tejegghmxb[.]fit

The domain tejegghmxb.fit was created on February 21, 2026 and is currently listed as taken offline. Infrastructure analysis shows the domain resolves to IP address 104.21.70.242, which is hosted by Cloudflare, Inc. (AS13335) and geolocated to the United States. Authoritative name servers are leia.ns.cloudflare.com and sergi.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. Registration was performed through Chengdu west dimension digital technology Co., LTD, suggesting a registrar based in China.

No SSL/TLS certificate was observed for the domain, meaning traffic would be served over plain HTTP. The page title returned by the HTTP response is "Telegram", and the threat is classified as a social media phishing campaign that impersonates the Telegram brand. Gridinsoft assigned a trust score of 0 out of 100, reflecting a high likelihood of malicious intent. The domain appears on a single security blocklist, specifically PhishDestroy, and has been flagged by 16 of 93 security vendors on VirusTotal.

These detection counts indicate that multiple independent scanners have identified suspicious characteristics. Defenders should add tejegghmxb.fit to URL filtering rules, block the associated IP address 104.21.70.242, and monitor for any related subdomains or future registrations from the same registrar. Continuous observation of Cloudflare‑hosted infrastructure tied to this ASN is advised, as threat actors may shift to new domains while retaining the same hosting provider. Since the site is offline, active remediation is limited, but proactive blocking can prevent accidental user exposure should the domain be re‑activated.