teoszujt[.]sbs

The domain teoszujt.sbs is currently active and hosts a page titled “Messenger”. DNS resolution points to IP address 27.124.47.186, which is registered to Rackip Consultancy Pte. LTD in Hong Kong. The domain’s registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED, and its authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. A TLS certificate issued for “Telegram / *.local” is presented, indicating a potentially misleading certificate chain. VirusTotal analysis shows that 15 of 91 security vendors have flagged the domain as malicious, and it is listed on one external blocklist. The PhishDestroy blocklist also includes the domain. HTTP requests return a 200 OK status, confirming that the site is reachable. While the page title suggests a messaging service, the content has not been analyzed, and the specific phishing vector (e.g., credential harvesting or link redirection) remains unclear. Defenders should immediately add teoszujt.sbs and its resolving IP 27.124.47.186 to network block lists, enforce TLS inspection to detect the anomalous certificate, and monitor for related traffic. Continuous re‑evaluation is advised, as the underlying payload or target may evolve.