Is telegram-keh.fr safe?

No. MalwareAnalyzer scanned telegram-keh.fr on 21 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was telegram-keh.fr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

telegram-keh.fr - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned telegram-keh.fr and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 37.98.151.45 on MNT-GCICOM in AU. The domain was registered 363 days ago through Hostinger operations UAB. 6 domains and 4 IPs were contacted, over 119 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 33) · Confidence 39%
Scanned URL: https://telegram-keh.fr/
Domain: telegram-keh.fr · IP: 37.98.151.45 · AS47583 · AU
Server: hcdn
Page title: Canal Telegram Keh 🔥 Groupe, Leak, Snap & Affiche Keh France
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Hostinger operations UAB · domain age 363 days · created 2025-08-23
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 17 23: · subject CN=telegram-keh.fr
Evidenced operator: Ano Nymous
HTTP requests captured: 119 · outgoing links: 116
Scan tier: standard · observed 2026-08-21 21:58:29 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates telegram (combosquat)
Certificate issued < 48h ago

Detected technologies

PHP
WordPress
jQuery

Contacted infrastructure

37.98.151.45 - AS47583 MNT-GCICOM (AU)
142.250.195.234 - AS15169 Google LLC (India)
172.217.25.195 - AS15169 Google LLC (Malaysia)
192.0.77.48 - AS2635 Automattic, Inc (United States)

Observed indicators

telegram-keh.fr
gmpg.org
fonts.googleapis.com
telegram-x.fr
fonts.gstatic.com
s.w.org
37.98.151.45
142.250.195.234
172.217.25.195
192.0.77.48
https://telegram-keh.fr/
https://gmpg.org/xfn/11
https://fonts.googleapis.com/
https://telegram-keh.fr/feed/
https://telegram-keh.fr/comments/feed/
https://telegram-keh.fr/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=6.7.2
https://telegram-keh.fr/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=2.4.0
https://telegram-keh.fr/wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.1.2
https://fonts.googleapis.com/css?family=Open+Sans%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100i%2C200i%2C300i%2C400i%2C500i%2C600i%2C700i%2C800i%2C900i&subset=latin&display=swap&ver=6.8.8
https://telegram-keh.fr/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4

Questions about telegram-keh.fr

Is telegram-keh.fr safe?: No. MalwareAnalyzer scanned telegram-keh.fr on 21 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was telegram-keh.fr checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of telegram-keh.fr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan