telepuft[.]sbs

This domain, telepuft.sbs, is identified as a phishing site designed to mimic legitimate Telegram login pages. Its primary threat involves stealing user credentials, including usernames and passwords, by presenting a fraudulent interface that closely resembles the official Telegram platform. Users who enter their login details on this site risk having their accounts compromised, leading to unauthorized access, data theft, or further malicious activity such as spreading phishing links to contacts. Analysis indicates that telepuft.sbs was registered on June 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 216.150.1.1 and is currently flagged by 12 out of 95 security vendors on VirusTotal. Additionally, it appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100. The SSL certificate is issued under the name Telegram, which is a common tactic used by phishing sites to appear legitimate. The page title, 'Loading...', suggests an attempt to delay or obscure the fraudulent nature of the site. If you have visited telepuft.sbs or entered any credentials on the site, immediate action is required. First, change the password for your Telegram account and enable two-factor authentication if not already active. Monitor your account for any suspicious activity, such as unauthorized logins or messages sent without your consent. Additionally, scan your device for malware using a reputable security tool to ensure no additional threats were introduced. Report the domain to your security provider or relevant authorities to help prevent further victimization.