telegram-proxy.top
Appeared in the .top zone on Monday, September 14, 2026; by the end of that day the census found active website about hosting & domains. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Functional Russian-language MTProto proxy aggregator with no login form or credential capture, so not phishing, but it uses Telegram's trademark in the domain without authorisation and is one node of a large cross-linked network of throwaway-TLD clones (tgproxy.date, mtproxy.space, freemtproto.bond, mtproto.sbs, a01.lovely.lat/mtjlpoto.fit/mtproxy.cc), a shape typical of proxy operators who monetise or intercept redirected user traffic.
The domain provides MTProxy proxy server lists for Telegram, not impersonating Telegram itself or attempting credential capture. However, this is abuse because it facilitates circumvention of network restrictions (likely targeting users in censored regions) and operates as part of a known proxy-distribution network (multiple related domains: tgproxy.date, mtproxy.space, mtproxy.date, etc.). The site provides technical proxy connection tools rather than phishing credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Monday, September 14, 2026
Same data as JSON: /api/zone/domain/telegram-proxy.top. This page is not indexed by search engines and does not link to the site it describes.