telforixce[.]cc

telforixce.cc is currently listed as an active generic phishing site. The domain resolves to the IPv4 address 146.19.133.147 and is hosted on infrastructure that uses the name servers ns1.nexloc.ro, ns2.nexloc.ro, ns1.sitebunker.net and ns2.sitebunker.net. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal analysis shows that one out of ninety‑one scanned security vendors flagged the domain, indicating at least one detection signal.

No additional public reputation services such as Google Safe Browsing or Open Threat Exchange were referenced in the available intelligence. The limited detection footprint suggests that the phishing infrastructure may be newly deployed or operating under low‑visibility hosting arrangements. Because the domain is still marked as active, defenders should continue to monitor DNS resolutions for 146.19.133.147 and enforce blocklisting of the domain and its name servers at perimeter and endpoint security layers. Network traffic to the identified IP address should be logged and, where possible, redirected to a sinkhole or denial‑of‑service mitigation to prevent credential harvesting.

Organizations should also verify that any credential‑submission endpoints associated with the domain are not whitelisted in internal applications. The single vendor flag on VirusTotal warrants further sandbox analysis of any downloadable payloads or redirects that may be served from the host. Until additional indicators such as SSL certificates, HTTP response codes, or page content become available, the confidence level remains high based on the active status, blocklist presence, and the confirmed detection by PhishDestroy.