skinportt[.]at

The domain skinportt.at has been identified as a credential theft site, currently active and impersonating the legitimate brand Skinport. This domain poses an elevated risk level due to its malicious intent and the potential for significant user data compromise.

Analysis reveals that skinportt.at is resolving to the IP address 209.74.82.247 and is registered through Hosting concepts B.V. via the registrar Registrar.eu. The domain has been flagged by 3 of 95 VirusTotal security vendors, indicating a concerning level of malicious activity associated with this domain. Further investigations into its infrastructure show that it is utilizing an SSL certificate issued by Let's Encrypt, a common tactic employed by malicious domains to establish a façade of legitimacy. Additionally, there are currently no known blocklists associated with this domain, which further complicates detection efforts.

Given the current status of skinportt.at, it is crucial for organizations to implement strict monitoring of network traffic and user reports concerning this domain. Users should be educated on the risks of entering credentials on websites that may impersonate legitimate services. It is recommended to block this domain at the firewall level and to utilize threat intelligence feeds to stay updated on similar domains that may emerge. Regularly updating security protocols and conducting user training can also mitigate the risks associated with such credential theft schemes.