teleivxq[.]sbs

This domain, teleivxq.sbs, was registered on June 16, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com resolve the domain to the IPv4 address 66.33.60.129, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The site presents a TLS certificate issued by Let’s Encrypt with the YR1 identifier, indicating a valid but short‑lived certificate. The page title returned by the HTTP response is the literal string "Loading…", and the service is currently marked as taken offline.

Security telemetry shows that the domain is listed on one public blocklist and is blocked by the PhishDestroy feed. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal analysis reports that 13 of 91 scanning engines flagged the domain, reinforcing the suspicion of phishing activity. The combination of a recent registration, low trust score, presence on a blocklist, and multiple vendor detections suggests that teleivxq.sbs is being used for a generic phishing campaign.

No further indicators such as specific phishing page content, credential‑stealing URLs, or associated malware hashes are available in the current intelligence. Defenders should continue to block the domain at DNS and proxy layers, monitor outbound connections to the associated Amazon IP range, and consider adding the domain to internal allow‑list exclusions only after thorough verification. Ongoing observation of any new resolution changes, certificate renewals, or additional vendor detections is recommended to update the risk posture.