skinboxx[.]com

PhishDestroy has flagged skinboxx.com as an active crypto drainer under investigation, indicating a high-risk threat to cryptocurrency users. This domain, registered on March 02, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolves to IP 188.114.97.3 and currently shows 0 detections on VirusTotal out of 95 scans, suggesting it has not yet been widely blacklisted despite its malicious intent. The use of a Google Trust Services SSL certificate adds a misleading layer of legitimacy, which threat actors often exploit to deceive victims into trusting the site. The specific threat posed by skinboxx.com is a crypto drainer, designed to trick users into connecting their cryptocurrency wallets and unknowingly authorize malicious transactions that drain funds directly. The domain’s recent creation date—just months ago—combined with zero VirusTotal detections, highlights its early-stage deployment in active campaigns. Such drainers often impersonate legitimate crypto services, NFT marketplaces, or DeFi platforms to lure victims into connecting their wallets under false pretenses, such as claiming to offer exclusive rewards or claiming to resolve transaction issues. If you have visited skinboxx.com or connected your wallet to this domain, you may have exposed your cryptocurrency holdings to theft. Immediately revoke any wallet connections granted to this domain through your wallet provider’s connection management settings. Next, transfer any remaining funds to a newly generated wallet address and consider using hardware wallets for enhanced security. Report the incident to your wallet provider and relevant crypto security platforms such as MetaMask’s phishing detection or Etherscan’s phishing address registry. Stay vigilant for suspicious transactions and avoid interacting with unknown domains offering crypto-related services.