wtnforum.net 
bitrefilll.top 
ghosthub.cc 
onion.live 
darkdotweb.com 
域安全和威胁情报
teleeigq[.]com
“Messenger”
威胁判定
关键
100/100 证据评分
可用性
最后已知的活跃状态
最新存储的可达性观察
风险信号
病毒检测总数：18/91
Spamhaus DBL: DBL_SPAM
最后已知的活跃状态
已存储的观测记录
观测到的标题差异
向扫描器显示的标题Telegram Web
向访客显示的标题Messenger
证据摘要
重要
teleeigq.com is currently active and has been classified as a high‑risk generic phishing site. The domain resolves to the IPv4 address 27.124.47.186, which geolocates to Hong Kong and is hosted by Rackip Consultancy Pte. LTD. Authoritative name servers are ns3.my-ndns.com and ns4.my-ndns.com, and registration was handled by NICENIC INTERNATIONAL GROUP CO., LIMITED. An SSL certificate issued to "Telegram / *.local" is presented, but the HTTP response returns status code 200 and the page title is simply "Messenger". The domain is listed on one public security blocklist and is explicitly blocked by PhishDestroy. VirusTotal analysis shows that 18 of 91 scanning engines flag the domain as malicious. No additional telemetry such as phishing page screenshots or credential capture mechanisms has been released, so the exact content and victim lure remain unknown. Defenders should add 27.124.47.186 and teleeigq.com to network block lists, monitor DNS queries for the specified name servers, and enable TLS inspection to detect the mismatched certificate. Continuous re‑inspection of the site is recommended because the infrastructure may evolve.
VirusTotal
18 det.
CF雷达
恶意
TLS 证书
已过期或未验证
观测状态
最后已知的活跃状态 HTTP 200
DestroyList
已列入
Data Coverage
VirusTotal
18 / 91
URLQuery
未检查
PhishStats
未检查
OTX
no community references
CF雷达
provider verdict: malicious
URLScan capture
not submitted
URLScan verdict
无可用判定
DNS 阻断
未检查
TLS
已过期或未验证
WHOIS
not parsed
屏幕截图
未捕获
重定向链
未探查
网络安全情报
Registrar context
NiceNIC
Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.
SSL Certificate
Invalid
SSL certificate is invalid or expired. Issuer: Telegram
威胁响应 Pipeline
发现
Checks
Reports
可用性
8/10
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月11日
检测时间线
-
VirusTotal
10 → 18
域名情报
域名
服务器 / ASN
nginx/1.18.0 (Ubuntu) · AS152194 CTG Server Limited
IP 信誉
IP abuse confidence 0/100 0 reports checked 2026年7月19日
注册商
NiceNIC
(RU)
PhishDestroy Investigation
(RU)
PhishDestroy Investigation
IP 地址
27.124.47.186
HTTP 状态码200
技术详情DNS、TLS 名称和时间戳
首次发现2026年6月27日
域名服务器ns4.my-ndns.com
TLS 指纹
TLS 观测自 2026年6月12日 起有效扫描于 2026年7月19日
Favicon Hash
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
18 / 91 安全供应商标记了该域
View on VT
Last analyzed First positive detection
ADMINUSLabs
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
ESET
Emsisoft
Forcepoint ThreatSeeker
Fortinet
G-Data
卡巴斯基
LevelBlue
Lionic
Netcraft
SOCRadar
Sophos
VIPRE
相关基础设施与报告
Content matches 4
Shared IP 27.124.47.186 6
该源 IP 托管多个网络钓鱼域 - 基础设施可以在各个活动之间共享。
同一注册商: NiceNIC 6
最近的威胁报告 3
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控
