skiniout[.]com

This domain, skiniout.com, is flagged as an elevated-risk fake discount scam targeting Russian-speaking users. Analysis indicates the site impersonates legitimate retail offers, using deceptive language such as 'Вещи максимально выгодно! Быстрые и безопасные способы' to lure victims into submitting payment details or personal information. The threat type aligns with fraudulent e-commerce schemes designed to harvest sensitive data under false pretenses. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious activity. It resolves to the IP address 104.21.6.15, a Cloudflare-associated endpoint often exploited to obfuscate hosting origins. Security vendors on VirusTotal flagged the domain at a detection rate of 12/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and has been documented in eight AlienVault OTX threat intelligence pulses. Despite using a Google Trust Services SSL certificate, the presence of these indicators confirms its malicious intent. Mitigation against this fake discount scam requires multi-layered defenses. Users should block the domain and its resolving IP (104.21.6.15) at the network level to prevent access. Organizations should update endpoint protection rules to detect and quarantine any attempts to visit or interact with the domain. Given the Russian-language targeting, security teams should monitor for similar domains registered through NICENIC INTERNATIONAL GROUP or resolving to Cloudflare IPs with anomalous SSL certificates. User education should emphasize verifying retail offers through official channels and scrutinizing domain registration dates, as newly created domains with immediate discount claims are high-risk indicators.