tcodunoa[.]sbs

The domain tcodunoa.sbs is currently active and identified as a generic phishing threat, with a notable risk level classified as high. The page title associated with the domain is 'Messenger', suggesting potential impersonation tactics common in phishing schemes. Analysis indicates that the domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and is actively resolved to the IP address 27.124.47.186, which is located in Hong Kong under Rackip Consultancy Pte. LTD. The domain has been flagged by 16 of 91 security vendors on VirusTotal, confirming its malicious nature. Furthermore, it is blocked by PhishDestroy and appears on one additional security blocklist. The domain's nameservers are ns3.my-ndns.com and ns4.my-ndns.com, which could be associated with other similar phishing operations. It is worth noting that the domain has been referenced in two threat intelligence pulses on AlienVault OTX, further indicating its malicious use in phishing activities. Defenders are advised to monitor this domain closely, implement blocks at their gateways, and educate users to recognize potential phishing attempts associated with this domain's tactics.