telelwdj[.]com

Analysis indicates that the domain www.telelwdj.com is currently flagged for generic phishing activities, impersonating a messaging service. The domain is active and has an HTTP status of 200, suggesting that it is operational. Its SSL certificate is linked to Telegram, albeit with a wildcard designation that raises questions regarding its legitimacy. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 27.124.47.186, which is associated with Rackip Consultancy Pte. LTD located in Hong Kong. The domain is actively listed on one security blocklist, specifically PhishDestroy, indicating known malicious behavior. Furthermore, it has been flagged by 9 out of 91 security vendors on VirusTotal, reinforcing the assessment of high risk. The nameservers associated with this domain are ns3.my-ndns.com and ns4.my-ndns.com. Defenders should be vigilant and block any traffic associated with this domain to mitigate potential phishing attempts targeting users.