m[.]skillingusmarkts[.]cc

This domain, m.skillingusmarkts.cc, operates as a fraudulent trading platform impersonating the legitimate Skilling brand to harvest user credentials and financial details. Analysis indicates the site employs realistic login interfaces and transaction prompts to deceive victims into entering sensitive account information, including passwords and payment card details. The infrastructure is designed to mimic authentic trading environments, increasing the likelihood of successful credential theft and unauthorized fund transfers. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on November 24, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with suspicious registrations. It resolves to IP address 172.67.193.86, hosted on Cloudflare infrastructure (AS13335), which is commonly leveraged to obscure origin servers. Security vendors flag the domain at 18/95 on VirusTotal, while three independent blocklists—PhishDestroy, MetaMask, and SEAL—have actively blocked access. The page title 'Skilling' further confirms the brand impersonation strategy. Users who visited m.skillingusmarkts.cc should immediately revoke any entered credentials and monitor linked financial accounts for unauthorized activity. Reset passwords for all platforms where identical credentials may have been reused, prioritizing email and banking services. Scan local devices for malware using updated security tools, as credential theft sites often deploy secondary payloads. Report the incident to relevant financial institutions and consider placing fraud alerts on credit files if payment details were disclosed. The domain’s current offline status does not eliminate risk, as stolen data may still be exploited.