Highscore 54 · flagged Thursday, October 15, 2026

telegram-re.org

Appeared in the .org zone on Thursday, October 15, 2026; by the end of that day the census found parked, for sale. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: telegram
+30
brand name behind Cloudflare
matched: cloudflare.com
+6
identical page on many newborns
matched: 344 identical pages
+10
brand name redirects elsewhere
matched: urldance.com
+8
Registrar
—
Nameserver provider
Nameservers
nova.ns.cloudflare.com, rommy.ns.cloudflare.com
First-day state
parked, for sale
HTTP status
200
Page title
最新@网址
Has a form
no
Brand echoed
telegram

Model opinions

Second opinionlooks like abusetarget: Telegramconfidence 77%· claude-opus-5-5

The name squats the Telegram brand but redirects to an unrelated Chinese 'latest URL' gate on urldance.com ('too many visitors, enter password', 'join group for perks', link to dlj.8uri.cn). That shape is typical of adult, gambling or piracy traffic funnels, and it is one of a 344-page identical cluster. The page does not impersonate Telegram, so this is a brand-squat traffic front rather than phishing.

First passlooks like abuseconfidence 92%· claude-haiku-4-5

telegram-re.org is a brand-typosquat domain (Telegram + suffix) that redirects to an unrelated Chinese resource-sharing/password-gating site. The domain name, Cloudflare nameservers, and redirect to a third-party URL form a clear brand-squat infrastructure pattern. The destination page is not impersonating Telegram, but the domain name itself is a squat designed to capture Telegram-related traffic.

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Thursday, October 15, 2026

Screenshot of telegram-re.org taken by the zone census on 2026-10-15

Same data as JSON: /api/zone/domain/telegram-re.org. This page is not indexed by search engines and does not link to the site it describes.