telelhgf[.]com
“Messenger”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
This domain, www.telelhgf.com, is flagged as an active phishing infrastructure targeting users through a Messenger-themed interface. Registered on May 18, 2026, via NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to IP address 27.124.47.186, hosted on AS152194 (CTG Server Limited) in Hong Kong. Analysis of its nameservers (ns3.my-nddns.com and ns4.my-nddns.com) and SSL certificate (issued for Telegram and *.local) suggests an attempt to mimic legitimate messaging platforms, though the exact content and targeting methodology remain unconfirmed due to limited forensic data. The domain currently returns an HTTP 200 status, indicating operational hosting, and its page title explicitly displays 'Messenger,' reinforcing the likelihood of impersonation. Security vendors have flagged the domain, with 7 of 91 engines on VirusTotal detecting it as malicious. It appears on at least one security blocklist and holds a trust score of 0/100, further corroborating its high-risk classification. Defenders should prioritize blocking this domain at the DNS and network levels, particularly in environments where messaging services are in use. The short registration window (under two months) and lack of historical reputation align with typical phishing campaign timelines. While the specific lure or payload is not yet analyzed, the combination of infrastructure, SSL certificate details, and page title strongly indicates credential harvesting or social engineering activity. Monitoring for related domains using the same nameserver or IP range may uncover additional threats.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | www.telelhgf.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive