teiegm[.]app[.]teiegtm[.]help

The domain teiegm.app.teiegtm.help was registered on September 28, 2025 through Gname.com Pte. Ltd. and is currently marked as offline. Infrastructure analysis shows the domain resolves to the IP address 172.245.67.31, which is hosted in the United States under AS36352 (HostPapa). The SSL certificate presented for the domain lists the IP 172.245.67.50, indicating a possible mismatch between the certificate and the resolved host, a common tactic used to evade simple certificate validation. The authoritative nameservers are a2.share-dns.com and b2.share-dns.net, both typical of shared DNS services.

The page title returned from the site, "Telegram 中文版," directly references the Telegram brand, confirming that the domain is intended to impersonate the popular messaging service. The scam type is identified as social media phishing, and the domain has been flagged by PhishDestroy as a malicious impersonation of Telegram. Reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of credibility. The domain appears on one security blocklist, and VirusTotal reports that 15 of 95 scanned security vendors flag the domain as malicious, providing independent corroboration of its threat status.

While the site is offline, the combination of brand impersonation, low trust score, blocklist presence, and multiple vendor detections suggests a high likelihood of phishing activity targeting Telegram users. Defenders should add teiegm.app.teiegtm.help to URL filtering and DNS blocklists, monitor the associated IP range for any resurgence, and ensure that endpoint protection solutions reference the VirusTotal detection count. Continuous observation of the registrar and nameserver changes is advised to detect potential re‑hosting attempts.