Is telegramschik.ru safe?

No. MalwareAnalyzer scanned telegramschik.ru on 21 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was telegramschik.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

telegramschik.ru - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned telegramschik.ru and returned a suspicious verdict (score 25), categorised as phishing. The page resolved to 45.128.206.240 on AdminVPS OOO in RU. 6 domains and 5 IPs were contacted, over 49 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 25) · Confidence 28%
Scanned URL: https://telegramschik.ru/
Domain: telegramschik.ru · IP: 45.128.206.240 · AS211642 · RU
Server: nginx
Page title: Телеграмщик
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 27 23: · subject CN=telegramschik.ru
HTTP requests captured: 49 · cookies set: 9 · outgoing links: 37
Scan tier: standard · observed 2026-08-21 19:50:23 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates telegram (combosquat)

Detected technologies

Nginx
PHP

Contacted infrastructure

45.128.206.240 - AS211642 AdminVPS OOO (Russian Federation)
77.88.44.55 - AS13238 Yandex enterprise network (Russian Federation)
77.88.21.119 - AS13238 Yandex enterprise network (Russian Federation)

Observed indicators

telegramschik.ru
yandex.ru
cdn.adfinity.pro
mc.yandex.ru
yastatic.net
mc.yandex.com
45.128.206.240
95.181.182.182
77.88.44.55
77.88.21.119
37.9.64.225
https://telegramschik.ru/
https://telegramschik.ru/index.php?do=opensearch
https://telegramschik.ru/templates/gramm/css/common.css
https://telegramschik.ru/templates/gramm/css/styles.css
https://telegramschik.ru/templates/gramm/css/engine.css
https://telegramschik.ru/templates/gramm/css/fontawesome.css
https://telegramschik.ru/templates/gramm/webfonts/manrope-400.woff2
https://telegramschik.ru/templates/gramm/webfonts/manrope-500.woff2
https://telegramschik.ru/templates/gramm/webfonts/manrope-600.woff2

Questions about telegramschik.ru

Is telegramschik.ru safe?: No. MalwareAnalyzer scanned telegramschik.ru on 21 Aug 2026 and returned a suspicious verdict with a score of 25 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was telegramschik.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of telegramschik.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan