sky1onecu[.]com

The domain sky1onecu.com was registered on February 21, 2026 through Realtime Register B.V. and is presently taken offline. DNS resolution points to the IP address 195.179.237.2, which belongs to AS47583 Hostinger International Limited and is geolocated in the United States. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, indicating the use of a generic parking service for DNS management. The site presented the page title "Skyone Credit Union - Digital Online Banking," matching the declared scam type of banking phishing, which suggests an attempt to impersonate the legitimate Skyone Credit Union brand. Technical fingerprints reveal a WordPress stack running MySQL and PHP behind a LiteSpeed web server, with front‑end components such as All in One SEO, Swiper, jQuery, and jQuery Migrate.

Email handling is configured with MX records pointing to mx1.titan.email (priority 10) and mx2.titan.email (priority 20). The site employed a Let's Encrypt R13 SSL certificate, providing transport encryption but offering no assurance about the underlying content. Reputation data shows the domain appears on a single security blocklist, specifically PhishDestroy, and a Gridinsoft trust score of 0 out of 100, reflecting a low confidence rating. A VirusTotal scan involving 93 antivirus and URL‑filtering engines reported no detections at the time of analysis, though the absence of flags does not constitute validation of safety.

Overall, the infrastructure aligns with typical phishing deployments: a freshly registered domain, low‑reputation hosting, minimal detection signals, and a fabricated brand appearance. Uncertainty remains regarding the current activity status beyond the offline indication and the presence of any additional malicious payloads not captured by the available scans. Defensive teams should block sky1onecu.com at network perimeters, monitor DNS queries for the associated IP and MX hosts, and add the domain to internal phishing watchlists.