skinsmnky[.]com

This domain, skinsmnky.com, is identified as a credential theft operation targeting users of the gaming platform Counter-Strike 2 (CS2). The site impersonates SkinsMonkey, a legitimate marketplace for in-game items, to deceive victims into entering account credentials or payment details. The fraudulent page displays the title 'SkinsMonkey - Items for CS2,' mirroring the branding of the authentic service to lower user suspicion and increase the likelihood of successful compromise. Analysis indicates the domain was registered on March 01, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.), and lacks an SSL certificate, which is atypical for legitimate e-commerce platforms. The domain appears on four security blocklists, and 17 out of 95 security vendors on VirusTotal flag it as malicious. Additional intelligence sources, including PhishDestroy, Polkadot, Enkrypt, and Codeesura, have classified this infrastructure as high-risk. Users who visited skinsmnky.com should immediately revoke any credentials entered on the site, particularly those linked to gaming accounts or financial services. Monitor associated accounts for unauthorized transactions or changes, and enable multi-factor authentication where available. If payment details were submitted, contact the relevant financial institution to secure accounts and dispute fraudulent charges. Security teams should update blocklists to include this domain and its resolved IP address to prevent further exposure.