# skinqox.com — SUSPICIOUS

> PhishDestroy detects low-risk phishing activity at skinqox.com. Stay alert and avoid interactions with this domain to protect your data.

## Summary
PhishDestroy classifies skinqox.com as an active low-risk phishing domain. The threat involves generic phishing tactics, potentially aiming to deceive users with offers related to digital items, as indicated by the Russian page title "Лучшие цифровые предметы только у нас!" (Best digital items only with us!).

The domain was registered recently on July 11, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 172.67.180.6. VirusTotal analysis shows 2 out of 95 security vendors flagging the domain, suggesting limited but notable suspicion. The domain's infrastructure and new registration date are consistent with typical phishing setups designed to avoid early detection.

Users are advised to avoid interacting with skinqox.com and to remain cautious of unsolicited offers or links related to digital goods. PhishDestroy continues monitoring this domain's activity and recommends employing standard phishing mitigation strategies, including email filtering and endpoint security measures, to reduce exposure to potential harm.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Лучшие цифровые предметы только у нас!

## Domain Intelligence
- Registered: 2026-03-10 21:07:01
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- Country: HK
- IP: 172.67.180.6
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: andy.ns.cloudflare.com kara.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["SOCRadar", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content

### Page Text
Your request was blocked.

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd947-f0d9-7768-a82d-1db540e0b523.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/511b1317-3aa4-4b32-86ae-cc22126e974f
- PhishDestroy: https://phishdestroy.io/domain/skinqox.com/
- LLM endpoint: https://phishdestroy.io/domain/skinqox.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/skinqox.com/
Last updated: 2026-03-15