skinmbox[.]com

This domain, skinmbox.com, is identified as a fake login portal designed to harvest user credentials through deceptive authentication interfaces. Analysis indicates the site impersonated legitimate services to trick visitors into submitting usernames, passwords, and potentially multi-factor authentication codes, enabling unauthorized account access and subsequent fraudulent activity. The infrastructure was configured to mimic trusted platforms, increasing the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolved to the IP address 188.114.96.3 and was flagged by 6 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. The domain appeared on one security blocklist and was referenced in a single threat intelligence pulse on AlienVault OTX. Additionally, it received a trust score of 0 out of 100, further confirming its malicious classification. Users who visited skinmbox.com or entered credentials on the site should immediately revoke any submitted login details by changing passwords on all associated accounts. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts from unfamiliar locations. If financial or sensitive data was exposed, consider reporting the incident to relevant authorities and credit monitoring services. Network administrators should block the domain and its resolving IP address (188.114.96.3) at the perimeter to prevent further exposure.