telequozv[.]com

This domain, telequozv.com, is actively impersonating the Messenger platform to harvest user credentials. Analysis indicates the site presents a fraudulent login interface under the page title "Messenger," designed to deceive users into entering sensitive account details. The threat aligns with social engineering tactics, as confirmed by Google Safe Browsing’s SOCIAL_ENGINEERING classification, and is likely targeting users through phishing links distributed via messaging platforms or email campaigns.

Infrastructure analysis reveals the domain was registered on May 21, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and currently resolves to the IP address 27.124.47.186. Detection metrics show 13 out of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on 2 independent security blocklists. The SSL certificate is issued under the name "Telegram," further indicating an attempt to mimic legitimate communication services. The domain remains active despite being blocked by InversionDNS and BLP-Malware.

Users who visited telequozv.com should immediately reset credentials for any accounts entered on the site, particularly Messenger or associated services. Enable multi-factor authentication where available and review recent account activity for unauthorized access. If financial or sensitive data was submitted, monitor for signs of identity theft or fraudulent transactions. Organizations should update network defenses to block the domain and its resolving IP, and consider implementing email filtering rules to prevent delivery of phishing links referencing this infrastructure.