troisztr[.]shop

Analysis indicates that the domain troisztr.shop is currently active and has been flagged for generic phishing activities. The page title found is 'Messenger', suggesting an attempt to impersonate a messaging service, likely targeting users seeking to access such a platform. The domain resolves to the IP address 27.124.47.186, which is registered to Rackip Consultancy Pte. LTD in Hong Kong. It is notable that this domain appears on one security blocklist and is included in three threat intelligence pulses from AlienVault OTX, further corroborating its malicious nature. The SSL certificate associated with the domain is linked to Telegram, but it appears to be misused in this context. Additionally, six out of 91 security vendors on VirusTotal have flagged the domain, indicating a significant risk. The domain has been registered through Nicenic International Group Co., Limited, and uses nameservers ns3.my-ndns.com and ns4.my-ndns.com. Given the evidence of its phishing characteristics, it is recommended that defenders block access to this domain and monitor for any related phishing attempts that may target users under the guise of a legitimate messaging platform.