telexoaj[.]com

On July 19, 2026, analysis of telexoaj.com identified a high‑risk, active generic phishing operation. The site returns HTTP 200 and presents a page title of “Messenger,” suggesting an attempt to lure victims into a messaging interface. Infrastructure investigation shows the domain resolves to IP 27.124.47.186, hosted in Hong Kong and associated with Rackip Consultancy Pte. Ltd. The domain is serviced by the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com and presents an SSL certificate issued to “Telegram / *.local,” a mismatch that further undermines its legitimacy. Registration records indicate the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED. Threat intelligence sources confirm the site appears on one security blocklist and has been flagged by Google Safe Browsing for social engineering. AlienVault OTX references the domain in two separate threat pulses, and VirusTotal reports that 18 of 91 scanned security vendors marked the domain as malicious. The site has already been blocked by the PhishDestroy service. Defenders should add telexoaj.com to network blocklists, monitor DNS queries for the associated IP address, and enforce URL filtering to prevent user access. Continuous re‑evaluation is advised, as the active status suggests the operators may modify the payload or hosting infrastructure.