teleuknq[.]com

This domain, teleuknq.com, poses a serious credential theft threat by impersonating the Telegram Messenger brand. The site presents a page titled Messenger, likely designed to deceive users into entering their login credentials or other sensitive information. Such phishing campaigns commonly target individuals to gain unauthorized access to accounts, leading to data theft or financial loss. The active status of this domain indicates it is currently operational and may be actively harvesting data from unsuspecting visitors.

Technical analysis confirms the malicious nature of teleuknq.com. VirusTotal reports that 11 out of 95 security vendors flag this domain as malicious, providing strong evidence of its phishing intent. The domain was created on June 03, 2026, which is unusually recent and consistent with a threat actor registering a domain for a short-term campaign. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting suspicious domains. Infrastructure analysis reveals the domain resolves to IP address 27.124.47.186, which may be associated with other malicious activities. The SSL certificate is branded as Telegram, further indicating an attempt to appear legitimate.

If a user has visited teleuknq.com, immediate action is recommended. First, do not enter any personal information, especially login credentials for Telegram or other services. Change passwords for any accounts that may have been compromised, and enable two-factor authentication where possible. Monitor financial accounts for unauthorized transactions and report any suspicious activity to relevant authorities. Additionally, run a security scan on the device used to access the site to check for malware. Users should avoid revisiting the domain and block it at the network level if possible. Staying informed about common phishing tactics can help prevent future incidents.