camgirlsontelegram[.]com

camgirlsontelegram.com is an active domain linked to a high‑risk brand‑impersonation campaign that positions itself as a source of “Camgirls on Telegram 2025”. The domain was registered on 10 August 2025 through One.com A/S and uses the registrar’s default nameservers ns01.one.com and ns02.one.com. DNS resolution points to IP 172.66.0.70, which belongs to AS13335 Cloudflare, Inc., located in the United States. No TLS certificate is present, and the web server returns HTTP 409, indicating a conflict response that may be used to obscure malicious payloads. The site’s page title explicitly references “Camgirls on Telegram 2025: Trend, Toolkit, Pricing & Safety”, suggesting a content focus on adult‑oriented services delivered via Telegram, and the intelligence tags the campaign as a Crypto Scam.

Infrastructure reputation is extremely poor. Gridinsoft assigns a trust score of 0 / 100, and the domain appears on at least one security blocklist. VirusTotal analysis shows that 2 of 95 scanned vendors flagged the domain, confirming that independent scanners have identified malicious characteristics. PhishDestroy has already blocked the domain, and it is listed on a security blocklist, reinforcing the notion that the domain is actively being used for illicit activity. The brand target is recorded as “across”, indicating that the impersonation may be broad or generic rather than a single trademark.

Defenders should treat any network traffic to camgirlsontelegram.com as malicious. Immediate remediation steps include adding the domain to DNS‑based blocklists, firewall deny rules, and proxy filtering policies. Because the host resolves to a Cloudflare address, investigators should consider monitoring related Cloudflare IP ranges for additional malicious domains that may share the same infrastructure. The lack of TLS further lowers the barrier for interception, but the absence of a certificate also makes the domain stand out in TLS inspection logs.