teleogrzn[.]com

Analysis of the domain teleogrzn.com indicates active phishing infrastructure impersonating a messaging service, as suggested by the page title 'Messenger' and the domain's naming convention. Registered on May 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain resolves to the IP address 27.124.47.186, hosted under AS152194 (CTG Server Limited) in Hong Kong. Nameservers ns3.my-nds.com and ns4.my-nds.com are associated with the domain, a configuration often observed in low-reputation hosting environments. As of July 12, 2026, the domain remains operational, returning an HTTP 200 status code. The SSL certificate is issued for 'Telegram' and a wildcard *.local domain, which may indicate an attempt to lend false legitimacy or obfuscate the true target. Detection engines on VirusTotal flagged the domain as malicious, with 10 of 91 security vendors identifying it as phishing-related. Additionally, teleogrzn.com appears on one security blocklist, further corroborating its suspicious status. The Gridinsoft trust score of 0/100 reflects a complete lack of reputable standing, consistent with domains used in phishing operations. While the specific content of the site has not been analyzed, the combination of infrastructure indicators—including registrar choice, hosting provider, and SSL certificate anomalies—strongly suggests malicious intent. Defenders are advised to block the domain and its associated IP at the network level and monitor for related indicators of compromise, particularly those targeting users of messaging platforms. No evidence currently links this domain to a specific phishing kit or broader campaign, but its continued activity warrants close observation.