telgrsxs[.]sbs

The domain telgrsxs.sbs has been identified as a generic phishing site and is currently offline. This domain poses an elevated threat level and does not appear to be associated with a specific brand impersonation. Analysis indicates that the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and it was created on June 17, 2026.

The domain telgrsxs.sbs has been flagged by 13 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among the security community. It resolves to the IP address 216.150.1.1 and has an SSL certificate issued by Let's Encrypt, which may have been used to lend a false sense of security to potential victims. The domain appears on one security blocklist, specifically PhishDestroy, and its page title was noted as 'Loading...'. These indicators, combined with the recent creation date, suggest that the domain was likely set up with malicious intent.

Given the current status of the domain as taken offline, the immediate threat has been mitigated. However, organizations and individuals are advised to remain vigilant and avoid any future visits to this domain. Security teams should update their threat intelligence databases to include telgrsxs.sbs and monitor for any resuscitation attempts. Additionally, users should be educated on recognizing phishing sites through indicators such as suspicious URLs, unexpected SSL certificates, and page titles that do not match known legitimate services.