skinrater[.]top

PhishDestroy identifies skinrater.top as an active generic phishing domain designed to deceive users into submitting sensitive credentials under false pretenses. The domain does not impersonate a specific brand, indicating a broad-based scam operation. No known drainer kit or advanced redirection framework is associated with this infrastructure, suggesting reliance on basic social engineering and fraudulent landing pages for data capture.

This domain was flagged by 17 out of 95 VirusTotal security engines as malicious, indicating widespread detection but not universal consensus. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolved to IP address 104.21.50.5 and utilized a Let’s Encrypt SSL certificate. It was created on April 16, 2026, highlighting its recent emergence. While not currently flagged in Google Safe Browsing (GSB), its low blocklist count suggests early-stage deployment with limited historical telemetry.

As of the latest analysis, skinrater.top remains active and poses an elevated risk to potential victims. Users should immediately block access to the domain and avoid any interaction with its content. Security teams are advised to monitor IP 104.21.50.5 and investigate for lateral movement or credential reuse patterns. Although the immediate threat is contained, the domain’s recent creation and partial detection rate suggest a need for continued vigilance. The absence of a branded impersonation reduces immediate user awareness but increases the likelihood of broad targeting. Users are urged to verify URLs before inputting credentials and report any encounters to threat intelligence platforms.