teoudnzi[.]shop

teoudnzi.shop is currently flagged as a high‑risk generic phishing site. The domain resolves to the IPv4 address 27.124.47.186, which is registered to Rackip Consultancy Pte. LTD in Hong Kong. The web server presents a TLS certificate issued to “Telegram / *.local”, a mismatch that is typical of malicious infrastructure. HTTP requests return status 200 and the page title is reported as “Messenger”, suggesting an attempt to lure users into a messaging‑service credential harvest. AlienVault OTX has cited the domain in two separate threat‑intel pulses, confirming its presence in the broader phishing ecosystem. Seven of ninety‑one VirusTotal scanners have flagged the domain, and it is listed on at least one public blocklist, where it is also noted as blocked by PhishDestroy. The available data does not include a full content analysis or the specific credential‑capture technique employed, leaving the exact phishing workflow uncertain. Defenders should block or sinkhole the domain, monitor outbound connections to the associated IP, and update detection rules to include the observed TLS subject and page title indicators. Continuous re‑evaluation is advised as additional intelligence may emerge.