# PhishDestroy domain threat record: skinsmonkey.net

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/skinsmonkey.net/
Machine-readable companion: https://phishdestroy.io/domain/skinsmonkey.net/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-25 21:31:49 UTC
- Last availability or vendor check: 2026-10-26 00:20:48 UTC
- Stored record updated: 2026-10-26 00:20:48 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: counter-strike

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-10-19 23:06:24 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a174f9-3dd2-722c-a003-dc045ea2cb82/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/skinsmonkey.net
- Certificate Transparency search: https://crt.sh/?q=%25.skinsmonkey.net
- Web Archive lookup: https://web.archive.org/web/*/https://skinsmonkey.net/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy added skinsmonkey.net to its internal blocklist on 2026-10-25 after an admin report noting the domain was only five days old. The recorded page title on 2026-10-25 claims to be the official CS2 skin‑trading platform SkinsMonkey and the HTTP check returned a 200 response. An earlier AI assessment on the same day found no malicious content but classified the site as clean based on the lack of observed behavior.

How the scam works
The listing does not confirm any particular fraud technique; domains that mimic skin‑trading services are commonly used to lure users into fake exchanges, credential harvesting, or illicit wallet approvals. Visitors who are prompted to connect Steam accounts or provide payment details could be exposed to theft if the site is later repurposed for malicious activity.

Evidence
VirusTotal scanned the domain on 2026-10-24 with 92 engines and reported zero malicious or suspicious detections. Google Safe Browsing checked the URL on 2026-10-25 and did not flag it. OTX recorded four community pulses referencing the domain as of 2026-10-25. urlscan.io’s engine flagged the site as malicious with a score of 71 on 2026-10-25, while its overall verdict remained non‑malicious. PhishDestroy’s internal blocklist marks the domain as suspicious, and no external blocklists reported it.

Infrastructure
The domain was registered on 2026-10-20 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It uses a Let’s Encrypt certificate issued the same day, valid until 2027-01-18. Hosting is provided via Cloudflare, resolving to IPv4 addresses 188.114.96.3 and 188.114.97.3 (ASN 13335).

