# login.workshopskinshowcase.com — MALICIOUS

> login.workshopskinshowcase.com was flagged for credential phishing. Avoid entering personal data and stay vigilant against suspicious login sites.

## Summary
PhishDestroy identifies login.workshopskinshowcase.com as a high-risk credential phishing domain primarily designed to steal user login credentials. The domain employs social engineering tactics to lure victims into submitting sensitive information by mimicking legitimate login portals. This hostile activity poses significant risks to users, including unauthorized account access and identity theft.

The domain was registered on February 21, 2026, through Internet Domain Service BS Corp. It has been flagged by Google Safe Browsing for SOCIAL_ENGINEERING and appears on at least one security blocklist. VirusTotal analysis reveals detection by 15 out of 95 security vendors, confirming its malicious intent. The page title matches the domain name, indicating a straightforward phishing setup. Such infrastructure details highlight a coordinated attempt to deceive users through plausible yet fraudulent login interfaces.

Currently, login.workshopskinshowcase.com is offline, reducing immediate risk. However, users should remain cautious of similar phishing campaigns and verify URLs carefully before entering credentials. It is recommended to avoid this domain entirely and enable multi-factor authentication on sensitive accounts to mitigate potential credential theft consequences.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: login.workshopskinshowcase.com

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Internet Domain Service BS Corp
- Country: BS
- Nameservers: ["ns.incogdns.gl", "ns.incogdns.me", "ns.incogdns.st", "ns.incogdns.vg"]

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb37b-7ced-756e-8128-ad5a9cff5836.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/6b0a3719-1d8d-4fb4-8763-dafe3580d47b
- PhishDestroy: https://phishdestroy.io/domain/login.workshopskinshowcase.com/
- LLM endpoint: https://phishdestroy.io/domain/login.workshopskinshowcase.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/login.workshopskinshowcase.com/
Last updated: 2026-03-19