skelligboats[.]com

This domain is flagged as a high-risk phishing site specifically designed to impersonate Bitpie, a cryptocurrency wallet service. Analysis indicates the domain hosts fraudulent content mimicking the official Bitpie platform, likely aiming to distribute malicious wallet software or harvest user credentials for financial theft. The threat type is classified as generic_phishing with a focus on cryptocurrency-related fraud, a common vector for targeting digital asset holders. Infrastructure analysis reveals the domain skelligboats.com was registered on March 13, 2019, through Dynadot Inc. It resolves to the IP address 104.21.5.253 and uses a Let's Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. The domain appears on 3 security blocklists and is referenced in 4 threat intelligence pulses on AlienVault OTX. VirusTotal reports 14 out of 95 security vendors flagging the domain as malicious. Additionally, the page title, written in Chinese, explicitly mentions "Bitpie official network" and "Bitpie wallet download," further confirming its impersonation intent. The domain is currently offline but remains a documented threat. Mitigation steps for this threat type include blocking the domain and associated IP (104.21.5.253) at the network perimeter to prevent access. Organizations should update endpoint protection rules to detect and quarantine any attempts to access or download content from this domain. Users who may have interacted with the site should be instructed to verify their cryptocurrency wallet integrity, revoke any suspicious transactions, and reset credentials for associated accounts. Given the domain's history and blocklist presence, monitoring for related infrastructure (e.g., newly registered lookalike domains) is recommended to preempt further phishing attempts.