skichouse[.]com

This domain, skichouse.com, poses as a gaming platform offering in-game rewards or loot box openings to deceive users. Analysis indicates it is designed to harvest login credentials, payment details, or personal information under the pretense of a legitimate gaming service. The page title, displayed in Cyrillic as 'Игровая платформа - Открытие ящиков,' suggests it targets Russian-speaking users, likely through social engineering tactics such as fake giveaways or fraudulent game promotions. Infrastructure analysis reveals multiple technical indicators confirming its malicious nature. The domain was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which, while legitimate, is often exploited by threat actors to lend false credibility. Security vendors have flagged the domain, with 6 out of 95 engines on VirusTotal detecting it as malicious. Additionally, it appears on one security blocklist and has been referenced in eight threat intelligence pulses on AlienVault OTX, further corroborating its association with phishing campaigns. Users who visited skichouse.com should take immediate action to mitigate potential risks. If any credentials or payment information were entered, reset passwords for all associated accounts, particularly gaming platforms or financial services, and enable multi-factor authentication where available. Monitor bank and credit card statements for unauthorized transactions, and consider placing a fraud alert with credit bureaus if sensitive data was exposed. Run a full antivirus scan on the device used to access the site to detect any potential malware or keyloggers. Report the incident to local cybersecurity authorities or dedicated phishing reporting platforms to assist in tracking and dismantling the infrastructure.