skeelosoft[.]com

PhishDestroy’s automated threat intelligence platform has identified skeelosoft.com as an active credential-harvesting phishing domain impersonating Microsoft 365 login portals. The domain is currently categorized as ‘active’ and remains under continuous monitoring by multiple security vendors due to its malicious infrastructure. The domain skeelosoft.com was registered through Realtime Register B.V. on March 16, 2026, and is currently hosted on IP address 95.164.123.16. While the domain utilizes a valid SSL certificate issued by Let’s Encrypt, it has not been flagged by any of the 95 VirusTotal scanning engines as of current analysis, indicating a low immediate detection rate. Despite this absence of early-stage detection, no trustworthy reputation or blocklist inclusion data supports its legitimacy, raising immediate concerns. This unreported threat represents a high-risk credential theft operation targeting enterprise users. PhishDestroy recommends immediate network-level blocking of skeelosoft.com and its hosting IP 95.164.123.16. Organizations are advised to audit email security policies, update browser-based blocklists, and enhance user awareness training to prevent potential compromise through this newly emerged attack vector.