teldnqx[.]sbs

The domain teldnqx.sbs has been classified as a generic phishing threat, with a high-risk level. The page title 'Messenger' suggests an attempt to impersonate legitimate messaging services, which is commonly used in phishing schemes to deceive users into disclosing sensitive information. There is no known drainer kit associated with this domain, but the threat it poses is significant due to its active status and the nature of its content.

Technical indicators associated with this domain include a VirusTotal score of 13/95, indicating that 13 out of 95 security vendors have flagged it as malicious. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it was created on June 14, 2026. Its current active status is confirmed, and it resolves to the IP address 27.124.47.186. Although it has been found in one threat intelligence pulse on AlienVault OTX, it currently has not been reported on any major blocklists, which may indicate a lack of widespread detection at this time.

As of now, teldnqx.sbs remains active, continuing to pose a risk to potential victims. Immediate response actions should include monitoring for user interactions with this domain and blocking access to prevent potential phishing attempts. The risk remains elevated due to the domain's active status and its ability to deceive users. Organizations are advised to implement user education on phishing tactics and to utilize email filtering solutions to mitigate exposure to such threats.