tsiogtzsv[.]shop

The domain tsiogtzsv.shop is currently active and resolves to the IP address 27.124.47.186. Infrastructure analysis shows that the domain is served by the authoritative nameservers ns3.my-ndns.com and ns4.my-ndns.com. VirusTotal scans have resulted in two of ninety‑one security vendors flagging the domain, indicating that at least a small subset of scanners have identified malicious characteristics.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that threat intelligence sources consider it a phishing‑related indicator. No additional public data such as an SSL certificate, HTTP response details, page title, or targeted brand name is available at this time, so the exact content and impersonated entity remain unknown. The limited detection coverage and blocklist presence suggest a focused, possibly low‑profile phishing campaign that has attracted the attention of a few security vendors.

Defenders should prioritize immediate containment: add tsiogtzsv.shop to network‑level deny lists, incorporate the IP 27.124.47.186 into any existing threat‑intel feeds, and monitor DNS queries for the associated nameservers. Continuous re‑evaluation is advised, as additional detections or content analysis may emerge that could clarify the targeted brand or reveal further malicious payloads.