# skinebox.com — SUSPICIOUS

> Skinebox.com shows signs of low-risk phishing activity. Stay alert and verify links before clicking to protect your data from potential scams.

## Summary
PhishDestroy identifies skinebox.com as a domain associated with generic phishing activities, currently categorized as low risk. The domain's creation date in early April 2025 suggests it is relatively new, a common trait among phishing sites aiming to evade long-term detection. While only a small number of security vendors have flagged this domain, it nonetheless warrants caution due to its phishing classification.

Technical analysis reveals skinebox.com resolves to the IP address 104.21.74.94 and is registered via NICENIC INTERNATIONAL GROUP CO., LIMITED. The combination of a recent registration and use of a registrar with limited scrutiny may indicate attempts to quickly establish malicious infrastructure. Although only two out of 95 VirusTotal vendors have raised concerns, the domain's low-risk phishing label highlights subtle but suspicious behavioral patterns.

Currently, skinebox.com remains active, and users should exercise vigilance by avoiding unsolicited links related to this domain. PhishDestroy recommends monitoring this domain for any escalation in threat level and urges organizations to reinforce phishing awareness with their users. Blocking or restricting access to this domain in corporate environments is advisable until further analysis clarifies its intent.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: SKINBOX — Официальный Сайт по Кейсам CS2. Лучший Дроп и Шансы в Кейсах Скин Бокс!

## Domain Intelligence
- Registered: 2026-03-05 19:07:02
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 104.21.74.94
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: kia.ns.cloudflare.com tosana.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbf34-6f15-71bf-aa97-5475c3409aeb.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/skinebox.com
- Wayback Machine: https://web.archive.org/web/https://skinebox.com
- PhishDestroy: https://phishdestroy.io/domain/skinebox.com/
- LLM endpoint: https://phishdestroy.io/domain/skinebox.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/skinebox.com/
Last updated: 2026-03-16