telkuk[.]com

The domain telkuk.com is flagged for a high-risk generic phishing threat, specifically a fake login page designed to deceive users into providing sensitive information. There is no specific brand impersonation or crypto drainer kit associated with this domain, but its purpose is to capture login credentials and potentially other personal data from unsuspecting visitors.

Infrastructure analysis reveals that telkuk.com has a VirusTotal detection score of 13/95, indicating that a significant number of security vendors recognize the domain as potentially malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar that has been associated with various suspicious activities. The domain resolves to the IP address 216.150.1.1 and was created on June 17, 2026. Google Safe Browsing has flagged the domain for phishing, and it appears on at least one security blocklist. The SSL certificate for the domain is issued by Let's Encrypt, which is a common choice for phishing sites due to its ease of use and low cost.

Currently, telkuk.com is taken offline, likely as a result of security interventions. However, the domain's offline status does not entirely mitigate the risk, as it could be reactivated or repurposed in the future. Immediate response actions should include monitoring the domain for any signs of reactivation and ensuring that users are educated about the risks of fake login pages. Despite the domain being offline, the remaining risk is still high, and additional precautions such as updating security policies and enhancing network defenses should be considered.