# login.workshopbrowsemod.com — MALICIOUS

> Discover why login.workshopbrowsemod.com was a high-risk phishing site. Learn about its tactics and current offline status to stay secure.

## Summary
PhishDestroy identifies login.workshopbrowsemod.com as a high-risk credential phishing domain designed to mimic legitimate login portals. The page titled "Sign In" aimed to deceive users into divulging sensitive credentials.

This domain was registered through Global Domain Group LLC on January 9, 2026, and resolved to IP 172.67.162.191. It was flagged by 15 of 95 security vendors and appeared on one security blocklist, indicating a notable threat footprint.

Currently, login.workshopbrowsemod.com is offline and inactive. Users are advised to remain vigilant against similar phishing attempts and verify website authenticity before submitting credentials.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Sign In

## Domain Intelligence
- Registered: 2026-01-09 12:27:32
- Registrar: Global Domain Group LLC
- Country: CA
- IP: 172.67.162.191
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["doug.ns.cloudflare.com", "ines.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "CyRadar", "ESET", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ba333-b158-73b3-9b8a-cf00b0d1cf22.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/769e3726-3c4e-438f-acc4-430f25d683de
- PhishDestroy: https://phishdestroy.io/domain/login.workshopbrowsemod.com/
- LLM endpoint: https://phishdestroy.io/domain/login.workshopbrowsemod.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/login.workshopbrowsemod.com/
Last updated: 2026-03-19