skypv[.]com[.]cn

The domain www.skypv.com.cn is currently active and has been classified as a generic phishing infrastructure. It was registered on May 28, 2026 by 山西凯利晶信网络科技有限公司 and resolves to the IPv4 address 94.154.43.130. The authoritative name servers for the zone are ns1.onclouddns.com and ns2.onclouddns.com, indicating the use of a third‑party DNS provider. VirusTotal analysis shows that 4 of 91 security vendors flagged the domain, providing modest but notable detection consensus across multiple scanning engines.

The domain is listed on at least one public security blocklist and is actively blocked by the PhishDestroy service, reinforcing its malicious reputation. No additional telemetry such as SSL certificate details, HTTP response codes, page titles, or Safe Browsing verdicts is currently available, leaving those vectors unverified. The limited detection footprint suggests that the phishing campaign may be in an early deployment phase or employing evasion techniques to avoid broader scanner coverage. Defenders should prioritize adding the domain to internal blocklists, monitor DNS queries for the associated IP and name servers, and enforce outbound traffic controls to prevent credential submission to the host.

Continuous re‑scanning with VirusTotal or similar multi‑engine platforms is advised to capture any changes in detection status. Organizations using threat intelligence feeds should ensure that the domain is correlated with any observed credential harvesting attempts, especially those targeting users of services that might be impersonated by the site. Given the active status and existing blocklist entries, proactive containment and user awareness measures are recommended to mitigate potential compromise.