globalskincareid[.]store

PhishDestroy identifies an active crypto-draining scam at globalskincareid.store that lures visitors with counterfeit skincare offers to drain cryptocurrency wallets. The site masquerades as a legitimate online store selling skincare products but is engineered to trick users into connecting their wallets and signing malicious transactions that silently transfer funds to attacker-controlled addresses. Compromised wallets often experience delayed theft—transactions may not appear until hours or days after the initial connection—leaving users unaware until funds vanish from their dashboards.

This domain was flagged by 8 out of 95 VirusTotal security vendors, placed on two public blocklists, and is already blocked by OpenPhish and PhishingArmy. It resolves to IP 182.16.78.69 and holds a valid Let’s Encrypt SSL certificate to appear legitimate. The domain was likely registered recently and is using a generic registrar to avoid traceability. Despite its polished appearance, the site exhibits clear red flags including mismatched branding, irregular payment prompts, and wallet-connect popups that request excessive permissions—hallmarks of a crypto drainer operation designed to steal digital assets.

If you visited globalskincareid.store or connected your wallet, disconnect the site immediately from your wallet interface, revoke any unauthorized permissions in your wallet settings, and transfer remaining funds to a new wallet. Scan your system for malware, rotate all connected wallet passwords, and report the incident to your wallet provider. Always verify new websites by checking domain age, SSL issuer, and community blocklists before entering personal or financial information.