teleqotj[.]com

Analysis of teleqotj.com indicates a high‑risk credential‑phishing operation that remains active as of July 12, 2026. The domain was registered on May 31, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 27.124.47.186, which is hosted in Hong Kong under AS152194 CTG Server Limited. The authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. The site returns HTTP 200 and presents a page title of "Messenger"; its TLS certificate is issued to "Telegram / *.local", a mismatch that often signals abuse of legitimate brand certificates. VirusTotal scans show 12 of 91 security vendors flagging the domain, and AlienVault OTX records the domain in two separate threat pulses. The domain is already listed on at least one security blocklist and is blocked by PhishDestroy. While the exact content hosted at the URL has not been publicly dissected, the convergence of a recent registration, high‑risk classification, malicious certificate, and multiple vendor detections confirms malicious intent. Defenders should add teleqotj.com and its resolving IP 27.124.47.186 to network deny lists, monitor DNS queries for the associated nameservers, and consider sinkholing the IP range if feasible. Continuous re‑scanning through multi‑vendor platforms is advised to capture any evolution in payload or hosting changes.