telehexa[.]com

As of July 19, 2026, the domain telehexa.com is flagged as a high-risk generic phishing domain. The site has been blocked by PhishDestroy and appears in two threat intelligence pulses on AlienVault OTX, indicating it has been identified as part of coordinated phishing campaigns. Google Safe Browsing has flagged the domain for social engineering, which often involves deceptive practices to manipulate users into divulging sensitive information. The domain resolves to the IP address 27.124.47.186, located in Hong Kong under the control of Rackip Consultancy Pte. LTD. The SSL certificate for the domain is misconfigured, listing Telegram and *.local, which is unusual and may indicate an attempt to impersonate a legitimate service. The page title 'Messenger' suggests the site may be mimicking a legitimate messaging service, but the exact content and structure of the site have not been analyzed. Defenders should block this domain at the network and endpoint levels to prevent access. Additionally, monitoring for any internal traffic to this domain and educating users about the risks of social engineering attacks are recommended. The domain is currently active and appears on at least one security blocklist, further emphasizing the need for immediate action.