telvhk[.]com

The domain telvhk.com, now offline, has been flagged for phishing activities by 2 out of 91 vendors on VirusTotal. Despite its current offline status, it was previously hosted on IP address 216.150.1.1 and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate was issued by Let's Encrypt, a common choice for malicious actors due to its free and automated nature.

Interestingly, telvhk.com appears on only one public blocklist, specifically PhishDestroy's, indicating limited recognition by other security entities. This suggests that the domain was either newly deployed or operated under the radar before being taken down. The page title simply read "Loading...", a typical placeholder that might have been used to mask its true intent until the phishing content was fully operational.

The low detection rate on VirusTotal highlights a common issue in threat intelligence: the gap between domain registration and its identification by antivirus databases. Phishing domains like telvhk.com often exploit this window to conduct malicious activities before being flagged by broader security systems. PhishDestroy's early identification of this domain underscores the importance of upstream detection capabilities in mitigating such threats.