Criticalscore 77 · flagged Wednesday, September 2, 2026

buytelegramaccount.top

Appeared in the .top zone on Wednesday, September 2, 2026; by the end of that day the census found active website about e-commerce & retail. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: telegram
+14
lure words (login, verify, secure…)
matched: account
+26
TLD with a high abuse rate
matched: top
+8
brand name on a rarely-seen nameserver
matched: sitechai.com
+6
brand name at a retail registrar
matched: Global Domain Group LLC
+8
brand name and brand-styled page
matched: telegram
+15
Registrar
Global Domain Group LLC
Nameserver provider
Nameservers
ns1.sitechai.com, ns2.sitechai.com
First-day state
active website
HTTP status
200
Page title
Buy Telegram Account — Instant Verified Accounts from $10
Has a form
no
Brand echoed
telegram

Model opinions

Second opinionlooks like abuseconfidence 76%· claude-opus-5

Site is a shop selling bulk 'verified' Telegram accounts for $10 with delivery arranged via WhatsApp/Telegram handles and a gmail address — an illicit account-trading operation using Telegram's logo and name without authorisation; it does not impersonate Telegram to steal credentials, so it is abuse rather than phishing (and the anonymous chat-only, no-payment-page setup also carries a fake-shop risk).

First passlooks like a scamconfidence 92%· claude-haiku-4-5

The domain sells Telegram accounts as a commercial service, not impersonating Telegram itself or attempting to steal credentials. This is a fraudulent account-selling scheme (accounts are either stolen, fake, or violate Telegram's ToS), but without credential harvesting or brand impersonation typical of phishing. The page has its own branding ('Buy Telegram Account'), operator contact via Telegram/WhatsApp, and a purchase funnel—classic fraud/scam structure rather than credential theft.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Wednesday, September 2, 2026

Screenshot of buytelegramaccount.top taken by the zone census on 2026-09-02

Same data as JSON: /api/zone/domain/buytelegramaccount.top. This page is not indexed by search engines and does not link to the site it describes.