Highscore 48 · flagged Sunday, October 25, 2026

kr-telegeram.fit

Appeared in the .fit zone on Sunday, October 25, 2026; by the end of that day the census found active website. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

one-letter brand typo
matched: telegeram≈telegram
+28
brand in page title, not in the name
matched: telegram
+20
Registrar
—
Nameserver provider
Nameservers
ns1.onclouddns.com, ns2.onclouddns.com
First-day state
active website
HTTP status
200
Page title
텔레그램 PC 다운로드 | Windows 공식 설치 및 사용 방법
Has a form
no
Brand echoed
telegram

Model opinions

Second opinionlooks like abusetarget: Telegramconfidence 75%· claude-opus-5-5

The typosquat name 'kr-telegeram.fit' hosts a Korean 'official Telegram PC download' page that uses Telegram's logo and branding, a known SEO lure pattern for fake Telegram installers. It has no form, and its download links currently point to the real telegram.org and desktop.telegram.org, so it is a brand-squat staged for deception rather than active credential phishing.

First passlooks like abusetarget: Telegramconfidence 92%· claude-haiku-4-5

The domain kr-telegeram.fit is a typosquat of Telegram (telegeram vs telegram) using the .fit TLD, paired with a page that impersonates Telegram's branding and logo to appear as an official download guide. While the page itself links outbound to legitimate Telegram domains and disclaims direct hosting, the typosquatted domain name combined with full visual impersonation (Telegram logo, Korean UI mimicking official styling) is a classic abuse tactic designed to deceive Korean-language users into

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Sunday, October 25, 2026

Screenshot of kr-telegeram.fit taken by the zone census on 2026-10-25

Same data as JSON: /api/zone/domain/kr-telegeram.fit. This page is not indexed by search engines and does not link to the site it describes.