tesijhdhg[.]sbs

Analysis of the domain tesijhdhg.sbs, observed on 19 July 2026, shows that it is actively hosting a web service identified by the page title “Messenger”. The authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com resolve the domain to the IPv4 address 27.124.47.186, which is geolocated to Hong Kong and attributed to Rackip Consultancy Pte. Ltd. The TLS certificate presented for the host is issued to “Telegram / *.local”, a mismatch that is typical of fraudulent infrastructure. The registrar record lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the sponsoring entity. An HTTP request returns a 200 OK status, confirming that the site is reachable. VirusTotal scans have flagged the domain in 13 of 91 security vendor engines, indicating a consensus of malicious intent. The domain appears on a single public blocklist, PhishDestroy, and is currently marked as active. While the page title suggests a messaging service, no additional content analysis is available, leaving the exact phishing lure undefined. Defenders should incorporate the domain and its resolved IP address into deny‑list rules, monitor for related traffic to the IP range, and consider the mismatched TLS certificate as an indicator of compromise. Ongoing observation is advised to detect any evolution of the payload or additional infrastructure.