telwxuq[.]sbs

The domain telwxuq.sbs has been identified as a generic phishing domain, with an elevated risk level. This domain poses a significant threat to users by attempting to deceive them into providing sensitive information such as login credentials or financial details.

Analysis indicates that the domain telwxuq.sbs resolves to the IP address 216.150.1.1 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain was created on June 14, 2026, and currently appears on 1 security blocklist. The SSL certificate used by the domain is issued to Telegram, which could be an attempt to mimic a legitimate service. The domain has been flagged by 16 out of 95 security vendors on VirusTotal, indicating a moderate level of concern. Additionally, the Gridinsoft trust score for this domain is 0 out of 100, suggesting a complete lack of trustworthiness. The page title found during the investigation was 'Loading...', which is often used to mask the true nature of the site while it loads malicious content.

To mitigate the risks associated with this phishing domain, it is recommended that users avoid visiting the site and report any suspicious activity to their security teams. Network administrators should consider blocking the IP address 216.150.1.1 and implementing DNS-based filtering to prevent access to the domain. Security awareness training should also be reinforced to educate users about the common tactics employed by phishing sites, such as the use of misleading SSL certificates and the display of generic page titles.