telelegv[.]com

Analysis indicates that telelegv.com is flagged as a high-risk phishing domain, actively engaging in malicious activities. The domain is currently indexed with a functioning page titled 'Messenger' and reports an HTTP status of 200, confirming its active state. It has been detected and blocked by PhishDestroy, and it appears on one known security blocklist, further substantiating its dubious reputation. The domain resolves to the IP address 27.124.47.186, which is registered to Rackip Consultancy Pte. LTD in Hong Kong. The domain is also associated with nameservers ns3.my-ndns.com and ns4.my-ndns.com, which are often linked to fraudulent activities. Furthermore, an SSL certificate issued to 'Telegram' with a wildcard for '*.local' raises questions about its authenticity. Security analysis reveals that thirteen out of ninety-one vendors on VirusTotal identified this domain as suspicious. Additionally, AlienVault OTX lists this domain in two distinct threat intelligence pulses, indicating its involvement in multiple threats. Given these indicators, cybersecurity professionals should remain vigilant and consider blocking this domain across their systems to mitigate potential phishing attempts and protect users.