texbiom[.]vip

On July 22, 2026 the domain texbiom.vip was identified as a phishing infrastructure that has been taken offline. The site presented the page title "TEXBIOM | Open the world of luck and rewards!", suggesting a lure built around gambling or reward schemes, but no legitimate brand was explicitly referenced in the observed content. The domain was registered on January 24, 2025 through Web Commerce Communications Limited and is hosted on Cloudflare’s network (AS13335) with the IP address 104.21.96.1 located in the United States. DNS resolution uses the Cloudflare nameservers lara.ns.cloudflare.com and tony.ns.cloudflare.com.

No SSL certificate was associated with the domain at the time of analysis, indicating that HTTPS was not enforced. The domain appears on one security blocklist and has been flagged by the PhishDestroy blocklist, confirming its inclusion in known phishing collections. A reputation check from Gridinsoft assigned a trust score of 39 out of 100, reflecting a low confidence rating. VirusTotal recorded scans from 95 vendor engines, none of which flagged the domain, but this absence of detections does not constitute evidence of safety.

The current offline status limits immediate threat exposure, yet the underlying infrastructure—shared Cloudflare IP, generic page title, and lack of TLS—remains reusable for future campaigns. Defenders should continue to block texbiom.vip at perimeter filters, monitor the associated IP range for reuse, and consider adding the domain to internal threat intelligence feeds. Ongoing observation of the registrar and nameserver configuration is advised, as any changes could signal re‑activation or repurposing of the same hosting assets for new phishing attempts.