televgmq[.]sbs

televgmq.sbs is a confirmed phishing site categorized under the generic_phishing threat type. The domain is associated with the brand Telegram, likely leveraging the name to deceive users into believing it is a legitimate service. No specific drainer kit has been identified.

Infrastructure analysis reveals that televgmq.sbs resolves to the IP address 27.124.47.186. The domain was created on June 14, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate associated with the domain claims to be issued for Telegram, which is a common tactic to enhance credibility. According to VirusTotal, 12 out of 95 security vendors flag this domain as malicious, indicating a moderate level of detection. The domain is not listed in Google Safe Browsing (GSB), but the number of security vendors flagging it suggests a significant level of suspicion. The domain has also been included in various blocklists, further corroborating its malicious nature.

The current status of televgmq.sbs is active, posing a high risk to users who may visit the site. Immediate response actions should include adding the domain to organizational blocklists and alerting employees to avoid clicking on links or entering sensitive information. Users should be advised to verify the authenticity of any communication or links claiming to be from Telegram. Despite the domain being flagged by some security vendors, the lack of broader recognition in GSB means that the risk remains elevated, and vigilance is necessary to prevent potential data breaches and financial losses.