skinkox[.]com

This domain is flagged as a generic phishing infrastructure designed to mimic a digital goods marketplace, specifically targeting Russian-speaking users with the page title 'Лучшие цифровые предметы только у нас!'. The threat type involves credential harvesting and financial fraud through deceptive product listings, posing an elevated risk to visitors who may input payment details or account credentials. Analysis indicates the domain skinkox.com was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.97.3 and currently holds a Gridinsoft trust score of 0/100. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by 6 out of 95 security vendors on VirusTotal. Additionally, AlienVault OTX records the domain in 8 threat intelligence pulses. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. Mitigation steps include blocking the domain and its associated IP address (188.114.97.3) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to this domain. Users should be educated on recognizing phishing indicators, such as mismatched domain registration dates (future-dated in this case) and unsolicited digital goods offers. If credentials or payment information were entered on this site, affected accounts should be secured immediately, and transactions disputed with financial institutions. Monitoring for related domains registered through the same registrar may help identify additional phishing infrastructure.