MALICIOUS — CRITICAL
Verifica phishing e sicurezza per telejwrl.com
telejwrl[.]
This domain, www.telejwrl.com, is currently active and classified as a high‑risk generic phishing site.
- VirusTotal
- 10/91
- Blocklists
- No stored match
- Disponibilità
- Ultimo attivo conosciuto · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
telejwrl.com — Ultimo attivo conosciuto (HTTP 200). Riepilogo delle prove: VirusTotal 10/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); Spamhaus DBL_SPAM; CF Radar malicious; PhishDestroy score 90/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
This domain, www.telejwrl.com, is currently active and classified as a high‑risk generic phishing site. DNS resolution points to the IPv4 address 27.124.47.186, which is geolocated to Hong Kong and associated with Rackip Consultancy Pte. LTD. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the authoritative name servers ns3.my‑ndns.com and ns4.my‑ndns.com. HTTP requests return a 200 status code and the page title is reported as “Messenger”. The TLS certificate presented is issued to “Telegram / *.local”, a mismatch that is commonly observed in phishing infrastructure. The site is blocked by the PhishDestroy feed and appears on one additional security blocklist. VirusTotal analysis shows that 10 of 91 security vendors have flagged the domain, indicating a measurable detection rate. Although the exact phishing payload and target audience have not been publicly disclosed, the combination of high‑risk classification, active status, and multiple detections warrants immediate defensive action. Organizations should add the domain and its resolving IP to network‑level block lists, monitor for any related DNS queries, and consider updating email filtering rules to catch messages that reference the “Messenger” title. Continuous observation is advised to capture any future changes in hosting or certificate attributes.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:45:38 UTC
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.