telekeok[.]sbs

This domain, telekeok.sbs, is identified as a credential harvesting phishing site targeting user login credentials. Analysis indicates the infrastructure was designed to mimic legitimate authentication portals, likely to capture sensitive information such as usernames, passwords, or multi-factor authentication codes. The domain’s design and SSL certificate association suggest an intent to deceive users into believing they are interacting with a trusted service, increasing the likelihood of successful compromise. Infrastructure analysis reveals telekeok.sbs was registered on June 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 216.150.1.1 and is flagged by 15 out of 95 security vendors on VirusTotal. It appears on one security blocklist and has been assigned a trust score of 0/100 by independent threat intelligence sources. The SSL certificate is issued under the name Telegram, which may indicate an attempt to exploit the branding of a widely recognized messaging platform to enhance credibility. Users who visited telekeok.sbs should assume their credentials may have been compromised. Immediate action is required: revoke any active sessions linked to the account, reset passwords for the affected service and any other platforms where the same credentials were reused, and enable multi-factor authentication if not already active. Monitor the account for unauthorized activity, such as logins from unfamiliar locations or devices. If financial or personally identifiable information was entered, consider reporting the incident to relevant authorities and credit monitoring services. Network administrators should block the domain and its associated IP address to prevent further access within their environments.