tsiobbluy[.]shop

Analysis indicates that the domain tsiobbluy.shop is associated with a high-risk phishing threat, impersonating a messaging service. The domain is currently active, with a page title identified as 'Messenger.' It is noteworthy that the domain has been blocked by PhishDestroy and appears on one security blocklist, indicating recognition of its malicious intent. The HTTP status of the domain is 200, suggesting that it is operational and accessible. Infrastructure analysis reveals that the domain resolves to the IP address 27.124.47.186, registered through Nicenic International Group Co., Limited, and hosted in Hong Kong by Rackip Consultancy Pte. LTD. Additionally, the domain is flagged by Google Safe Browsing for social engineering tactics. Threat intelligence from AlienVault OTX has linked this domain to three threat pulses, further substantiating its malicious nature. Furthermore, 14 out of 91 security vendors on VirusTotal have flagged this domain, reinforcing concerns about its legitimacy. Given these indicators, defenders are advised to block access to this domain and educate users about the risks associated with phishing attempts that exploit well-known brands like Messenger.