skillzonbase[.]xyz

Analysis of the domain skillzonbase.xyz indicates it is actively associated with a high-risk crypto scam operation. Registered on August 4, 2025, through Squarespace Domains II LLC, the domain resolves to the IP address 198.49.23.145, hosted under AS53831 (Squarespace, Inc.) in the United States. The domain is currently flagged by at least one security blocklist, specifically PhishDestroy, and has been documented in 23 threat intelligence pulses on AlienVault OTX, suggesting persistent malicious activity. The page title, 'SkillzOnchain,' implies a focus on cryptocurrency or blockchain-related services, aligning with the classified scam type of 'Crypto Scam.' Infrastructure analysis reveals the use of Squarespace Commerce and related technologies, including Stimulus, Typekit, and HSTS, which are consistent with modern web hosting frameworks. The domain employs a Let's Encrypt SSL certificate (R13) and returns an HTTP 301 redirect status, a common tactic to obscure the final destination or evade detection. Security vendor detections on VirusTotal report 4 out of 95 engines flagging the domain as malicious, though the specific nature of these detections remains unverified. The domain's nameservers are hosted on Google Cloud (ns-cloud-d1.googledomains.com and related variants), a neutral infrastructure choice that does not inherently indicate malicious intent but is frequently leveraged in phishing campaigns due to reliability and scalability. Defenders should treat this domain as an active threat. The combination of a recent registration, low trust scores (Gridinsoft trust score of 0/100), and its presence on multiple threat intelligence platforms warrants immediate blocking at the network level. Further investigation into the final redirect destination and associated wallet addresses is recommended to mitigate potential financial fraud.