teospiez[.]sbs

The domain teospiez.sbs was registered on June 15, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IPv4 address 216.150.1.1, which is hosted within the Amazon.com, Inc. network (AS16509) located in the United States. The authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, both typical of dynamic DNS services used by malicious operators to retain control over short‑lived infrastructure.

An HTTPS service is presented using a Let’s Encrypt certificate that was issued for the year‑range YR2, indicating a recent deployment. The web server returns HTTP 200 for the root path and presents the page title “Loading…”, a pattern often employed to mask the actual phishing landing page until the victim interacts with the page. No additional content has been captured, leaving the exact credential‑stealing template uncertain.

Static analysis on VirusTotal shows that five out of ninety‑five scanned engines flag the domain as malicious, and the Gridinsoft trust score is 0 out of 100, reflecting a strong consensus of malicious intent. The site is currently listed on a single public blocklist and has been actively blocked by the PhishDestroy mitigation service. The risk rating is marked as high, and the domain remains active as of the report date.

Defenders should add teospiez.sbs and its resolved IP 216.150.1.1 to outbound filtering rules and enforce DNS‑based blocklists that include the observed nameservers. Continuous monitoring of the AS16509 address space for similar short‑lived domains is advised, as well as deploying sink‑hole techniques to capture any subsequent payloads. Incident response teams should treat any credentials submitted to this site as compromised and force password resets for affected accounts.