cyberlineinc[.]com

The domain cyberlineinc.com was a phishing site engaged in brand impersonation targeting Telegram users. It presented itself as a legitimate entity under the name 'Cyberline Inc – Inteligence, Investigation Company' but was designed to deceive victims into disclosing sensitive information or credentials. No crypto drainer kit was associated with this campaign. The site has since been taken offline, though its recent activity classifies it as an elevated risk for brand impersonation scams.

Technical analysis of cyberlineinc.com revealed limited detection, with 2 of 95 VirusTotal security vendors flagging the domain, including CRDF and SOCRadar. It was registered through GRANSY S.R.O D/B/A SUBREG.CZ on June 04, 2025, and resolved to the IP address 92.112.189.1, hosted by Hostinger International Limited (AS47583). The domain appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by Let's Encrypt (R12). Technologies detected on the site included PHP, LiteSpeed, and HTTP/3. Trust scores from Gridinsoft (39/100) and Scamadviser (1/100) further indicated its malicious nature.

Individuals who interacted with cyberlineinc.com should immediately change any passwords or credentials entered on the site, particularly those linked to Telegram accounts. Enabling two-factor authentication (2FA) on all accounts is strongly recommended to prevent unauthorized access. Victims should monitor their accounts for signs of fraud, such as unauthorized transactions or messages. The domain can be reported to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Telegram) to aid in takedown efforts and protect other users.