teiegtm[.]top

Analysis of www.teiegtm.top shows a recent domain that was created on September 25, 2025 and is currently taken offline. The site presented the Chinese page title "进入首页" and was identified as a brand‑impersonation operation targeting Telegram. Infrastructure clues indicate the domain resolves to the IPv4 address 172.245.67.31, which is hosted by HostPapa (AS36352) in the United States. The SSL certificate presented for the domain references the IP address 172.245.67.50, suggesting the certificate was likely self‑signed or mismatched, a common trait of fraudulent deployments.

Registration information lists Gname.com Pte. Ltd. as the registrar, and the authoritative nameservers are a8.share-dns.com and b8.share-dns.net. Reputation data show the domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal scans recorded 12 detections out of 95 security vendors, reinforcing the malicious assessment.

Additionally, Gridinsoft assigned a trust score of 0 out of 100, indicating an extremely low confidence in the site’s legitimacy. Given the combination of brand impersonation, mismatched SSL, low trust score, and multiple vendor detections, defenders should block both the domain and its associated IP address at perimeter defenses, monitor the hosting provider for related activity, and add the domain to internal threat‑intel feeds. Continuous re‑validation is advised in case the site becomes active again, but current evidence classifies www.teiegtm.top as a high‑risk Telegram impersonation threat.