skyreals[.]rumahsakit[.]de

Analysis of skyreals.rumahsakit.de indicates that the domain is currently active and is being used for generic phishing operations. The domain is listed on two security blocklists and is specifically blocked by PhishDestroy and OpenPhish, confirming its malicious intent. VirusTotal reports that 17 of 95 scanned security vendors have flagged the domain, providing additional corroboration of its malicious nature. DNS resolution points to the IPv4 address 103.52.114.215, and the authoritative name servers are aldo.ns.cloudflare.com and pat.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare's DNS infrastructure.

No further public information about the registrar, creation date, or SSL certificate is available in the supplied intelligence, leaving those aspects uncertain. The lack of additional context such as page title, brand targeting, or observed payloads means that attribution beyond the generic phishing label cannot be confirmed at this time. Defenders should add skyreals.rumahsakit.de to internal block lists, enforce URL filtering, and monitor outbound traffic for connections to the associated IP address.

Network security devices should be configured to drop or quarantine any HTTP/S requests to the domain, and endpoint protection solutions should be updated to include the 17 vendor detections reported by VirusTotal. Continuous monitoring of the domain's DNS records is advised, as changes to the hosting provider or IP address could indicate further campaign evolution. Organizations that rely on email or web-based credential entry for legitimate services should educate users about the risk of unsolicited links and encourage verification of domain authenticity before entering credentials.