skinsfromdonk[.]com

The domain skinsfromdonk.com was registered on June 24, 2025 through Dominet (HK) Limited and currently resolves to the IP address 172.67.132.230, which belongs to AS13335 Cloudflare, Inc. The hosting provider is Cloudflare, and the site is served over HTTPS using a Google Trust Services / WE1 certificate. The page title returned by the server is "Checking your browser...." and the underlying technology stack includes Bootstrap, Cloudflare services, and HTTP/3. VirusTotal reports that 10 of 95 security vendors have flagged the domain, indicating a notable detection rate among scanning engines. The domain appears on a single public blocklist and is specifically listed as blocked by PhishDestroy, reinforcing its classification as a phishing resource.

Additional reputation data shows a Gridinsoft trust score of 1 out of 100, reflecting an extremely low confidence rating. Nameserver configuration consists of meadow.ns.cloudflare.com, mitch.ns.cloudflare.com, premium1.ezydomain.com, and premium2, suggesting a mixed delegation that may be used to obscure authoritative control. The combination of a recent registration, low trust score, multiple vendor detections, and active blocking by phishing‑focused defenses points to a high‑risk phishing operation.

Uncertainty remains regarding the exact content hosted behind the title, as no visual or functional analysis is available. Defenders should continue to block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP, and consider adding the domain to internal blocklists. Ongoing observation of VirusTotal and other threat‑intelligence feeds is recommended to capture any changes in detection metrics or additional blocklist listings.