skysafesecurity[.]com
“Sky Safe Security – Cloud & App Security”
The domain skysafesecurity.com was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a crypto drainer kit but was designed to deceive users into disclosing sensitive information through fraudulent login or credential harvesting pages. As of the latest verification, skysafesecurity.com has been taken offline, though prior activity classified it as a phishing threat.
Technical analysis revealed that skysafesecurity.com was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Ultahost, Inc. on March 22, 2026, and resolved to the IP address 173.211.81.11, hosted in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'Sky Safe Security – Cloud & App Security'. Technologies detected on the site included WordPress, MySQL, PHP, LiteSpeed, jQuery Migrate, and jQuery. Google Safe Browsing did not flag the domain at the time of assessment.
Users who may have interacted with skysafesecurity.com should immediately change any credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized access or fraudulent activity. Victims are advised to report the phishing domain to their email provider, browser security teams, and platforms like Google Safe Browsing or PhishTank to aid in broader mitigation efforts. If financial or crypto-related details were exposed, additional steps such as revoking token approvals or transferring funds to a new wallet may be necessary.
Enregistrement du signalement transmis
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-20260318-0DBF57- Titre de la page capturée
- Sky Safe Security – Cloud & App Security
- Artefact PDF
- Preuve PDF
Fondement juridique
Texte intégral des preuves
Acceptable Use Policy (AUP): The domain skysafesecurity.com is engaged in phishing activities, which constitute a clear violation of your AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain directly contravenes your TOS, which reserves the right to suspend or terminate services for any violations related to fraudulent activities.
Applicable Laws (US):
Computer Fraud and Abuse Act (18 U.S.C. § 1030): This federal law prohibits unauthorized access to computers and the use of such access to commit fraud.
Wire Fraud (18 U.S.C. § 1343): Engaging in schemes to defraud individuals through electronic communications is a violation of this statute, which applies to phishing activities.
CAN-SPAM Act (15 U.S.C. § 7701 et seq.): This law regulates commercial email and prohibits deceptive practices in electronic communications, including phishing.
Regulatory Note: Failure to take immediate action against this domain may expose your organization to legal liability and regulatory scrutiny. Non-compliance with applicable laws and your own policies could result in severe penalties.
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | skysafesecurity.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources · synchronisé le 10/08/2026
Chronologie de détection
Observations enregistrées par ordre chronologique.
-
VirusTotal
VirusTotal : 0 → 1
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, noms TLS et horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analyse forensique
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of skysafesecurity.com · checked Mar 18, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif