# login.workshopskingallery.com — MALICIOUS

> login.workshopskingallery.com is a dangerous phishing site aiming to steal your login details. Learn how to protect yourself from this active threat.

## Summary
PhishDestroy identifies login.workshopskingallery.com as a high-risk credential phishing domain actively targeting users. This site is designed to trick visitors into submitting their login credentials, potentially leading to identity theft and unauthorized access to personal accounts.

This phishing scheme works by mimicking a legitimate login page, often appearing in Polish with the title 'Zaloguj się,' which means 'Sign in.' When users enter their usernames and passwords, the information is captured by attackers instead of being sent to a trusted service. The domain is relatively new, created in early 2026, and has already been flagged on security blocklists and by multiple antivirus providers.

If you have visited login.workshopskingallery.com, do not enter any personal information. If you have already submitted credentials, immediately change your passwords on the legitimate sites involved and enable two-factor authentication where possible. It is also advisable to monitor your accounts for suspicious activity and run a security scan on your devices. Avoid revisiting suspicious domains and rely on official websites for login processes.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: Zaloguj się

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Global Domain Group LLC
- Country: CA
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bbe64-5d4b-7371-8e6d-f57f6be5bd59.png
- PhishDestroy: https://phishdestroy.io/domain/login.workshopskingallery.com/
- LLM endpoint: https://phishdestroy.io/domain/login.workshopskingallery.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/login.workshopskingallery.com/
Last updated: 2026-03-19