Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
siknport.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.6 years oldRegistered history | Clear |
| Web archive | Archived since 20257 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself on its homepage as the official Skinport marketplace, a platform for trading and buying Counter-Strike 2 (CS2) in-game skins "securely". It is served from a domain spelled differently from the brand it claims to be. The homepage carries a large amount of storefront-style text built around skin trading, which indicates a transactional marketplace model. Nothing independently links the site to the real-world brand or operator it names.
Scam/Impersonation Risk
This site carries confirmed, serious contradictions. It is blacklisted by external threat-intelligence sources. Several independent detection engines classify it as malicious or suspicious, and at least one tier-one security vendor is among them. The homepage title asserts "official website" status for a well-known skin marketplace, but the domain name is a transposed-letter variant of that brand's name. That pattern is typical of lookalike domains used to harvest logins or divert skin trades and payments. No page content establishes a legitimate affiliation with the brand. Page-level analysis could not independently confirm the site's identity, so the lookalike pattern is a strong indicator, not a proven finding. Behavioral testing recorded no wallet-connection prompts, clipboard manipulation, hidden forms, or content cloaking, and these results do not offset the blacklisting. It did record outbound data submissions from the page, one of them to a destination outside the recognized-services set, which is consistent with a storefront that sends visitor data to third parties. No conflicting legal entities were found, because no legal-identity pages were assessed. The decisive concern is the combination of the external threat listing, the brand-claiming title, and the lookalike domain.
- Homepage: the page title claims "official website" status for a CS2 skin market and promotes buying and trading skins "securely".
- Domain registration: registered 2026-08-23 (~0.17 years old), recent compared with the established brand the page claims to represent.
- Web archive: 7 snapshots spanning 2025–2026 (2 years tracked), a thin capture history.
- Behavioral testing of the homepage: 7 external data submissions across 3 successful runs, 1 to an unrecognized destination, and no wallet, clipboard, or cloaking abuse detected.
Regulatory Verification Notes
No licensing, registration, or corporate-identity information was found that would connect the site to a regulated or recognized operator, and no third-party broker-reputation record exists for it. The operator behind the site is not independently identifiable, and the registration details are incomplete. This is a case of ownership opacity, not an identity contradiction. Because the site presents a marketplace in which users would hand over credentials and payment, the absence of verifiable operator information weighs more heavily here than it would on an established, reputable site. The site's valid transport encryption and stable page delivery show only that the connection is encrypted and the page loads reliably. They say nothing about who operates the site or whether it is legitimate.
- Registrar and registration: the domain is registered through NICENIC International Group Co., Limited, from 2026-08-23 to 2027-08-23, with incomplete owner details.
- Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-19, so it confirms control of the domain only.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- On-page disclosure: no licensing or corporate-registration disclosure could be established from the captured homepage.
What to Verify Next
Compare this domain's exact spelling with the genuine marketplace address, taken from an independent, trusted source such as official social channels or a previously saved bookmark, not from this site or any link that led to it. Ask the genuine brand's support team whether this domain is affiliated with it. For any trading or payment platform that purports to be a licensed service, check the registry of the relevant jurisdiction for the operator's name. If the site was reached through an advertisement, message, or shared link, treat that source as suspect too and report it to the platform that delivered it.
- Homepage title: the brand claim made in the title is the main assertion that needs independent confirmation.
- External threat listing: the site is flagged by multiple detection engines, so any referral to it deserves scrutiny.
- Outbound submissions: homepage form or data transmissions to an unrecognized destination mean any information entered could reach parties outside the claimed brand.
Summary Verdict
The overall posture is high-risk. External threat detections combined with a brand-claiming lookalike domain outweigh the site's technical hygiene and stable operation, and the operator behind it is unidentified.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN/WAF, and every observed address is a Cloudflare edge address in the United States. The real hosting origin could not be observed. This is a mitigating factor only. It protects the site against some attacks, but it also prevents independent hosting verification and can mask rapid content swaps. The infrastructure cannot offset the reputational findings above.
Closing Assessment
The site should not be used to log in, enter credentials, trade skins, or make payments. Anyone who has already entered credentials or paid should change the affected passwords, enable multi-factor authentication, and contact their payment provider. Access to the genuine marketplace should be through an independently sourced address only.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by governance, external reputation, hosting and network, behaviour in a sandbox, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Hosting and network
- The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
04 Behaviour in a sandbox
- The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of siknport.com.
- The request stayed on siknport.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-23. Noted
- The earliest public archive of this site is from 2025-03-23. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3030::6815:10b5 |
| Name servers | AIDEN.NS.CLOUDFLARE.COM, COLETTE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-19 |
| Domain age | 1.59 years (continuous registration) |
| Domain expiry | 2027-08-23 |
| Archive first seen | 2025-03-23 |
| Archive snapshots | 7 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about siknport.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.