immutable24app[.]tagesschau24-sitedomain290125[.]thsite[.]top

The domain immutable24app.tagesschau24-sitedomain290125.thsite.top is currently classified as a high-risk generic phishing threat. According to available intelligence as of July 23, 2026, security provider PhishDestroy has blocked the domain, and it appears on one security blocklist. VirusTotal scans show that 3 out of 95 security vendors have flagged this domain as malicious. The domain was registered through NAMECHEAP INC and utilizes nameservers ns1.byet.org and ns2.byet.org, both associated with free hosting infrastructure.

DNS resolution reveals the IP address 185.27.134.221, which is commonly linked to low-cost hosting environments and potentially high volumes of abuse. The domain was created on August 29, 2022, and remains active at the time of reporting. No evidence is available regarding SSL configuration, HTTP status, page title, or specific content, so the exact nature of the phishing operation is not yet analyzed. Current intelligence does not indicate the presence of Safe Browsing or OTX blocklisting, nor does it provide details about targeted brands or scam kits.

Defenders are advised to treat this domain as an active threat based on multiple independent detections and its inclusion in a blocklist. Immediate blocking and monitoring for related domains sharing infrastructure are recommended. Further investigation is warranted to determine the scope and impact of its phishing activities, especially given its persistence and current active status.