taoimlsx[.]shop

The domain taoimlsx.shop is currently classified as a high‑risk generic phishing site and remains active as of the report date, July 19, 2026. Registration records show the domain was created through Nicenic International Group Co., Limited. DNS resolution points to IP address 27.124.47.186, which geolocates to Hong Kong and is hosted by Rackip Consultancy Pte. LTD. Authoritative name servers are ns3.my‑ndns.com and ns4.my‑ndns.com. An HTTP request returns a 200 status code and the page title is reported as “Messenger”, while the TLS certificate presented belongs to Telegram and lists a wildcard for *.local, an inconsistency that often appears in fraudulent deployments. The domain is listed on a single security blocklist and has been flagged by PhishDestroy. AlienVault OTX includes the domain in two threat‑intel pulses, indicating it has been observed in prior malicious activity. VirusTotal analysis shows six out of ninety‑one security scanners flag the domain, reinforcing the suspicion of malicious intent. Concrete details about the phishing payload, credential collection mechanisms, or targeted brand are not available in the current intelligence set. Given the combination of a deceptive TLS certificate, active blocklist status, and multiple detections, defenders should block network traffic to taoimlsx.shop, monitor DNS queries for the domain, and consider adding it to internal threat‑intel feeds. Ongoing observation is advised to capture any evolving tactics, techniques, or procedures associated with this infrastructure.