tsiornpbg[.]shop

The domain tsiornpbg.shop is currently active and classified as a high-risk generic phishing threat. It has been observed on one security blocklist and is specifically blocked by PhishDestroy. Infrastructure analysis indicates that the domain resolves to the IP address 27.124.47.186, which is located in Hong Kong and registered with Rackip Consultancy Pte. LTD. The domain is associated with a page titled 'Messenger', suggesting an attempt to exploit users by mimicking a legitimate messaging service. Security intelligence from AlienVault OTX shows that this domain has been identified in three separate threat intelligence pulses, indicating ongoing awareness of its malicious activities. The SSL certificate associated with this domain is registered under Telegram and is categorized as *.local, which raises further concerns about its legitimacy. Scanning results from VirusTotal reveal that 6 out of 91 security vendors have flagged this domain, confirming its malicious nature. Defenders should implement measures to block access to this domain and educate users about the potential risks associated with it, as the domain's presence poses a significant threat to individuals seeking to use legitimate messaging services.