teleroxt[.]sbs
Ringkasan bukti
Analysis indicates that teleroxt.sbs was associated with a fake login phishing operation and is currently offline. The observed page title was "Loading...", a generic placeholder commonly used by credential-harvesting infrastructure to conceal intent or support dynamic content delivery. Infrastructure indicators and the SSL certificate naming suggest an attempt to create trust and potentially imitate a legitimate authentication workflow. Although the site is no longer reachable, its historical characteristics remain consistent with phishing-related activity and justify continued monitoring.
Technical review identified multiple risk indicators. The domain was created on June 14, 2026 and resolved to IP address 216.150.1.1. Registration records show the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. Detection telemetry shows that 16 of 95 security vendors flagged the domain, indicating measurable consensus regarding malicious or suspicious behavior. The domain appears on 1 security blocklist and has a recorded trust score of 0/100. Additional intelligence confirms that the domain was blocked by a security monitoring organization. The combination of recent registration, low trust metrics, blocklist presence, and multi-vendor detections elevates the overall risk profile despite the domain's current inactive state.
At the time of assessment, the domain is taken offline, reducing immediate exposure risk. However, historical phishing infrastructure frequently reappears under related domains, alternate hostnames, or newly registered lookalike assets. Defensive teams should retain indicators associated with teleroxt.sbs, including the domain name and IP address 216.150.1.1, within monitoring and detection workflows. Any historical connections, authentication attempts, or user interactions involving this domain should be reviewed for potential credential exposure. Continued blocking, log analysis, DNS monitoring, and investigation of related infrastructure are recommended to identify possible follow-on activity and prevent future compromise.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260617-077341- Judul halaman yang direkam
- Loading...
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown
Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
Data Coverage
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
VirusTotal
7 → 16
Tangkapan tersimpan
Intelijen Domain
Detail teknisDNS, nama TLS, dan stempel waktu
ZONA SHORTDOT · BUKTI PUBLIK
.sbs
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive