secondheritage[.]com

The domain secondheritage.com was registered on May 29, 2023 through OwnRegistrar, Inc. and is currently resolving to the IPv4 address 192.3.190.186, which belongs to AS36352 HostPapa and is geolocated in the United States. The authoritative nameservers listed are dns1.webproserver.com, dns2.webproserver.com, and a null entry, indicating a typical shared‑hosting configuration. The site presents an SSL certificate issued by Let’s Encrypt (R13), and an HTTP 200 response is returned when the page is fetched. The page title observed is "Home - Second Heritage Bank," suggesting the domain is being used to impersonate a financial institution, although the content of the page has not been analyzed for visual or functional elements.

Security telemetry shows that the domain is listed on one public blocklist and is blocked by the PhishDestroy service. VirusTotal analysis reports that eight out of ninety‑five scanning engines flag the domain, reinforcing the suspicion of malicious use. A Gridinsoft trust score of 0 out of 100 further indicates a lack of credibility. The web stack includes Bootstrap, LiteSpeed, jQuery UI, jQuery CDN, jQuery, FancyBox, Popper, and HTTP/3, all of which are common components in legitimate sites and do not provide direct evidence of malicious intent.

The MX record for secondheritage.com points to the domain itself, which is typical for domains that do not host email services. No additional intelligence such as OTX references or Safe Browsing alerts is available at this time. Given the combination of a financial‑sounding page title, a low trust score, multiple vendor detections, and inclusion on a blocklist, the infrastructure appears to be actively leveraged for generic phishing. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated IP address, and consider adding it to internal blacklists.