teledsdei[.]com

The domain teledsdei.com is currently active and resolves to the IPv4 address 27.124.47.186, which is registered to Rackip Consultancy Pte. LTD in Hong Kong. The authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com, and the registration was processed through NICENIC INTERNATIONAL GROUP CO., LIMITED. An SSL certificate presented for the host is issued to “Telegram / *.local”, a mismatch that is commonly observed in malicious infrastructure. Automated analysis on VirusTotal shows that 12 of 91 security vendors have flagged the domain, indicating a measurable level of suspicion. The domain is listed on a single external blocklist and is specifically blocked by the PhishDestroy service. HTTP requests return a 200 status code and the page title reported is “Messenger”, but no further content has been publicly documented. The combination of a mismatched TLS certificate, a modest detection rate, and inclusion on a phishing‑focused blocklist aligns with the classification of a generic phishing campaign. Uncertainty remains regarding the exact payload or credential‑capture mechanisms employed, as the site’s internal structure has not been publicly dissected. Defenders should add teledsdei.com to deny‑list rules, monitor DNS queries for the associated IP and nameservers, and ensure that endpoint protection solutions ingest the latest VirusTotal and blocklist indicators. Ongoing observation is advised to detect any escalation or additional malicious payloads that may be deployed behind the same infrastructure.