skinjox[.]com

PhishDestroy identifies skinjox.com as a high-risk domain engaged in credential theft, a specific form of phishing designed to capture usernames and passwords. The site has been taken offline, but its recent activity and technical profile suggest it posed a serious threat to unsuspecting visitors. The domain was created on March 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with malicious sites.

Security analysis reveals several red flags: VirusTotal shows 7 out of 95 vendors flagging the domain as malicious, and it appears on one security blocklist. The domain resolves to IP address 104.21.62.254 and uses an SSL certificate from Google Trust Services (WE1). Additionally, AlienVault OTX has recorded it in one threat intelligence pulse, confirming its inclusion in broader security monitoring. These indicators collectively point to a deliberate attempt to deceive users into revealing sensitive information.

Given the credential theft nature of this threat, users should avoid any interaction with skinjox.com. If you have already entered credentials on this site, change your passwords immediately and enable two-factor authentication on affected accounts. Monitor your accounts for suspicious activity and consider using a password manager to generate unique, strong passwords. Report any phishing attempts to relevant authorities or your organization's security team.