teoldngi[.]sbs

Analysis indicates that teoldngi.sbs is associated with credential theft operations and is currently active. The observed page title is "Loading...", a pattern frequently seen on transient phishing infrastructure designed to capture user credentials through deceptive landing pages. Based on the available indicators, the domain presents a high-risk profile and should be treated as potentially malicious.

Technical review shows that the domain was flagged by 4 of 95 VirusTotal vendors. Registration records indicate creation on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution maps the domain to IP address 216.150.1.1. The infrastructure currently appears on 1 security blocklist, and the site is reported as blocked by a security monitoring source. An SSL certificate is present, issued under Let's Encrypt / YR1, which demonstrates encrypted connectivity but does not establish legitimacy.

At the time of assessment, teoldngi.sbs remains active. Organizations and individual users should avoid submitting credentials, personal information, or authentication codes through this domain. Network defenders should monitor for connections to 216.150.1.1, block the domain where appropriate, review authentication logs for suspicious activity, and investigate any prior interactions with the site. Continued monitoring is recommended due to the domain's recent creation date and active status.