Is skinsport.net a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Skinsport.net is a web storefront that presents itself as the official Skinport marketplace for Counter-Strike 2 (CS2) in-game skins. Its homepage carries the title "Official Website :: CS2 Skin Market · Trade & Buy Skins Securely" and invites visitors to buy and trade skins. Its apparent business model is a peer-to-peer digital-item marketplace, a category in which users are asked to hand over account credentials, payment details or trade-linked access.

Scam/Impersonation Risk

This assessment is cautionary and security-forward. Multiple independent security engines currently classify the domain as malicious, including two top-tier vendors, and the aggregate detection count is in the double digits. That meets the threshold for a confirmed blacklist listing and is the decisive factor in the assessment. No conflicting legal identities, brand-impersonation finding or phishing-page finding was independently observed on the pages captured. The risk therefore rests on the confirmed reputation listing and not on identity contradictions. The homepage claim of being the "official website", combined with a skin-trading brand name, is an unverified on-site assertion. It is no basis for trust given the listing. Behavioural testing observed no wallet-drainer activity, clipboard manipulation, hidden forms or content cloaking. However, the page issued a dozen outbound POST requests, one of them to a destination outside the recognised service set. For a marketplace that handles logins and trades, any undisclosed third-party data submission is material. Evidence:

• Homepage: multiple security engines flag the domain as malicious, and a kill-switch condition was triggered by the size of the detection count.
• Homepage behavioural run (3 of 3 runs successful): 12 external POST requests, 1 to a non-whitelisted destination; no wallet-connect, clipboard-write or hidden-form activity.
• Domain provenance: the current registration dates from 2026-07-11 (~0.29 years old). Web-archive captures run from 2009 to 2026, but only 27 snapshots over 18 years tracked. This is thin historical continuity, with a long dormant gap in the record.

Regulatory Verification Notes

The captured homepage does not present a clear operating entity, registered company details or any licensing or registration statement for the marketplace. This is a disclosure gap, not evidence of wrongdoing in itself. It is relevant here because the site invites trading activity. Ownership of the domain is opaque, and no governing entity can be tied to the site from the evidence supplied. No third-party broker or regulatory-database record matched this domain, so there is no external reputational signal on this point either way. The technical hygiene observed is ordinary and does not offset the reputation listing. A certificate is present, but it is domain-validated only, which confirms control of the domain and says nothing about who operates it. Evidence:

• Homepage: no named operating company, registration number or licence statement.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-07, with a short remaining validity window.
• Registration: registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-07-11, expiring 2027-07-11.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the genuine Skinport marketplace should be reached only through a address typed from an independent, trusted source and not through this domain. The prospective user should compare the two sites' operating entity, terms and support channels. Official support and contact channels should be confirmed through that independent route. Any account, trade link or payment instruction received from this domain should be treated as unconfirmed until the operator is independently identified. Security teams should check whether the domain appears in internal mail or proxy logs and block it where it does. Evidence:

• Homepage: the "official website" claim and Skinport-branded title cannot be corroborated from this domain.
• Registration record: a recent registration and thin archive continuity, which an independent check of the genuine brand's domain would clarify.
• Behavioural run: an outbound submission to a non-whitelisted destination that cannot be attributed to a known service.

Summary Verdict

Available evidence supports a critical, high-risk posture. Confirmed malicious classification by multiple security sources outweighs the ordinary technical hygiene observed, and nothing on the site establishes its operator or legitimacy. The site is unsuitable for any sensitive interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed IP address is a CDN edge node, so the origin server could not be seen. This is a mitigating factor only. It shows commodity protective infrastructure but not legitimate operation, and edge-only visibility prevents independent hosting verification and allows content to be swapped quickly without a change in the observable network footprint. The infrastructure does not offset the reputation listing.

Closing Assessment

The site should not be used for login, credential entry, trade-link authorisation or any payment. Where it has already been visited, any credentials or payment details entered should be rotated or reviewed, and the domain should be blocked in organisational controls.