skinsport[.]net

The domain skinsport.net was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on July 11, 2026 and remains active as of the report date. Its authoritative name servers, indie.ns.cloudflare.com and rodrigo.ns.cloudflare.com, indicate that the domain is using Cloudflare’s DNS service. DNS resolution points to the address 188.114.96.3, an IP that belongs to Cloudflare’s edge network, which is commonly leveraged by threat actors to hide the true hosting location of malicious infrastructure. Skinsport.net appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, providing early warning that the domain is being used in phishing campaigns. VirusTotal records show that the domain was examined by 95 anti‑malware engines, none of which raised a detection; however, the lack of a flag is not evidence of safety and should not be interpreted as a clearance of risk. No publicly available SSL certificate details, HTTP response codes, page title, or brand targeting information have been disclosed, leaving the exact content and phishing vector unverified. The current threat classification is generic phishing, with a risk level listed as under investigation and the operational status marked as active. Given the limited observable data, uncertainty remains around the specific phishing kit, credential‑stealing page design, and any associated command‑and‑control endpoints. Defenders should proactively block skinsport.net at the network perimeter, incorporate the domain into URL filtering and DNS‑sinkhole policies, and continue to monitor its resolution patterns for any changes. Ongoing collection of HTTP payloads, page titles, and any victim reports will be essential to refine the threat assessment and to determine whether additional mitigation measures, such as sinkholing or takedown requests, are warranted.