teleezcc[.]com

Analysis of teleezcc.com shows a high‑risk generic phishing operation that remains active as of July 19, 2026. The site returns HTTP 200 and presents the page title "Messenger," which triggered Google Safe Browsing to flag it for social engineering. PhishDestroy has already blocked the domain, and VirusTotal records 22 of 91 security vendors labeling the host as malicious. The domain resolves to IP 27.124.47.186, an address located in Hong Kong and owned by Rackip Consultancy Pte. Ltd. The authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com, and registration was performed through NICENIC INTERNATIONAL GROUP CO., LIMITED. An SSL certificate issued to "Telegram / *.local" is present, suggesting a mismatch between the certificate’s common name and the site’s purpose. AlienVault OTX lists the domain in three threat‑intel pulses, and it appears on one public blocklist. While the precise phishing payload and targeted brand have not been disclosed beyond the generic "Messenger" title, the convergence of multiple independent detections, the social‑engineering flag, and the active hosting infrastructure indicate a credible threat. Defenders should add teleezcc.com and its resolving IP to network and endpoint blocklists, monitor DNS queries for the associated nameservers, and ensure web filters reference the latest Google Safe Browsing and PhishDestroy feeds. Continuous threat‑intel correlation is advised to capture any evolution of the campaign.