zama-auction[.]mom

The domain zama-auction.mom has been identified as a brand impersonation threat specifically targeting Telegram users. Currently active and assessed at an elevated risk level, this domain employs a fraudulent page titled "Register for the Zama Public Auction" to deceive visitors into providing credentials or other sensitive information. PhishDestroy's analysis confirms this is a phishing operation rather than a legitimate service.

Technical indicators paint a clear picture of malicious intent. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 172.67.206.161. VirusTotal data shows 5 out of 95 security vendors flagging the domain, and it appears on 4 security blocklists. Notably, the site lacks an SSL certificate, which is a strong red flag for any site requesting personal data. Additionally, AlienVault OTX has recorded the domain in 1 threat intelligence pulse, further corroborating its malicious nature.

Given these findings, users should exercise extreme caution. PhishDestroy recommends avoiding any interaction with zama-auction.mom and never entering login credentials or personal information on the site. If you have already engaged with this domain, change your Telegram password immediately and enable two-factor authentication. Always verify the legitimacy of auction or login pages through official channels before proceeding.