tgellmju[.]shop

The domain tgellmju.shop is currently flagged as a high-risk phishing threat with active status as of July 19, 2026. The page title indicates malicious intent, labeled as 'Messenger'. The domain resolves to the IP address 27.124.47.186, which is associated with Rackip Consultancy Pte. LTD located in Hong Kong. An SSL certificate is issued to Telegram, specifically for *.local, suggesting attempts to impersonate legitimate messaging services. Threat intelligence sources, including AlienVault OTX, indicate that tgellmju.shop has been referenced in two distinct threat pulses. Furthermore, the domain appears on one security blocklist, enhancing its credibility as a phishing threat. Detection counts from VirusTotal show that 14 out of 91 security vendors have flagged the domain, confirming its malicious nature. The domain has been specifically blocked by PhishDestroy, indicating proactive measures taken against it. Given the active status and multiple indicators of compromise, defenders are advised to implement blocking measures at both network and endpoint levels, and to educate users on recognizing phishing attempts related to this domain.