telqdsf[.]sbs

This domain is flagged for elevated risk due to credential theft activity. Analysis indicates telqdsf.sbs is designed to harvest user login credentials through deceptive login portals, likely impersonating legitimate services to trick victims into submitting sensitive information. Infrastructure analysis reveals the domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 216.150.1.1. Security vendors on VirusTotal flagged the domain, with 10 out of 95 detecting malicious activity. It appears on one security blocklist and is currently offline. The SSL certificate is issued by Let's Encrypt (YR2), and the page title displayed was 'Loading...', a common tactic to mask malicious intent during initial analysis. To mitigate credential theft risks, users should avoid interacting with telqdsf.sbs or any linked resources. Organizations should block the domain and associated IP (216.150.1.1) at the network level. If credentials were entered on this site, immediate password resets for affected accounts are recommended, along with enabling multi-factor authentication where available. Security teams should monitor for unauthorized access attempts tied to this domain.