skindbbox[.]com

The domain skindbbox.com has been confirmed as a fraudulent digital goods store designed to deploy crypto drainer malware. Analysis indicates the site operated under the guise of selling virtual items, using the Russian-language page title 'Лучшие цифровые предметы только у нас!' ('The best digital items only with us!'). The domain currently shows an offline status, though prior activity suggests it targeted cryptocurrency wallet users with malicious scripts intended to drain funds upon interaction with the site’s content.

Technical indicators reveal the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, an unusually future-dated creation that may indicate domain spoofing or registrar manipulation. It resolved to the IP address 188.114.97.3 and was flagged by 5 of 95 security vendors on VirusTotal, while appearing on a single blocklist. The domain holds a Gridinsoft trust score of 0/100 and was documented in one AlienVault OTX threat intelligence pulse. Detection engines identified the infrastructure as part of a broader phishing campaign leveraging fake digital storefronts to distribute wallet-draining payloads.

As of the latest assessment, skindbbox.com remains offline, though the underlying infrastructure may persist or resurface under a different domain. Users who interacted with the site are advised to immediately disconnect affected devices from networks, revoke any connected wallet permissions, and scan systems for malware using updated detection tools. Organizations should update blocklists to include the domain and associated IP, while monitoring for similar registrar patterns or future-dated domain creations as potential indicators of compromise.