telemerjg[.]com

Analysis on July 19, 2026 indicates that www.telemerjg.com remains an active high‑risk phishing infrastructure. The site resolves to the IPv4 address 27.124.47.186, which is registered to Rackip Consultancy Pte. Ltd. in Hong Kong. Registration records show the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED. DNS resolution is served by ns3.my-ndns.com and ns4.my-ndns.com. An SSL certificate presented for the host lists “Telegram” as the organization and a wildcard *.local subject, a mismatch that suggests the certificate was obtained for unrelated services. HTTP requests receive a 200 OK response and the page title returned is “Messenger”, though the content of the page has not been publicly disclosed. VirusTotal reports that 13 of 91 scanned security engines flag the domain, indicating a moderate detection rate. The domain appears on a single external blocklist and is currently listed as blocked by PhishDestroy. The evidence confirms the presence of a phishing campaign, but details of the payload, targeted credentials, or victim interaction flow are not available. Defenders should block the domain and its associated IP at network perimeter, monitor DNS queries for the listed nameservers, and add the IP address to threat intelligence feeds. Ongoing observation is recommended to capture any changes in hosting, certificate usage, or detection rates.