# store.workshopartistskin.com — MALICIOUS

> Warning: The domain store.workshopartistskin.com is an active phishing site. Avoid interacting with it to protect your personal information.

## Summary
PhishDestroy has identified store.workshopartistskin.com as a high-risk phishing domain pretending to represent an artist workshop service. This generic phishing threat targets users by attempting to capture sensitive data or credentials under the guise of a legitimate platform. Such scams can lead to identity theft, financial loss, or unauthorized access to personal accounts.

The domain was created on February 21, 2026, and remains active as of the latest analysis. It resolves to IP address 172.67.211.115 and is currently listed on one security blocklist. VirusTotal flags the domain with 16 out of 95 security vendors detecting malicious activity. Notably, the page title returns a "522: Connection timed out" error, indicating possible server issues or intentional downtime to evade detection.

Users should exercise extreme caution and avoid visiting store.workshopartistskin.com or providing any login credentials or personal information. It is recommended to keep security software updated and report suspicious domains to relevant authorities. PhishDestroy continues to monitor this domain and advises organizations to block it proactively to prevent phishing incidents.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: workshopartistskin.com | 522: Connection timed out

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 172.67.211.115
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "Cluster25", "CRDF", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Lionic", "Phishing Database", "Seclookup", "SOCRadar", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019bb29f-b4c5-7210-92a1-8f9999db92fa.png
- PhishDestroy: https://phishdestroy.io/domain/store.workshopartistskin.com/
- LLM endpoint: https://phishdestroy.io/domain/store.workshopartistskin.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/store.workshopartistskin.com/
Last updated: 2026-03-19