solskins[.]pw

PhishDestroy identifies www.solskins.pw as a live skin-in-the-middle phishing domain currently targeting users who trade or purchase cosmetic items for popular games. The site masquerades as a legitimate marketplace, harvesting login credentials and in-game assets before silently redirecting victims to the real game platform, leaving accounts vulnerable to theft or fraud. This domain was flagged by automated threat feeds on March 18, 2026—just one day after its creation—suggesting a rapid deployment designed to evade early detection systems. VirusTotal analysis returned a clean 1/95 detection score as of the latest scan, indicating it has not yet been widely blacklisted despite clear malicious intent. The domain is registered through REG.RU LLC and resolves to IPv4 address 64.29.17.1, which is associated with multiple low-trust endpoints. The presence of a valid Let’s Encrypt SSL certificate further enhances its credibility, deceiving users into believing the site is secure. If you visited www.solskins.pw, immediately change your game account password using the official platform, enable two-factor authentication, and scan your device for malware using a trusted security tool. Do not reuse passwords across accounts and report the domain to your game publisher’s fraud team. Avoid interacting with any pop-ups or download prompts that appear while on the site. Monitor your in-game inventory and transaction history for unauthorized transfers, as attackers may attempt to liquidate stolen skins for real-world value within hours of compromise.