camliveontelegram[.]com

PhishDestroy identified camliveontelegram.com as a brand impersonation threat targeting Telegram. The site posed as a platform for camgirls offering private shows and sexting, luring users with a title of "Camgirls on Telegram – Private Shows & Sexting (Verified)". This is a classic bait-and-switch scheme designed to harvest credentials or personal information under the guise of a legitimate Telegram service.

Technical indicators reveal the domain was created on August 10, 2025, and registered through One.com A/S. It resolved to IP address 172.66.0.70. VirusTotal flagged it with a score of 2/95 security vendors, indicating low but notable detection. The domain appears on 1 security blocklist, and Google Safe Browsing status is not provided, but the site lacked an SSL certificate, further signaling fraudulent intent. These indicators collectively confirm a sophisticated yet short-lived campaign.

Currently, the domain is offline, likely due to takedown efforts by hosting providers or registrar intervention. However, residual risk remains as similar domains may reappear. PhishDestroy recommends users avoid clicking links from unsolicited messages offering adult content on Telegram, verify official channels, and report any suspicious sites to security teams. Stay vigilant against brand impersonation scams that exploit trusted names like Telegram.