kjeldgaardliving[.]com

The domain kjeldgaardliving.com is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows the domain resolves to 209.99.186.203, a Swiss address operated by HostRoyale Technologies. The site is served over HTTPS using a Let’s Encrypt certificate (identifier YE1) and relies on the authoritative nameservers ns3.my-ndns.com and ns4.my-ndns.com. Registration details list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. The HTTP response returns status 200 and the page title is “Kjeldgaard Living”, but no further content has been publicly disclosed. Threat intelligence indicates the domain appears on one security blocklist and is explicitly blocked by PhishDestroy. AlienVault OTX has referenced the host in twelve separate pulses, and VirusTotal records five detections out of ninety‑one scanners. These signals collectively confirm malicious intent, yet the precise phishing workflow and targeted brand remain unknown. Defenders should add kjeldgaardliving.com to DNS and proxy blocklists, enforce TLS inspection, and monitor the associated IP and name server infrastructure for any change. Continuous threat‑intel feeds should be consulted for updates, and incident response teams should be prepared to investigate any credential‑theft attempts that reference this domain.