heritage-skybk[.]online

heritage-skybk.online was registered on 27 June 2025 through the Porkbun LLC registrar. DNS resolution points the domain to the IPv4 address 198.251.84.200, which is the sole hosting endpoint observed in passive DNS. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one anti‑phishing service has classified it as malicious. VirusTotal records show that the domain has been examined by 91 scanning engines; none of those engines currently return a positive detection for malware or phishing, but the absence of a detection does not constitute a validation of safety.

No public information is available regarding the site’s SSL certificate, HTTP response codes, Safe Browsing status, Open Threat Exchange (OTX) mentions, or page title. Consequently, the visual or functional characteristics of the site remain unverified. The limited intelligence suggests the domain is being used for generic phishing campaigns, but the specific lures, credential‑stealing techniques, or targeted brands have not been observed in the available data set. Defenders should continue to monitor DNS queries for 198.251.84.200 and enforce blocking of heritage‑skybk.online at perimeter and endpoint controls.

Adding the domain to internal blocklists and updating URL filtering policies to include it will reduce exposure. Given the recent creation date, the single blocklist entry, and the absence of comprehensive public analysis, the infrastructure should be treated as active and potentially evolving. Further investigation, such as obtaining the HTTP response, checking certificate transparency logs, and probing for associated phishing landing pages, is recommended to confirm the threat’s scope and to develop remediation signatures.