teosoanh[.]sbs

The domain teosoanh.sbs is currently active and resolves to the IP address 27.124.47.186, which geolocates to Hong Kong and is hosted by Rackip Consultancy Pte. Ltd. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED and the authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. An SSL certificate issued for Telegram and the wildcard *.local is present, and the HTTP response returns status code 200 with a page title of "Messenger". VirusTotal records indicate that 17 of 91 security vendors have flagged the domain, and it is listed on one public blocklist. The domain has also been incorporated into two AlienVault OTX threat‑intel pulses and is blocked by the PhishDestroy service. Defenders should immediately add teosoanh.sbs and its associated IP to network deny lists, ensure DNS filtering blocks resolve to this domain, and monitor outbound connections for any traffic to the IP address. Given the limited public analysis of the page content, further sandbox inspection is recommended to confirm the payload and any credential‑harvesting mechanisms. Continuous threat‑intel updates should be applied to capture any new indicators associated with this infrastructure.