# login.workshopartistskin.com — MALICIOUS

> login.workshopartistskin.com is a high-risk phishing site designed to steal login credentials. Avoid entering any information on this active fraudulent domain.

## Summary
PhishDestroy identifies login.workshopartistskin.com as a high-risk credential phishing domain actively targeting users. This dangerous website mimics legitimate login pages to trick visitors into entering their sensitive account information. The domain was registered recently, in February 2026, and already appears on multiple blocklists, confirming its malicious intent.

This particular phishing scam operates by presenting a fake "Sign In" page that looks authentic to users. When a victim inputs their username and password, the information is captured by attackers for unauthorized access to the victim's accounts. The domain resolves to an IP address linked to suspicious activity, and 15 out of 95 VirusTotal security vendors have flagged it, underscoring the threat level. The site remains active, indicating ongoing risk to potential visitors.

If you have visited login.workshopartistskin.com, it is crucial to immediately change any passwords that might have been entered and enable multi-factor authentication on affected accounts. Monitor financial and personal accounts for unusual activity and report any suspicious incidents to your institution. Avoid interacting with unsolicited links or emails directing you to this domain to prevent credential compromise.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Sign In

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 104.21.77.202
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "Cluster25", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019baf25-7090-735d-b0f8-2e8d802a0cc2.png
- PhishDestroy: https://phishdestroy.io/domain/login.workshopartistskin.com/
- LLM endpoint: https://phishdestroy.io/domain/login.workshopartistskin.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/login.workshopartistskin.com/
Last updated: 2026-03-19