telexkyn[.]sbs

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

This domain, telexkyn.sbs, is actively impersonating a Messenger login portal to harvest user credentials. The site presents a fraudulent interface designed to trick visitors into entering sensitive account details, which are then captured by threat actors. Analysis of the page title confirms it displays 'Messenger,' a clear attempt to deceive users into believing they are accessing a legitimate service. Infrastructure analysis reveals multiple red flags. The domain was registered on June 14, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Despite its malicious intent, the site has not yet been flagged by security vendors, with VirusTotal showing 0 detections out of 95 engines. Additionally, the SSL certificate falsely claims affiliation with Telegram, a tactic used to lend false legitimacy to the phishing page. If you have visited telexkyn.sbs or entered any credentials, immediate action is required. First, change the passwords for any accounts accessed or entered on the site. Enable multi-factor authentication where possible to add an extra layer of security. Monitor accounts for unauthorized activity and report any suspicious transactions. Avoid clicking on links from untrusted sources and verify the authenticity of login pages by checking the URL and SSL certificate details before entering sensitive information.