skinbsx[.]com

This domain, skinbsx.com, is identified as a credential theft infrastructure designed to harvest user login credentials through deceptive login pages. Analysis indicates the site mimics legitimate services to trick users into submitting usernames, passwords, and other sensitive authentication details, which are then exfiltrated to attacker-controlled servers. The domain poses a direct risk to personal and corporate accounts, particularly those associated with financial services, email providers, or cloud storage platforms. Infrastructure analysis reveals the domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.205.89 and is currently offline, though this status may change rapidly. Security vendors on VirusTotal flagged the domain as malicious in 7 out of 95 scans, while it appears on one security blocklist and was referenced in a single threat intelligence pulse on AlienVault OTX. The Gridinsoft trust score of 0/100 further confirms its classification as a high-risk asset. Users who visited skinbsx.com or entered credentials on any page associated with this domain should immediately take corrective action. Reset passwords for all accounts accessed from the same device or network during the exposure window, prioritizing email, banking, and work-related logins. Enable multi-factor authentication (MFA) where available to mitigate unauthorized access. Scan the device for malware using updated security tools, as credential theft sites often deploy secondary payloads. Monitor accounts for suspicious activity, such as unauthorized transactions or password reset attempts, and report any anomalies to the affected service providers. If corporate credentials were exposed, notify the organization’s security team to initiate incident response protocols.