sikard[.]com

This domain, sikard.com, was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently flagged as a high-risk generic phishing site. Infrastructure analysis reveals the domain resolves to IP 92.53.96.141, hosted in Russia under JSC "TIMEWEB," with nameservers ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, and ns4.timeweb.org. The site uses Nginx and a Let's Encrypt SSL certificate (R13). It is actively blocked by at least two security vendors (PhishDestroy and ScamSniffer) and appears on two security blocklists. The page title, "СИКАРД - Изготовление металлоконструкций: ворота, навесы, перила, лофт мебель," suggests impersonation of a legitimate metal fabrication business, though no specific brand impersonation is confirmed from available data. The domain returns an HTTP 200 status, indicating it is still active as of July 12, 2026. MX records point to mx1.timeweb.ru and mx2.timeweb.ru, which may facilitate phishing or fraudulent email campaigns. While four out of 95 security vendors on VirusTotal flag the domain, this alone does not confirm malicious intent but aligns with broader detection patterns. Defenders should treat this domain as high-risk due to its infrastructure, blocklist status, and active phishing classification. Immediate actions include blocking the domain and IP at perimeter security controls, monitoring for related email traffic, and investigating any internal connections to the domain. Further analysis of the site's content and behavior is recommended to determine the exact phishing mechanism, though no login forms or specific scam categories have been confirmed at this stage.