en-telegram.sbs
Appeared in the .sbs zone on Monday, October 5, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
A day-old .sbs domain with Telegram's name and logo hosts a 'Telegram中文版' download centre offering APK and desktop installers for every platform, the known shape of trojanized-client malware campaigns. It claims all downloads point to the official source, yet none of its 35 links leave the site, so the installers are self-hosted.
The domain en-telegram.sbs impersonates Telegram's branding and presents itself as an official Chinese download center ('官方客户端安全下载' = official client safe download), but Telegram's legitimate downloads are at telegram.org and official app stores. This is a typosquat domain designed to redirect users to counterfeit or malware-laden client downloads through brand impersonation without credential theft, matching the abuse pattern of a download squat.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, October 5, 2026
Same data as JSON: /api/zone/domain/en-telegram.sbs. This page is not indexed by search engines and does not link to the site it describes.