tarskilltocl[.]com

This domain, tarskilltocl.com, was registered on 23 February 2026 through NiceNIC International Group Co., Limited. The authoritative nameservers are oswald.ns.cloudflare.com and vida.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s network. DNS resolution points to IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No TLS certificate was observed, and the site currently returns an offline HTTP status, confirming that the content has been taken down.

The page title resolved during the short live period was “Softskill CL”. Threat intelligence from PhishDestroy has already classified the domain as a generic phishing site and placed it on one security blocklist. VirusTotal scans show that two of ninety‑three antivirus engines flagged the domain, providing additional corroboration of malicious intent. The limited detection footprint suggests a brief operational window, but the presence of a Cloudflare front‑end and a recent registration date are typical of fast‑flux phishing infrastructure.

At present, no public Safe Browsing or OTX entries are linked to the domain, and no further payload or credential‑harvesting page details have been released. Defenders should block the domain at the DNS level, add the IP 188.114.97.3 to outbound filtering rules, and monitor for any newly observed sub‑domains that resolve to the same Cloudflare nameservers. Continuous re‑query of VirusTotal and blocklist feeds is advisable, as additional detections may appear if the actor re‑activates the site.