telezsag[.]com

www.telezsag.com is identified as a generic phishing site targeting users by impersonating a legitimate messenger platform. The domain leverages a misleading page title ('Messenger') and an SSL certificate referencing a popular messaging brand, increasing the risk of social engineering attacks. There is no evidence of specific drainer kits, but the configuration suggests intent to harvest sensitive user information, such as credentials or authentication tokens.

Technical analysis reveals multiple threat indicators. VirusTotal reports that 11 out of 95 security vendors classify www.telezsag.com as malicious, supporting the high-risk assessment. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 27.124.47.186. Whois records confirm the domain was created on May 26, 2026, indicating a recent setup likely designed to evade existing blocklists. The site is still active at the time of reporting. The use of an SSL certificate referencing a well-known messaging service further supports the phishing intent, as it can deceive users into trusting the fake interface.

Given its active status and the number of security vendors flagging it, www.telezsag.com poses a significant risk for credential theft and user compromise. Security teams should add this domain and its associated IP address to network blocklists and monitor for related indicators of compromise. Users should be warned against interacting with the site, and incident response procedures should be initiated if any credentials are suspected to have been submitted. Continued monitoring is recommended, as the domain remains live and may evolve its tactics.