hdskelw[.]onelink[.]me

The domain hdskelw.onelink.me is a phishing site specifically conducting brand impersonation, targeting users of the backpack platform. It is currently under investigation and has been taken offline. The site posed as a CS2 skin trading service under the name SkinsMonkey, as indicated by its page title, but its primary threat was impersonating the backpack brand to steal user credentials or sensitive information. No drainer kit was detected on this site.

Technical indicators for hdskelw.onelink.me show it has 0 of 95 VirusTotal vendors flagging it as malicious, and it is not flagged by Google Safe Browsing. However, it appears on 1 security blocklist (PhishDestroy). The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolves to IP address 172.66.168.191, which is located in the US and hosted by Cloudflare, Inc. (AS13335). Its SSL certificate is issued by WE1. The Gridinsoft trust score for this domain is 0 out of 100, indicating high risk.

Users who interacted with hdskelw.onelink.me should take immediate safety steps. Since the site impersonated a brand and could have captured login credentials, change any passwords used on the site and enable two-factor authentication on all associated accounts. Monitor accounts for unauthorized activity. To report this phishing domain, submit it to Google Safe Browsing, PhishDestroy, and the impersonated brand's security team for further action.