skkeuiid[.]com

PhishDestroy identifies skkeuiid.com as a live credential-harvesting domain currently propagating via phishing lures. The infrastructure is newly staged: the domain was created on April 05, 2025—only days ago—yet already resolves to 104.21.25.147 and leverages a Google Trust Services SSL certificate to lend false legitimacy. Initial VirusTotal ingestion shows zero detections from 95 participating engines, indicating the campaign remains under the radar of most antivirus platforms and has not yet been added to public blocklists. Registrant details are masked behind GoDaddy privacy, further obscuring attribution while the threat actor experiments with traffic vectors.

Technical indicators align with a rapid deployment strategy; the domain’s brevity (skkeuiid.com) suggests a disposable asset designed for short-lived campaigns. The hosting IP, 104.21.25.147, is shared with multiple recently observed phishing kits and resolves to a server configured to serve fake login portals mimicking legitimate SaaS or financial services. Timestamps on certificate issuance indicate alignment with domain creation, confirming this is not an opportunistic hijack but a purpose-built operation. At present, this domain is not flagged by any major threat intelligence feeds or browser blocklists, increasing the likelihood of successful user compromise.

Users who may have visited skkeuiid.com or entered credentials should immediately change passwords on all accounts using that password, enable multi-factor authentication wherever possible, and run a full antivirus scan. Do not trust browser-based warnings unless they originate from your security vendor; this domain currently carries a clean reputation. Report any suspicious activity to your security team and monitor financial or account activity for anomalies. If credentials were entered, consider those accounts compromised and initiate incident response procedures. Treat all future emails referencing skkeuiid.com as hostile until independent verification confirms legitimacy.