teleyawa[.]sbs

teleyawa.sbs is identified as a generic phishing domain impersonating the Telegram brand. This domain is primarily used to trick users into providing their login credentials, potentially leading to account compromise and further malicious activities. The infrastructure analysis reveals that the domain uses a misleading SSL certificate issued to Telegram, which can add an air of legitimacy to the phishing site.

Technical indicators for teleyawa.sbs include a VirusTotal score of 3/95, indicating that three security vendors identify the domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 27.124.47.186. The domain was created on June 14, 2026, and is currently active. There is no information available regarding its status in the Google Safe Browsing (GSB) database or the number of blocklists it appears on.

The current status of teleyawa.sbs is active, posing a high risk to users who may be fooled by the fake login page. Immediate response actions include blocking the domain in network security solutions, educating users about the risks of phishing, and monitoring for any signs of credential theft. Despite the low detection rate on VirusTotal, the domain remains a significant threat due to its recent creation and active status. Users should avoid interacting with the site and report any suspicious activity to their security teams.