taxopngj[.]sbs

This domain, taxopngj.sbs, is identified as a high-risk phishing infrastructure designed to impersonate the Messenger platform for credential harvesting. Analysis indicates the domain presents a fraudulent login interface, as evidenced by the page title 'Messenger,' which closely mimics legitimate authentication portals. The objective appears to be the unauthorized collection of user credentials, likely for subsequent account takeover or identity fraud operations. The domain's infrastructure and thematic targeting align with known phishing tactics observed in social media credential theft campaigns. Infrastructure analysis reveals taxopngj.sbs was registered on June 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-volume domain registrations linked to malicious activity. The domain resolves to the IP address 27.124.47.186 and has been flagged by 20 out of 95 security vendors on VirusTotal, indicating widespread detection as malicious. Additionally, the domain appears on three security blocklists, including entries in PhishDestroy, PhishingArmy, and Hagezi threat feeds. A Gridinsoft trust score of 0/100 further corroborates its classification as a high-risk entity. AlienVault OTX records the domain in one threat intelligence pulse, suggesting its inclusion in broader malicious campaign tracking. Users who may have interacted with taxopngj.sbs are advised to take immediate remedial action. Any credentials entered on the site should be considered compromised and must be changed immediately across all platforms where identical or similar passwords were used. Affected individuals should enable multi-factor authentication on critical accounts to mitigate the risk of unauthorized access. System scans using updated security tools are recommended to detect potential secondary infections or malware deployed through the phishing infrastructure. Network administrators should block the domain and its associated IP address (27.124.47.186) at the perimeter to prevent further exposure within organizational environments.