telewrqf[.]sbs

Analysis of www.telewrqf.sbs shows a newly registered domain (created 14 June 2026) that resolves to the IPv4 address 27.124.47.186 and is served by the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. The registrar listed is NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal scans have returned detections from 13 of 91 security vendors, indicating that the domain is already being flagged as malicious. The threat classification in the feed is generic_phishing and the risk level is high, with the domain currently marked as active. No public page content or landing‑page details have been released, so the exact phishing lure or target brand remains unknown. Infrastructure analysis suggests the IP address is not tied to a known benign service and shares the same name‑server pair with other recently observed malicious domains, raising the likelihood of a shared abuse infrastructure. Defenders should immediately block DNS resolution for www.telewrqf.sbs and any sub‑domains, add the IP 27.124.47.186 to network‑level deny lists, and monitor outbound traffic for connections to the same name servers. Continuous re‑scanning on VirusTotal and other sandbox services is recommended to capture any evolving payloads. Organizations should also audit email gateways for messages containing links to this domain and educate users about unsolicited links. Because the site content has not been captured, further crawling and sandbox analysis are required to determine the specific credential‑stealing mechanisms employed.