teleubsky[.]com

The domain www.teleubsky.com is currently active and serves a page whose title is “Messenger”. DNS resolution points to the IPv4 address 27.124.47.186, which is geolocated to Hong Kong and attributed to Rackip Consultancy Pte. Ltd. The domain is delegated to the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. An HTTPS request returns a valid certificate issued to “Telegram / *.local”, which is atypical for a site claiming to host messenger functionality and may indicate certificate misuse. HTTP requests receive a 200 OK status, suggesting the site is reachable and serving content. Security telemetry shows the domain is listed on at least one blocklist, specifically PhishDestroy, and has been flagged by ten out of ninety‑one VirusTotal scanners. The presence on a blocklist and multiple vendor detections together raise a high risk rating. No additional public analysis of the page content is available, so the exact payload or credential‑capture mechanism remains unknown. Defenders should block network connections to 27.124.47.186 and add www.teleubsky.com to URL filtering policies. Monitoring for outbound traffic to the domain and for any credential submissions that match the “Messenger” label is advised. Continued surveillance of the hosting infrastructure, including the name servers and registration details, is recommended to detect potential shifts in the underlying infrastructure.