teleidcg[.]sbs

This domain is flagged as a generic_phishing threat designed to impersonate Telegram services. Analysis indicates it was likely used to harvest credentials, distribute malware, or conduct fraudulent transactions by mimicking legitimate Telegram communication channels. The site displayed a static 'Loading...' page title, a common tactic to delay user suspicion while malicious payloads or redirect chains execute in the background.

Infrastructure analysis reveals the domain was registered on June 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 216.150.1.1 and is flagged by 16 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The SSL certificate is labeled 'Telegram,' further suggesting an attempt to deceive users into believing the site is affiliated with the legitimate messaging platform. The domain appears on one security blocklist and was taken offline following detection by automated phishing mitigation systems.

If you visited teleidcg.sbs, immediately disconnect the affected device from the network to prevent potential data exfiltration. Clear all browser data, including cookies and cached files, and run a full system scan using updated security tools to detect any installed malware. Change passwords for Telegram and any other accounts accessed from the same device, prioritizing those using similar credentials. Monitor financial statements and account activity for unauthorized transactions, and report the incident to relevant cybersecurity authorities or your organization’s security team for further analysis.