Security Scan: Sign In

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aaeb1dfe-5f36-4b35-9bfd-262f832d204d Domain and IP registration (RDAP)/api/v1/rdap/aaeb1dfe-5f36-4b35-9bfd-262f832d204dHow often this domain was scanned/api/v1/domain/stats/theworkshop-sign.skin Scan history for this domain/api/v1/domain/history/theworkshop-sign.skin?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 10 HTTP transactions. The main domain is theworkshop-sign.skin and was registered 1 week ago.

Submitted URL: https://theworkshop-sign.skin/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake Steam sign-in on a 4-day-old theworkshop-sign.skin domain harvesting account name, password and email authenticator codes. Brand impersonation plus credential form — confirmed phishing.

Risk Factors (5)

Steam brand impersonation on a non-official domain

Credential (password) collection form on a 4-day-old domain

Email one-time-code solicitation mimicking account protection

Newly registered, unranked domain using an abuse-prone .skin TLD

Steam branding without any disclosure of affiliation

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 2125331150

MD5: 231913fdebabcbe65f4b0052372bde56

Domain Name Analysis

Within the .skin top-level domain, 'theworkshop-sign.skin' is registered while skipping any subdomain. Its registrable label 'theworkshop-sign' stretches across 16 characters with four vowels and 11 consonants, notching 1 hyphen. Breaking it apart gives three words: the, workshop, sign. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.59s

Total Load Time

532 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:249 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software43% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

43%

adult content

27%

phishing scam

27%

news media journalism

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	194.238.57.99	Stockholm, Stockholm County, Sweden	AS198550Node Host Limited
10	1	-	-

Detected Technologies1

Nginx

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B122F941A3EC1EF6400687DAD2664669219F2DF8FA21CA98D7730D15DAE3E8C0D44DC3

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:ttdvHVe6aHsopvehzc7BlnLbONqR6qeWPIICtxmiBkqRhOZym6OxEw:tDHVe6aMopvqWnLxPeWPIICtxmieqRkZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9957:hSmd2AUqIIgKdSEHuBHOKNjQZwhLQoBKghoTIdYUgM2BpGBgAwETEQAYCIIUJqIFIAggBABZwFtyKrEPFQIUHeoARngjFBOw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:40fffe5a5e181000

Perceptual Hash:8cd563534c717366

Difference Hash:d2b26cb6b2faa264

Wavelet Hash:40ffffde7e181000

Color Hash:#693a78

Other Hashes

Crop Resistant:d2b26cb6b2faa264

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: theworkshop-sign.skin