nueasy[.]undress[.]su

PhishDestroy identifies nueasy.undress.su as an elevated-risk brand impersonation site specifically targeting Telegram users. This domain lures visitors with a page titled "Раздеватор - ТОП боты для раздевания девушек по фото и видео бесплатно," which translates to claims about undressing bots, a clear attempt to trick Telegram users into engaging with malicious services. The site is now offline, but its infrastructure and registration details reveal a deliberate effort to deceive.

Technical indicators for nueasy.undress.su are concerning. The domain resolves to IP address 81.177.136.252 and was created on October 3, 2024, through the Russian registrar REGRU-RU. Its SSL certificate, issued by Let's Encrypt with identifier R12, provides a veneer of legitimacy. VirusTotal data shows that 1 out of 95 security vendors flag this domain, and it appears on one security blocklist. While the detection rate is low, the combination of recent creation, brand impersonation targeting Telegram, and explicit page content suggests a clear intent to defraud.

To protect against such brand impersonation threats, users should always verify the official website or bot links through Telegram's verified sources. Never interact with sites offering nude-generation services, as they often lead to data theft or malware. If you encounter this domain, report it to Telegram and your browser's security team. Enable two-factor authentication on your Telegram account and avoid granting permissions to unknown bots. Stay vigilant: if an offer seems too provocative or too good to be true, it is likely a scam.