teksdomj[.]sbs

The domain teksdomj.sbs was registered on June 15, 2026 and remains active as of the report date, August 01, 2026. It is delegated to the authoritative nameservers ns3.my-ndns.com and ns4.my-ndns.com and resolves to the IPv4 address 27.124.47.186. Registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been associated with prior malicious infrastructure. VirusTotal analysis shows that five of ninety‑one security vendors flag the domain, indicating a moderate level of consensus among scanning engines that the site is malicious.

The domain is currently listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one commercial threat‑intelligence feed treats it as a high‑risk phishing vector. No additional telemetry such as SSL certificate details, HTTP response codes, Safe Browsing status, or page‑title information is available in the public intelligence set, leaving the exact content and target brand of the phishing lure undefined. Defenders should prioritize adding teksdomj.sbs to DNS‑based blocklists and firewall deny lists, and consider sinkholing the associated IP address 27.124.47.186 to intercept any outbound connections.

Network intrusion detection signatures should be updated to flag DNS queries for the domain and any HTTP traffic to the resolved IP. Continuous monitoring of newly registered domains using the same registrar and nameserver pattern is advisable, as the observed registration and hosting configuration may be reused in future campaigns. Given the active status and existing blocklist entries, proactive containment is recommended to mitigate potential credential harvesting or malware delivery attempts originating from this infrastructure.