skinsmonkey[.]compair[.]sk274[.]com

On July 24, 2026, the domain skinsmonkey.compair.sk274.com was examined following its appearance on a security blocklist. The domain was registered on February 21, 2026 and resolves to the IPv4 address 77.221.155.24, which is allocated to AS210644, AEZA GROUP LLC, in Germany. An SSL certificate issued by the R3 intermediate authority is present, indicating that HTTPS connections are supported, although the site currently returns an HTTP 404 Not Found status page. The domain is listed on a single external blocklist and has been specifically blocked by the PhishDestroy service.

VirusTotal records show that the host was scanned by 93 independent vendors, and none reported active detections at the time of analysis; this lack of detections does not constitute confirmation of benign intent. No additional intelligence such as Safe Browsing alerts, Open Threat Exchange references, or detailed registrar data was available, and the page content has not been captured because the site is offline. Consequently, the precise phishing payload or targeted brand cannot be confirmed. The limited evidence points to a recently created infrastructure that may have been used for generic credential harvesting or credential‑stealing redirects, but the exact scope remains uncertain.

Defenders should continue to monitor the IP address 77.221.155.24 and enforce outbound traffic controls that block connections to this host. Adding the domain to local deny‑list configurations and ensuring that email and web filtering solutions reference the PhishDestroy blocklist are recommended immediate mitigations. Ongoing observation for any re‑activation or new DNS records associated with the domain is advised, as well as periodic re‑evaluation of VirusTotal and other multi‑vendor scanning services for any future changes in detection status.