teulltiyfb4xv[.]dappdata[.]cc

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

This domain, teulltiyfb4xv.dappdata.cc, is identified as a high-risk phishing site impersonating Telegram. Analysis indicates the page title explicitly matches the Telegram brand, suggesting an attempt to deceive users into submitting credentials or sensitive information. No drainer kit signatures were detected, but the domain’s infrastructure aligns with typical phishing campaigns targeting messaging platforms. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP 38.85.201.54, hosted under AS8796 (FASTNET DATA INC) in the US. It was registered on February 21, 2026, through Gname.com Pte. Ltd., and currently holds no SSL certificate. Google Safe Browsing categorizes it as phishing, while VirusTotal reports 18/95 security vendors flagging it as malicious. The domain appears on two blocklists: PhishDestroy and PhishingDB. The domain is currently offline, reducing immediate risk to users. However, residual threats persist due to potential credential harvesting prior to takedown. Organizations should monitor for related indicators, including the IP 38.85.201.54 and registrar patterns, to prevent recurrence. Users who accessed the site should rotate credentials and verify account integrity. No further active exploitation is confirmed, but vigilance remains necessary given the domain’s recent phishing classification.