل ورشة

## Domain Intelligence
- Registered: 2025-08-11 23:05:22
- Registrar: Ultahost, Inc.
- Country: US
- IP: 87.237.225.50
- Nameservers: ns1.ultahost.com ns2.ultahost.com ns3.ultahost.com ns4.ultahost.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://i.ibb.co/ksQTgZpB/10b5a4ea8eb2.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/03defa16-658c-4ee3-8ec5-b6ede1187d59
- PhishDestroy: https://phishdestroy.io/domain/arkanworkshop.com/
- LLM endpoint: https://phishdestroy.io/domain/arkanworkshop.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/arkanworkshop.com/
Last updated: 2026-03-19