tsiohgvtp[.]shop

The domain tsiohgvtp.shop is currently active and is being used in a high‑risk generic phishing campaign. Reputation services show that Google Safe Browsing has classified the domain under the SOCIAL_ENGINEERING category, indicating it is likely employed to deceive users into submitting credentials or personal data. VirusTotal scans have returned nine positive detections out of ninety‑one submitted samples, reinforcing the malicious assessment. DNS resolution points to the IPv4 address 27.124.47.186, and the authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, both of which are commonly observed in malicious hosting setups. No additional contextual information such as page titles or target brands is available, so the precise lure or victim profile remains uncertain. Defenders should block network traffic to the IP address and the domain, monitor DNS queries for the associated name servers, and incorporate the domain into existing phishing detection rules. Continuous re‑evaluation is advised, as further analysis of the hosted content could reveal additional indicators of compromise.