teleakmox[.]com

The domain www.teleakmox.com is currently classified as a high‑risk generic phishing site. Infrastructure analysis shows the domain resolves to the single IPv4 address 27.124.47.186, which is geo‑located to Hong Kong and is listed as part of Rackip Consultancy Pte. Ltd. The authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, both typical of the my‑ndns hosting service. The SSL certificate presented for the site is issued to “Telegram / *.local”, a mismatch that is commonly observed in malicious deployments. HTTP requests return a 200 status code and the page title is “Messenger”, suggesting the site may be attempting to lure victims into a messaging‑related credential harvest. VirusTotal scans have flagged the domain by 11 of 91 security vendors, and it is already blocked by the PhishDestroy list and appears on one additional blocklist. Registration records indicate the registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED. No further details about the page content or payload have been disclosed. Defenders should block DNS resolution to the domain, add the associated IP address to network‑level deny lists, and monitor for outbound connections to the host. Email gateways should flag any messages containing links to www.teleakmox.com, and incident response teams should treat any credentials submitted to the site as compromised.