locketheart.org
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Detailed link, domain and iframe URLs from this site are not shown here - some of the strings contain content that isn't appropriate for general-audience display. The counts above reflect the full scan.
Description of locketheart.org
locketheart.org appears to be a personal photography portfolio website branded as "Tiffany Chang | Photography." Based on the homepage screenshot, the site showcases portrait, cosplay, and themed photography work in a gallery-style layout, with navigation links such as Portfolio, Blog, Project:Me, and About. The visible social links suggest it may be operated by an individual photographer or creative professional using the site to present past work and connect visitors to social media profiles.
The domain itself has been registered for many years, which is consistent with a long-running personal or portfolio site rather than a newly created web property. The content shown in the screenshot does not resemble a storefront, financial service, or software download portal; instead, it appears to function primarily as a media and self-promotion site for photography projects and blog-style posts.
Safety Assessment for locketheart.org
The scan results show mixed signals at the time of this scan. Multiple web-classification providers categorized the domain as phishing-related, 4 out of 91 security engines flagged it, and one major threat database listed it for social-engineering activity. Those are meaningful indicators that should not be ignored, even though the visible homepage appears to be a photography portfolio rather than an obvious credential-harvesting page.
At the same time, several factors reduce confidence in a severe conclusion. The domain is approximately 18 years old, most blacklist databases checked did not report it, DNS-based blocklist checks were clean, and the additional malware scan mainly reported a generic suspicious object tied to an external script reference rather than a clearly identified malware family. This combination can sometimes occur when an older legitimate site is compromised, contains outdated third-party code, or has specific pages that trigger reputation systems while the homepage looks benign.
Because the phishing-related detections include both multi-engine flags and a social-engineering listing, caution would be appropriate when interacting with the site, especially on internal pages beyond the homepage. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL certificate with an expiry in October 2026, and it resolves to an IP hosted by WHG Hosting Services Ltd in Buffalo, United States. The web server identifies as openresty/1.31.1.1. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional authenticity layer.
From a security perspective, the main concerns are reputational rather than transport-layer related. The scan data indicates phishing-related detections and a social-engineering listing, while the malware scan flagged one suspicious file/path and an external script reference associated with a generic suspicious object. The site also appears to expose some embedded content and older-style external script usage, which may increase risk if the installation is outdated or has been modified.
Share your experience with this website. Was it safe? Did you encounter any issues?