telertki[.]sbs

The domain telertki.sbs has been identified as a high-risk brand impersonation threat, specifically targeting Telegram. This assessment is based on the elevated risk level and the domain's use to deceive users into believing they are interacting with a legitimate Telegram service.

Infrastructure analysis reveals that the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 14, 2026. It resolves to the IP address 216.150.1.1 and has been detected by 16 out of 95 security vendors on VirusTotal. The domain appears on one known security blocklist and has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The SSL certificate for the domain impersonates Telegram, further adding to the deception. As of the latest assessment, the domain is offline and has been taken down.

To mitigate the risk of brand impersonation, users are advised to verify the URL and SSL certificate of any Telegram-related services they interact with. Employing multi-factor authentication and regularly updating passwords can also enhance security. Organizations should update their security policies and conduct awareness training to educate employees about the importance of recognizing and avoiding such deceptive domains. Network administrators are recommended to implement DNS filtering and blocklist updates to prevent access to known malicious domains.