telebrcc[.]com

Analysis of telebrcc.com, registered on July 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, indicates active phishing infrastructure targeting users of a messaging platform. The domain's page title, 'Messenger,' suggests an attempt to mimic a chat service, though the specific brand or platform being impersonated remains unconfirmed as no additional brand indicators are present in available data. Infrastructure analysis reveals the domain resolves to IP address 27.124.47.186, hosted under Rackip Consultancy Pte. LTD in Hong Kong, with nameservers ns3.my-nds.com and ns4.my-nds.com. Security vendors have flagged telebrcc.com, with 13 of 91 engines on VirusTotal detecting malicious activity. The domain appears on one security blocklist and is blocked by PhishDestroy. AlienVault OTX records the domain in two threat intelligence pulses, further corroborating its association with malicious campaigns. The SSL certificate is issued for 'Telegram' and a wildcard for *.local, which may indicate an attempt to appear legitimate or obfuscate the true nature of the site. Defenders should treat this domain as high-risk due to its active status, confirmed detections, and association with known phishing infrastructure. Network-level blocking of 27.124.47.186 and monitoring for connections to the domain are recommended. Additional investigation into the registrar and hosting provider may reveal further linked infrastructure or campaigns. The exact content and functionality of the site remain unanalysed, and further forensic examination is advised to determine the full scope of the threat.