taldarht[.]sbs

Analysis of taldarht.sbs, observed on July 20, 2026, identifies it as an active generic phishing site. The domain resolves to 27.124.47.186, an address hosted in Hong Kong and attributed to Rackip Consultancy Pte. Ltd. DNS resolution is served by ns3.my-ndns.com and ns4.my-ndns.com, and the registration record lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. HTTP requests return status 200 and the TLS certificate presents as “Telegram / *.local”, which does not correspond to the domain name and suggests a mis‑configured or deliberately misleading certificate. The page title returned is “Messenger”, providing no further context about the targeted service. The domain is listed on a single blocklist and is actively blocked by PhishDestroy. VirusTotal reports 15 of 91 scanners flagging the domain, indicating a moderate consensus of malicious behavior. While the specific phishing lure has not been disclosed, the combination of a generic title, mismatched certificate, and multiple detections warrants classification as high‑risk. Defenders should block the domain at network perimeter, monitor DNS queries for the associated IP and nameservers, and consider adding the indicator to internal threat‑intel feeds. Ongoing observation is recommended to capture any evolution of the payload or target profile.