www.telegramsignalmirror.com - suspicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned www.telegramsignalmirror.com and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 216.150.16.65 on Vercel, Inc in US. The domain was registered 312 days ago through Porkbun LLC. 8 domains and 7 IPs were contacted, over 44 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 33) · Confidence 39%
- Scanned URL:
https://www.telegramsignalmirror.com/ - Domain: www.telegramsignalmirror.com · IP: 216.150.16.65 · AS16509 · US
- Server: Vercel
- Page title: Telegram Signal Mirror - Automated Trading Signal Copier
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Porkbun LLC · domain age 312 days · created 2025-10-14
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 20 05: · subject CN=www.telegramsignalmirror.com
- HTTP requests captured: 44 · cookies set: 4 · outgoing links: 24
- Scan tier: standard · observed 2026-08-22 17:49:14 UTC
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates telegram (combosquat)
- Certificate issued < 48h ago
Detected technologies
- Vercel
- Next.js
- Google Analytics
Contacted infrastructure
- 216.150.16.65 - AS16509 Vercel, Inc (United States)
- 142.250.195.104 - AS15169 Google LLC (India)
- 142.250.195.110 - AS15169 Google LLC (India)
- 142.251.152.119 - AS15169 Google LLC (Netherlands)
- 142.251.42.102 - AS15169 Google LLC (India)
- 142.250.195.226 - AS15169 Google LLC (India)
- 142.250.195.131 - AS15169 Google LLC (India)
Observed indicators
- www.telegramsignalmirror.com
- www.googletagmanager.com
- t.me
- www.google-analytics.com
- googleads.g.doubleclick.net
- www.google.com
- ad.doubleclick.net
- www.google.com.au
- 216.150.16.65
- 142.250.195.104
- 142.250.195.110
- 142.251.152.119
- 142.251.42.102
- 142.250.195.226
- 142.250.195.131
- https://www.telegramsignalmirror.com/
- https://www.telegramsignalmirror.com/_next/static/media/4cf2300e9c8272f7-s.p.woff2
- https://www.telegramsignalmirror.com/_next/static/media/93f479601ee12b01-s.p.woff2
- https://www.telegramsignalmirror.com/_next/static/css/874281b1f4386873.css?dpl=dpl_3C2c2QMTqo2tpnJLpoK8v4wthHJT
- https://www.telegramsignalmirror.com/_next/static/chunks/webpack-ebbb748194ed6dec.js?dpl=dpl_3C2c2QMTqo2tpnJLpoK8v4wthHJT
Questions about www.telegramsignalmirror.com
- Is www.telegramsignalmirror.com safe?
- No. MalwareAnalyzer scanned www.telegramsignalmirror.com on 22 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was www.telegramsignalmirror.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.telegramsignalmirror.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan