taxoyzzb[.]sbs

The domain taxoyzzb.sbs is identified as a high-risk brand impersonation threat targeting Telegram users. This domain impersonates the legitimate Telegram service by using a page title that reads 'Telegram Web'. The presence of this domain poses a significant risk to unsuspecting users who may be misled into providing sensitive information under the guise of accessing their Telegram accounts.

Analysis reveals that taxoyzzb.sbs was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 15, 2026, indicating a recent establishment aimed at facilitating malicious activities. Furthermore, it has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a concerning level of recognition among security systems. The domain is also resolving to the IP address 27.124.47.186, which may be associated with other nefarious activities or domains. Users should remain vigilant, as the domain's registration and detection metrics suggest a deliberate effort to deceive users and compromise their data security.

If users have visited taxoyzzb.sbs, it is imperative to take immediate action. They should refrain from entering any personal information or credentials on the site and should conduct a thorough review of their online accounts for any unauthorized access or changes. Additionally, users are advised to report the domain to relevant authorities and consider implementing enhanced security measures, such as two-factor authentication, to protect their accounts from potential compromise.