www-tele[.]com

Analysis of the domain www-tele.com indicates active brand impersonation targeting Telegram, a widely used encrypted messaging platform. The domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals resolution to the IP address 154.206.132.177, with detected technologies including Nginx, HSTS, and HTTP/3, suggesting an attempt to mimic legitimate service security practices. The page title, 'Telegram 官网 - 端到端加密通讯工具 | 多平台免费下载,' explicitly references Telegram’s official branding and Chinese-language messaging, indicating a targeted impersonation effort. The domain is currently flagged on two security blocklists, including PhishDestroy and BLP-Malware, and appears in 23 threat intelligence pulses on AlienVault OTX, reinforcing its malicious classification. Detection engines on VirusTotal identify the domain as suspicious, with 11 of 95 security vendors marking it as a threat. Gridinsoft assigns a trust score of 0/100, further corroborating its high-risk status. Defenders are advised to treat this domain as an active phishing threat. Network-level blocking of 154.206.132.177 and the domain itself is recommended, alongside monitoring for related infrastructure registered under the same registrar or IP range. The exact content and functionality of the site remain unanalyzed, but the combination of brand impersonation, recent registration, and confirmed malicious indicators warrants immediate mitigation. No evidence suggests this domain is affiliated with the legitimate Telegram service.