teleihog[.]co

Analysis of teleihog.co indicates an active phishing domain targeting users through a Messenger-themed interface. The domain resolves to 27.124.47.186, hosted in Hong Kong under Rackip Consultancy Pte. LTD. Its SSL certificate is issued for 'Telegram / *.local', which does not align with standard practices for legitimate messaging platforms, suggesting an attempt to mislead users about the site's authenticity. The page title 'Messenger' further implies an intent to impersonate a communication service, though the exact brand or platform being mimicked remains unconfirmed due to lack of deeper content analysis. As of July 19, 2026, the domain is flagged by 13 of 91 security vendors on VirusTotal and appears on one security blocklist, including PhishDestroy. It is also referenced in two AlienVault OTX threat intelligence pulses, indicating prior detection in malicious campaigns. The HTTP status code 200 confirms the site is operational, though no specific phishing kit or payload has been identified in the available data. Defenders should treat this domain as high-risk due to its active status, association with known phishing infrastructure, and detection by multiple security vendors. Recommended actions include blocking the domain and IP at the network level, monitoring for related indicators in logs, and alerting users to potential phishing attempts leveraging messaging service themes. Further investigation into the site's content and backend infrastructure is advised to determine the full scope of the threat.