dao-telco[.]in

Analysis indicates that the domain dao-telco.in is currently flagged as a generic phishing threat, though its operational status remains under investigation. The domain was registered on October 26, 2025, through Endurance Digital Domain Technology Private Limited, a registrar commonly associated with both legitimate and malicious registrations. Infrastructure analysis reveals the domain resolves to the IP address 104.21.12.18, which is hosted on Cloudflare's network (AS13335) in the United States. The use of Cloudflare nameservers (nero.ns.cloudflare.com and rosa.ns.cloudflare.com) is consistent with both legitimate services and threat actors seeking to obfuscate hosting origins or evade detection. The domain appears on at least one security blocklist, specifically PhishDestroy, though no additional blocklist data is currently available.

The page title 'Just a moment...' suggests the domain may have been configured to display a Cloudflare challenge or interstitial page, which is often observed in phishing campaigns during setup or evasion phases. Notably, the domain lacks an SSL certificate, which may indicate either an incomplete deployment or a deliberate choice to avoid encryption for operational simplicity. As of the latest assessment, the domain has been taken offline, though defenders should remain cautious of potential reactivation or reuse of associated infrastructure. VirusTotal scans conducted by 95 vendors returned no active detections at the time of analysis.

However, the absence of detections does not confirm the domain's safety, particularly given its presence on a blocklist and the lack of SSL implementation. Defenders are advised to monitor the domain for reactivation, particularly if it reappears on additional blocklists or exhibits changes in hosting behavior.