teleowii[.]com

PhishDestroy has identified teleowii.com as a high-risk crypto drainer phishing domain currently active and posing a serious threat to cryptocurrency users. This domain is specifically engineered to trick visitors into connecting their wallets and approving malicious transactions, leading to direct theft of digital assets.

According to intelligence data, the domain was created on June 13, 2026, through registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP address 216.150.1.1. VirusTotal analysis shows 3 out of 95 security vendors flagging it as malicious, and it already appears on 1 security blocklist. The SSL certificate is issued by Let's Encrypt, which lends a false sense of legitimacy. The page title displays only "Loading..."—a common tactic to evade detection while the malicious payload loads.

To protect against this crypto drainer threat, users should immediately block the domain at the network level and never visit the site. If any interaction has occurred, revoke all token approvals for connected wallets using a revoke.cash tool, transfer remaining assets to a new wallet, and enable hardware wallet security. Administrators should add teleowii.com to their blocklists and monitor for similar domains registered through NICENIC.