teleupoi[.]com

The domain www.teleupoi.com is currently classified as a high‑risk generic phishing site. Activity is ongoing as of the report date (July 19, 2026) and the HTTP response returns status code 200 with the page title “Messenger”. The site resolves to the IPv4 address 27.124.47.186, which is associated with Rackip Consultancy Pte. LTD in Hong Kong. Authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com, and the registration record lists NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar. The TLS certificate presented is issued to “Telegram / *.local”, a mismatch that may be used to obscure the true service. VirusTotal has recorded 14 detections out of 91 scanned engines, indicating that multiple security products flag the domain. The domain is listed on a single public blocklist and is actively blocked by PhishDestroy. Infrastructure details, such as the exact phishing kit or target brand, are not disclosed in the available intelligence. Defenders should block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and enforce TLS inspection to detect the anomalous certificate. Ongoing observation is recommended to capture any changes in hosting or additional indicator updates.