Is skinoport.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The site presents itself as "Skinport", describing itself as the official website of a CS2 skin market where players can trade and buy in-game skins "securely". Its homepage carries a large volume of marketplace copy, which suggests a peer-to-peer or retail trading platform for virtual gaming items. Its apparent business model is the intermediation of digital-item purchases, a category that normally involves account login and payment.

Scam/Impersonation Risk

Contradictory signals are present and carry decisive weight. Several major security vendors currently flag the domain as malicious, and the combined reputation picture amounts to a confirmed blacklist listing. Reputation records also associate the domain with phishing activity. The homepage title asserts that this is the "official website" and promises to trade and buy skins "securely". Those are unverifiable self-descriptions, and nothing independent ties the operator to the brand it invokes. The domain registration is recent and its web history is thin, which fits a short-lived or disposable deployment better than an established marketplace. Ownership details are incomplete, which adds to the opacity but is not treated as an identity contradiction. No conflicting legal entities were observed. The site's own behavior did not show external data exfiltration, wallet-connection prompts, clipboard manipulation or hidden forms, so the concern rests on reputation and provenance rather than on observed on-page malicious mechanics. Evidence:

• Homepage: the title claims "Official Website" and "Trade & Buy Skins Securely", and no independent corroboration of that claim was found.
• Domain registration: created 2026-07-11, about 0.29 years old, through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web archive: only 2 snapshots, both from 2024-05-21, over 1 year tracked, so there is no meaningful historical continuity.
• Homepage behavior: no external XHR or POST traffic and no wallet or clipboard activity was observed in the sandbox sessions.

Regulatory Verification Notes

The homepage captured for analysis offers no evidence of corporate identity, such as a registered operating entity, licence or dispute-resolution framework. This is notable because a marketplace that handles customer payments and digital assets would be expected to publish them. No third-party broker or regulator record matched the domain, so there is no outside assurance to offset the reputation findings. The technical hygiene is basic. The transport encryption is valid, but it is domain-validated only and confirms control of the domain, not the identity of the business behind it. Evidence:

• Transport security: the TLS certificate was issued by WE1 at DV level and is valid to 2026-12-08, with about 43 days remaining.
• Hosting: the site is served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Homepage: the page content is extensive, but no legal entity, registration number or licensing statement was identified in it.

What to Verify Next

Any dealings with this domain should start from a known-good entry point rather than from this address. Anyone who intends to trade skins should reach the marketplace by typing the brand's address from an independent, trusted source, or through the game publisher's own links, and then compare the domain with the one analysed here. The operating company, licence status and dispute procedures should be confirmed with the relevant corporate registry or regulator before any engagement. Official support and contact channels should be confirmed through an offline or independent route. Evidence:

• Homepage: the "official" claim should be tested against the publisher's or brand's own published domain list.
• Domain history: the registration is about three months old, so the operator's tenure can be checked against the brand's own announcements.
• Reputation: the current malicious classifications should be re-checked with the reporting security vendors for any delisting or clarification.

Summary Verdict

The overall posture is high risk. Active malicious classifications from established security sources, a very short and thin provenance, and a branding claim with no independent support converge on a cautionary conclusion. The technically orderly setup does not offset that reputation damage, and the operator's real-world identity remains unconfirmed.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge nodes. The origin server was not observable, so the real hosting location cannot be verified independently. This setup is a mitigating factor only. It does not offset the reputation findings, and edge-only visibility makes content swaps easier to conceal. The certificate and network identifiers are consistent and well-formed, but they say nothing about who operates the site.

Closing Assessment

Accounts, credentials, payment details and trade items should not be submitted to this domain until the malicious classifications are cleared and the operator is independently confirmed. Any necessary access should be limited to passive viewing, from an isolated browser or device that holds no stored credentials.