skilhouse[.]com

PhishDestroy identifies skilhouse.com as a credential theft phishing domain with an elevated risk level. This domain was specifically designed to trick users into revealing sensitive login information, a classic hallmark of credential harvesting attacks. The site is currently offline, but its recent registration and rapid flagging by security vendors suggest it was a short-lived but active threat.

Technical indicators paint a clear picture of risk. VirusTotal reports 1 out of 95 security vendors flagging this domain, which is a low but significant detection rate given the domain's brief existence. The domain was created on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with disposable domains. It resolves to IP address 104.21.35.215, which is hosted by Cloudflare, and its SSL certificate is issued by Google Trust Services (WE1). AlienVault OTX shows the domain appears in one threat intelligence pulse, and it is listed on one security blocklist. These factors collectively indicate a targeted phishing campaign with limited but real exposure.

Users who may have encountered skilhouse.com should immediately change any passwords entered on the site and enable two-factor authentication on affected accounts. Since this is a credential theft threat, monitoring for unauthorized access and reviewing account activity for suspicious logins is critical. Avoid clicking any links from emails or messages directing to this domain, and report any such communications to your security team. While the domain is now offline, similar variants may appear, so remain vigilant against unsolicited login prompts.