Is telegrampremium.org safe?

No. MalwareAnalyzer scanned telegrampremium.org on 20 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was telegrampremium.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

telegrampremium.org - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned telegrampremium.org and returned a suspicious verdict (score 25), categorised as phishing. The page resolved to 91.215.40.10 on DDOS-GUARD LTD in RU. The domain was registered 862 days ago through CSL Computer Service Langenbach GmbH d/b/a joker.com. 4 domains and 4 IPs were contacted, over 41 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 25) · Confidence 28%
Scanned URL: https://telegrampremium.org/
Domain: telegrampremium.org · IP: 91.215.40.10 · AS57724 · RU
Server: ddos-guard
Page title: telegrampremium.org
HTTP status: 200 · text/html; charset=UTF-8
Registrar: CSL Computer Service Langenbach GmbH d/b/a joker.com · domain age 862 days · created 2024-04-09
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Sep 3 10: · subject CN=telegrampremium.org
HTTP requests captured: 41 · cookies set: 7 · outgoing links: 2
Scan tier: standard · observed 2026-08-20 06:18:48 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates telegram (combosquat)

Detected technologies

Google Analytics

Contacted infrastructure

91.215.40.10 - AS57724 DDOS-GUARD LTD (Russian Federation)
142.250.195.168 - AS15169 Google LLC (India)
172.217.25.174 - AS15169 Google LLC (Japan)

Observed indicators

telegrampremium.org
cdn.telegrampremium.org
www.googletagmanager.com
www.google-analytics.com
91.215.40.10
178.72.128.106
142.250.195.168
172.217.25.174
https://telegrampremium.org/
https://cdn.telegrampremium.org/cs1/panel_favicons/83pLpH0O5T3hrrukjuaBpVihLCP3bYrzjfhkfhLu.ico
https://telegrampremium.org/ssr-landing-static/fonts/Inter-Regular.woff2
https://telegrampremium.org/ssr-landing-static/fonts/Inter-SemiBold.woff2
https://telegrampremium.org/ssr-landing-static/fonts/index.min.css?v1
https://telegrampremium.org/ssr-static/css/themes/default.min.css
https://telegrampremium.org/ssr-landing-static/css/common.min.css?v1.34
https://telegrampremium.org/ssr-landing-static/css/menu.min.css?v1.1
https://www.googletagmanager.com/gtag/js?id=G-9H1S19918W
https://www.googletagmanager.com/gtm.js?id=
https://telegrampremium.org/ssr-landing-static/css/panel-preview.min.css
https://telegrampremium.org/ssr-landing-static/service/index.min.css?v1.1

Questions about telegrampremium.org

Is telegrampremium.org safe?: No. MalwareAnalyzer scanned telegrampremium.org on 20 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was telegrampremium.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of telegrampremium.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan