skytigerstudios[.]xyz

PhishDestroy identifies skytigerstudios.xyz as a recently activated crypto drainer kit domain designed to deceive users into connecting cryptocurrency wallets and executing unauthorized transfers. The domain was registered on September 04, 2025, and is currently resolving to IP address 188.114.97.3. Security telemetry indicates 17 out of 95 VirusTotal vendors flag this domain as malicious, with no evidence of a branded impersonation target at this time. This domain presents elevated risk due to its active status, recent registration, and partial detection coverage. Technical indicators include registration through Web Commerce Communications Ltd, a Google Trust Services SSL certificate, and a VirusTotal detection rate of 17/95. The domain resolves to a hosting infrastructure associated with suspicious activity, with creation occurring within the last 30 days. While no confirmed blocklist entries are cited in the provided data, the combination of low detection coverage and active deployment suggests potential for rapid expansion across threat feeds. As of current assessment, skytigerstudios.xyz remains active and unblocked across major security platforms. Immediate containment is advised via network-level blocking of the IP and domain. Users should avoid any interaction with the domain and report any exposure to security teams. The remaining risk is elevated due to the domain's recent activation and partial detection coverage, indicating a likely active campaign with potential for increased targeting. Organizations are urged to update threat intelligence feeds and firewall rules to include this domain and IP.