What to do
Avoid entering Steam credentials, personal data, or payment information on the site; if such data was submitted, change associated passwords and review account activity. Organizations can block the domain at DNS or proxy level and monitor traffic to the recorded IPs, while continuing to watch for updated intelligence.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a174f9-3dd2-722c-a003-dc045ea2cb82/
Cloudflare Radar report: https://radar.cloudflare.com/scan/ef98cf9d-0000-410f-8f18-4cf7d428b851
Stored capture screenshot: https://i.ibb.co/cKTRvKFT/c5d6e8ebe71b.png
URLScan screenshot (2026-10-25T21:35:32Z): https://screenshots.phishdestroy.io/us/01a174fd-6350-7408-9086-1947223e5d61.png
URLScan capture report: https://urlscan.io/result/01a174fd-6350-7408-9086-1947223e5d61/
VirusTotal report: https://www.virustotal.com/gui/domain/skinsmonkey.net
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=skinsmonkey.net
Archived copy: https://web.archive.org/web/20261025213228/https://skinsmonkey.net/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-25 22:08:57 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/cKTRvKFT/c5d6e8ebe71b.png
  Captured: 2026-10-25 21:31:49 UTC
- URLScan capture: https://screenshots.phishdestroy.io/01a174f9-3dd2-722c-a003-dc045ea2cb82.png
  Captured: 2026-10-25 21:31:49 UTC
  Source report: https://urlscan.io/result/01a174f9-3dd2-722c-a003-dc045ea2cb82/
- URLScan · 2026-10-25: https://screenshots.phishdestroy.io/us/01a174fd-6350-7408-9086-1947223e5d61.png
  Captured: 2026-10-25 21:35:32 UTC
  Source report: https://urlscan.io/result/01a174fd-6350-7408-9086-1947223e5d61/
  SHA-256: 6e8faead1e42ea50b8258c97408586d4b1327960095eca152e826df9258003b2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-25T21:46:52Z",
        "uuid": "01a174f9-3dd2-722c-a003-dc045ea2cb82",
        "scanned_at": "2026-10-25T21:31:33Z",
        "final_url": "https://skinsmonkey.net/",
        "status": 200,
        "ip": "188.114.97.3",
        "domains": [
            "skinsmonkeystatic.com",
            "numclock.info"
        ],
        "ips": [
            "172.67.72.67",
            "188.114.97.3"
        ],
        "asns": [
            "13335"
        ],
        "doc_hash": "e5aacc994b63e20c8499b804e84f6c1966ef02dc4824e71072e66b6a1347d223",
        "script_hashes": [
            "2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8",
            "5031b97896c65ad186c2e4ebca37471f8472aa83e2356568d28b651c9d6f558f",
            "2c604c2dba1e2f6ee535cfbb251962d86667b86abda8a16e1d26beee2070edcc"
        ],
        "globals": [
            "closeModal",
            "openModal",
            "goToLogin",
            "randomizeOnline",
            "mllp_0x239c",
            "mllp_0x5eb1",
            "toggleA",
            "LOGIN_LINK",
            "modal",
            "closeBtn",
            "actions"
        ],
        "cookies": [
            "uv"
        ],
        "storage_keys": [
            "uv"
        ],
        "tls": {
            "san": [
                "*.skinsmonkey.net",
                "skinsmonkey.net"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "skinsmonkey.net",
            "protocol": "QUIC",
            "valid_to": "2027-01-18T00:09:57Z",
            "valid_from": "2026-10-20T00:09:58Z"
        },
        "domain_age_days": 1451,
        "apex_age_days": 1451,
        "tls_age_days": 5,
        "tls_valid_days": 89,
        "requests": 92,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 71,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-25T22:51:05Z",
        "uuid": "ef98cf9d-0000-410f-8f18-4cf7d428b851",
        "scanned_at": "2026-10-25T22:07:06Z"
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-25T22:06:24Z",
        "analysis_at": "2026-10-24T04:20:52Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 36
        },
        "reputation": 0,
        "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
        "created": "2026-10-20T01:06:24Z",
        "expires": "2027-10-20T01:06:24Z",
        "updated": "2026-10-20T01:06:25Z",
        "first_seen": "2023-12-01T13:03:24Z",
        "dns": [
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "olga.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3036::6815:3534"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3031::ac43:d121"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "olga.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=XjVXLEZyGU5wi6QnH2Rmk1LYhscSaREgu0CIsDtlqP8"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.53.52"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.209.33"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "sonny.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-24T04:29:24Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.skinsmonkey.net",
                "skinsmonkey.net"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "640322b1210c1eeee9118a9e264ebf97a7d",
            "sha256": "18a36d173ab313ec813a6e9c9419d0a38566c71566c949a0a3fb0ce9ecaef030",
            "subject": "skinsmonkey.net",
            "valid_to": "2027-01-18T00:09:57Z",
            "valid_from": "2026-10-20T00:09:58Z"
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "registrar_iana_id": "3765",
            "registrar_url": "https://nicenic.com",
            "created": "2026-10-20T01:06:24Z",
            "updated": "2026-10-20T01:06:24Z",
            "expires": "2027-10-20T01:06:24Z",
            "status": [
                "clientDeleteProhibited",
                "clientTransferProhibited"
            ],
            "nameservers": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client delete prohibited",
                "client transfer prohibited"
            ],
            "events": {
                "expiration": "2027-10-20T01:06:24Z",
                "registration": "2026-10-20T01:06:24Z",
                "registrar expiration": "2027-10-20T01:06:24Z",
                "last update of RDAP database": "2026-10-20T01:06:24Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-25T22:04:29Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "skinsmonkey.net"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-25T21:32:28Z",
            "first": "2023-04-07T09:42:14Z",
            "changes": 2,
            "days_archived": 3,
            "scans_per_day": 0,
            "avg_page_bytes": 14783
        },
        "social_tags": {
            "title": "SKINSMONKEY :: Official Website - Swap CS2 (CSGO) Skins Instantly ⚡ Top-Rated Trading Bot & Platform — SkinsMonkey",
            "ogTitle": "Swap CS2 (CSGO) Skins Instantly ⚡ Top-Rated Trading Bot & Platform — SkinsMonkey",
            "description": "Get the skins you want in seconds. SkinsMonkey offers the fastest CS2 trades, the lowest commission rates, and 24/7 live support. Start trading your inventory right now.",
            "ogDescription": "Get the skins you want in seconds. SkinsMonkey offers the fastest CS2 trades, the lowest commission rates, and 24/7 live support. Start trading your inventory right now."
        },
        "trackers": {
            "requests": 69
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 5,
                "tls": 34,
                "wait": 249,
                "connect": 33,
                "download": 19
            },
            "response_ms": 340
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 437025,
            "co2_grams": 0.016,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.66",
                    "host": "sonny.ns.cloudflare.com"
                },
                {
                    "ip": "173.245.58.137",
                    "host": "olga.ns.cloudflare.com"
                }
            ],
            "zone": "skinsmonkey.net"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "uv",
                    "session": true
                }
            ]
        },
        "location": {
            "ip": "2a06:98c1:3121::3",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Washington",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "skinsmonkey.net"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "sonny.ns.cloudflare.com",
                "olga.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"olga.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417969610, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=XjVXLEZyGU5wi6QnH2Rmk1LYhscSaREgu0CIsDtlqP8"
            ],
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://skinsmonkey.net"
            ]
        },
        "linked_pages": {
            "external": [
                "https://skinsmonkey.com/",
                "http://skinsmonkey.com/blog/best-battle-scarred-skins",
                "https://skinsmonkey.com/free-csgo-skins",
                "https://skinsmonkey.com/blog/the-best-cheap-csgo-skins",
                "https://skinsmonkey.com/sell-cs-skins",
                "https://skincashier.com/",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "https://www.youtube.com/watch",
                "http://skinsmonkey.com/blog/the-best-cheap-csgo-skins",
                "http://skinsmonkey.com/blog/best-counter-strike-2-skins",
                "http://skinsmonkey.com/blog/how-to-invest-in-cs-skins",
                "http://skinsmonkey.com/blog/how-to-make-money-on-csgo",
                "http://skinsmonkey.com/blog/csgo-profile-public",
                "http://skinsmonkey.com/blog/steam-trade-url-profile-privacy-settings",
                "http://skinsmonkey.com/blog/popular-cs2-skins",
                "http://skinsmonkey.com/blog/most-expensive-cs2-skins",
                "http://skinsmonkey.com/blog/best-csgo-stattrak-skins"
            ],
            "external_count": 67,
            "internal_count": 40
        },
        "whois": {
            "registrar": "NICENIC INTERNATIONAL GROUP CO., LIMITED",
            "created": "2026-10-20T01:06:24Z",
            "updated": "2026-10-20T01:06:25Z",
            "expires": "2027-10-20T01:06:24Z",
            "status": [
                "clientDeleteProhibited https://icann.org/epp",
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "olga.ns.cloudflare.com",
                "sonny.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```