sidrachainkyc[.]store

This domain, sidrachainkyc.store, is currently active and returns HTTP 200 responses. DNS resolution points to 163.61.188.7, hosted in the United States (MIT) and served behind a LiteSpeed web server with Tailwind CSS, Unpkg, Cloudflare Browser Insights, and HTTP/3 support. The authoritative nameservers are dns1.lytehosting.com, dns2.lytehosting.com, dns3.lytehosting.com, and dns4.lytehosting.com. The site presents a TLS certificate from Let’s Encrypt (R12) and is listed on at least one public phishing blocklist, with PhishDestroy already blocking it. Intelligence feeds have recorded the domain in two AlienVault OTX pulses, and Gridinsoft assigns a trust score of 0 / 100. VirusTotal analysis shows 2 of 91 scanners flag the domain, reinforcing its malicious classification as a credential‑phishing campaign targeting users of the “SidraChainkyc.com” portal. Registration was performed through Global Domain Group LLC. Current evidence confirms the domain’s role in credential harvesting, but the exact phishing kit, payload delivery method, and victim demographics remain unknown. Defenders should add sidrachainkyc.store to URL filtering policies, monitor outbound traffic for connections to 163.61.188.7, and enforce TLS inspection to capture any credential submissions. Continuous threat‑intel updates are recommended to detect any evolution of the infrastructure.