telehqur[.]com

This domain, telehqur.com, is identified as a high-risk credential harvesting phishing site. Analysis indicates the infrastructure was designed to impersonate legitimate services, tricking users into submitting sensitive login details. The domain is currently offline, but prior activity suggests it was actively engaged in fraudulent credential collection operations. Infrastructure analysis reveals telehqur.com was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 216.150.1.1 and employs a Let's Encrypt SSL certificate (YR1). The domain appears on one security blocklist and is flagged by 12 of 95 security vendors on VirusTotal. Google Safe Browsing has explicitly marked it as phishing, and the page title consistently displayed 'Loading...', a common tactic to delay detection while harvesting user input. Current status confirms telehqur.com is offline, reducing immediate exposure risk. However, the domain's infrastructure and historical behavior warrant continued monitoring. Organizations and users are advised to block the domain and IP at the network level, revoke any associated SSL certificates, and conduct internal audits for potential credential exposure. If this domain was encountered in corporate or personal communications, reset affected credentials immediately and report the incident to relevant security teams for further investigation.