hikmvn[.]com

The domain hikmvn.com was registered on May 23 2026 through IONOS SE. It resolves to the IPv4 address 82.165.110.163, which geolocates to Germany. The authoritative nameservers are ns1.testpphpcss.shop and ns2.testpphpcss.shop. An SSL certificate issued by Let’s Encrypt (one‑year validity) is present, and the web server returns HTTP 200 for the root URL. The page title returned is “Grayscale – Start Bootstrap Theme”, and the site is built with Bootstrap, served by Apache HTTP Server, and loads assets from jsDelivr. The domain is listed on a single security blocklist and has been blocked by PhishDestroy. AlienVault OTX includes the domain in two threat‑intelligence pulses. Gridinsoft assigns a trust score of 0/100. VirusTotal scans show 11 of 91 security vendors flag the domain as malicious. The activity is categorized as credential phishing. The evidence points to a phishing infrastructure rather than a compromised legitimate site, but the specific targeted brand or credential collection page has not been publicly disclosed. No additional payload samples, redirect chains, or credential‑harvesting pages have been observed, so the full attack flow remains unknown. Defenders should block DNS resolution to 82.165.110.163 and the domain itself, monitor outbound traffic for HTTP requests to the host, and add the domain to email and web filtering policies. Continuous re‑evaluation is advised, as the active status may evolve.