topskln[.]com
“TOPSKIN - Кейсы CS2, CS:GO, открытие кейсов CS2, CS:GO!”
证据摘要
The domain topskln.com was registered on 21 February 2026 through NiceNIC International Group Co., Limited. It resolves to the Cloudflare address 104.21.86.111, which belongs to ASN 13335 (Cloudflare, Inc.) and is geolocated in the United States. The authoritative name servers are dale.ns.cloudflare.com and galilea.ns.cloudflare.com, indicating that the domain relies on Cloudflare’s DNS and CDN services. TLS negotiation is performed with a Let’s Encrypt certificate (issuer E8) that is currently valid, suggesting that the operator has obtained a free certificate to lend the site an appearance of legitimacy. VirusTotal reports that four of ninety‑three scanning engines have flagged the domain as malicious, providing an early indication of abusive use.
Independent security products have assigned a Gridinsoft trust score of 0 out of 100, and the domain is listed on a single public blocklist. PhishDestroy has also added topskln.com to its blocklist, confirming that at least one anti‑phishing service considers the site hostile. The site’s page title, “TOPSKIN - Кейсы CS2, CS:GO, открытие кейсов CS2, CS:GO!”, references virtual item cases for Counter‑Strike 2 and CS:GO, a common lure in credential‑stealing campaigns targeting gamers. As of the reporting date (24 July 2026) the host appears to be taken offline, and no HTTP response was observed.
The current offline status limits immediate verification of the payload, but the combination of recent registration, Cloudflare hosting, low trust score, multiple vendor detections, and the gaming‑related title strongly suggests a newly deployed phishing operation aimed at harvesting credentials from the gaming community. Defenders should add topskln.com to local blocklists, monitor DNS queries for the domain, and enforce outbound filtering that blocks connections to Cloudflare IP ranges when associated with suspicious user agents.
已提交证据快照
- 已发送
- 台账记录
- 1
- 案件 ID
PD-20260215-072021- PDF 文件
- PDF 证据
完整证据文本
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月10日
已存储的结果证据
处置结果与下线归因
- 结果
held- 可用性
unreachable- 原因
registrar_client_hold- 执行方
- Global Domain Group LLC
- 机制
client_hold- 置信度
- 95%
- 首次观测
- 最新观测
预计不可用时间
直至不可用的时间: 0 h证据 SHA-256 625504a3589b
检测时间线
-
VirusTotal
4 → 6
-
Cloudflare Radar
已存储 Cloudflare Radar 扫描 · 打开扫描
-
可用性
首次存储值:DNS 非活动
f93a11f87e4d -
可用性
DNS 非活动 → 未知
a371affeec70 -
可用性
未知 → DNS 非活动
f1d7e894f214 -
可用性
DNS 非活动 → 已保留
a6442ca721dd -
可用性
已保留 → DNS 非活动
f52d526b76a1 -
可用性
DNS 非活动 → 未知
1ccd17da38bd -
可用性
未知 → 已保留
7206c8faceae -
可用性
已保留 → 未知
9b4ebb7a0cf5
显示全部(8)
-
可用性
未知 → DNS 非活动
6dfe9145995c -
可用性
DNS 非活动 → 已保留
ec1b2e983235 -
可用性
已保留 → DNS 非活动
641ed81dc4d5 -
可用性
DNS 非活动 → 未知
fa6c040926bb -
可用性
未知 → 已保留
a06cb9eaaf31 -
可用性
已保留 → 未知
6bcc4d203b83 -
可用性
未知 → DNS 非活动
d0b7046e8c2f -
可用性
DNS 非活动 → 已保留
625504a3589b
社区报告
由 1 名社区成员报告;首次发现于 2026年2月15日
- 已存储报告
- 1
- 已报告的唯一 URL
- 1
已保存的截图
域名情报
技术详情DNS、TLS 名称和时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of topskln.com · checked Mar 2, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控