skin-buff163[.]com

This domain, skin-buff163.com, was registered on February 21, 2026 and is currently listed as offline. DNS resolution points to the IPv4 address 64.190.63.136, which belongs to Autonomous System AS47846 operated by SEDO GmbH in Germany. The host presents an SSL certificate issued by Encryption Everywhere DV TLS CA - G2, indicating that TLS is enabled but offering no assurance of legitimacy. Reputation services show a Gridinsoft trust score of 0 out of 100 and a Scamadviser score of 33 out of 100, both indicating a high likelihood of malicious use.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service. VirusTotal analysis reports that ten of ninety‑three scanning engines flagged the domain, confirming the presence of malicious indicators. The page title returned by the server is “skin-buff163.com – Informationen zum Thema skin buff163,” which does not reveal a target brand or a specific phishing kit.

No additional content has been captured, and the site’s offline status prevents further inspection of the payload or credential‑harvesting mechanisms. Given the convergence of low trust scores, blocklist inclusion, and multiple vendor detections, defenders should add the domain and its resolved IP address to network‑level deny lists, monitor for any resurgence of the host, and ensure that email filters reference the observed indicators. Continuous re‑evaluation is advised, as the infrastructure could be re‑activated or repurposed for other fraudulent campaigns.