telejwrl[.]com

This domain, www.telejwrl.com, is currently active and classified as a high‑risk generic phishing site. DNS resolution points to the IPv4 address 27.124.47.186, which is geolocated to Hong Kong and associated with Rackip Consultancy Pte. LTD. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses the authoritative name servers ns3.my‑ndns.com and ns4.my‑ndns.com. HTTP requests return a 200 status code and the page title is reported as “Messenger”. The TLS certificate presented is issued to “Telegram / *.local”, a mismatch that is commonly observed in phishing infrastructure. The site is blocked by the PhishDestroy feed and appears on one additional security blocklist. VirusTotal analysis shows that 10 of 91 security vendors have flagged the domain, indicating a measurable detection rate. Although the exact phishing payload and target audience have not been publicly disclosed, the combination of high‑risk classification, active status, and multiple detections warrants immediate defensive action. Organizations should add the domain and its resolving IP to network‑level block lists, monitor for any related DNS queries, and consider updating email filtering rules to catch messages that reference the “Messenger” title. Continuous observation is advised to capture any future changes in hosting or certificate attributes.