Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
skinprt.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20244 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as the "official website" of a Counter-Strike 2 (CS2) skin marketplace. Its homepage title promises to let visitors trade and buy in-game skins "securely", and it carries a large body of marketplace-style page text. The apparent business model is peer-to-peer or storefront trading of virtual items. That model naturally involves account sign-in and payment or item transfers, and the domain name is a near-variant spelling of the marketplace brand named in the page title.
Scam/Impersonation Risk
The site carries confirmed contradictory signals. Several independent threat-intelligence engines currently flag it as malicious or suspicious, including a tier-one security vendor, and it is therefore appropriately described as blacklisted. These detections are the decisive factor in this assessment. No conflicting legal entities were found, and the observed on-page behavior shows no wallet-drainer, clipboard-hijack, hidden-form or cloaking activity. This does not offset the reputational finding. A marketplace that asks for sign-in, trades and payments is the kind of site where credential-harvesting and item-theft schemes operate. The homepage's "official website" and "trade securely" wording is an unverifiable assurance, and it sits on a domain only two months old that is spelled as a variant of the brand it names. That combination is a recognized lookalike pattern. The evidence does not independently prove brand impersonation, but it is enough to treat the site as hostile until proven otherwise. No contact email anomaly was observed.
- Homepage: the title claims "official website" status for a CS2 skin market and promises secure trading, while the domain is a variant spelling of the named brand.
- Threat-intelligence reputation: multiple engines return malicious and suspicious verdicts for the domain, including one tier-one vendor.
- Domain provenance: registered 2026-08-23 (~0.17 years old, about two months), expiring 2027-08-23.
- Web archive: 4 snapshots spanning 2024–2026 (3 years tracked), sparse for a site describing itself as an established marketplace.
- Homepage behavior: 3 of 3 sandbox runs succeeded with stable HTTP 200 responses. Eleven external requests were made, none to non-whitelisted destinations, and no wallet or clipboard abuse was observed.
Regulatory Verification Notes
No licensing, company registration or operator identity was independently established for this site. The site's own claims of being official cannot be treated as proof of identity, and registration details are incomplete, which amounts to ownership opacity rather than an identity contradiction. No third-party broker or regulatory-database match was found. This is therefore a verification gap and not a verdict on licensing. The reputational detections are the operative concern, not the missing disclosures. The site gives no verifiable basis for handling user funds, accounts or high-value virtual inventory.
- Domain registrar: NICENIC International Group Co., Limited, with incomplete registrant details.
- Transport security: DV-level TLS certificate issued by WE1, valid to 2027-01-19. This confirms encryption only and says nothing about operator identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Homepage: roughly 90,000 characters of text captured, but no verifiable operator, licence or registration detail was extracted.
What to Verify Next
Before any interaction, the marketplace's genuine web address should be established independently, for example through the brand's official social profiles, an app store listing, or a trusted community source, and compared character by character with this domain. Any operator, licensing or support claims should be confirmed through a channel not linked from this site. Saved credentials, Steam-style sign-in tokens or payment details should not be entered anywhere to test its authenticity. A user who has already interacted with the site should change the affected passwords, revoke third-party sign-in authorizations and review account and trade history for unauthorized activity.
- Domain age: about two months since registration, so there is no operating history to corroborate the site's claims.
- Homepage: the "official" and "secure" wording is unverifiable from the site alone.
- Archive record: 4 snapshots in total, too thin to support continuity of an established brand.
Summary Verdict
The overall posture is high-risk. Current external threat detections are decisive, and the site's very recent registration and thin history give no counterweight. The site's apparent legitimacy cannot be accepted, and its identity remains unverified. Sensitive interactions are unsafe, and only passive viewing is reasonably tolerable.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server was not observable. This is a mitigating factor only. Shared protective infrastructure is available to any customer, and it cannot offset the reputation findings. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes. A young domain with sparse subdomains is an unconfirmed heuristic and not an established risk.
Closing Assessment
Logging in, entering credentials, linking accounts, trading items or making any payment on this site should be avoided. Any visit should be passive and read-only, preferably from an isolated browser profile. If the real marketplace is the intended destination, it should be reached only through an independently confirmed address.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership, behaviour in a sandbox.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
05 Behaviour in a sandbox
- The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of skinprt.com.
- The request stayed on skinprt.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-23. Noted
- The earliest public archive of this site is from 2024-01-03. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:5b3c |
| Name servers | AIDEN.NS.CLOUDFLARE.COM, COLETTE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-19 |
| Domain age | 0.17 years (continuous registration) |
| Domain expiry | 2027-08-23 |
| Archive first seen | 2024-01-03 |
| Archive snapshots | 4 |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about skinprt.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.