teleztmk[.]com

teleztmk.com is currently active and serves HTTP 200 responses with the page title “Messenger”. The site is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the authoritative nameservers ns3.my-ndns.com and ns4.my-ndns.com. Its SSL certificate is issued to “Telegram / *.local”, which does not match the domain and suggests a mis‑configuration or deliberate obfuscation. Network resolution points to IP 27.124.47.186, an address hosted in Hong Kong by Rackip Consultancy Pte. LTD. Threat intelligence shows the domain has been blocked by PhishDestroy, appears on one public blocklist, and is referenced in two AlienVault OTX pulses. VirusTotal scans have flagged the domain by 12 of 91 security vendors, indicating a moderate level of detection across AV engines. The classification is “generic phishing” and the risk level is high. No public analysis of the page content or credential‑capture mechanisms is available, so the exact phishing lure remains unknown. Defenders should add the domain and its resolving IP to outbound allow‑list blocks, enforce TLS inspection to detect the mismatched certificate, and incorporate the observed nameserver and certificate fingerprints into detection signatures. Continuous monitoring of the IP reputation and periodic re‑scans of the site are recommended to capture any changes in payload or infrastructure.