telegramifsagrupx.lol
Appeared in the .lol zone on Sunday, October 25, 2026; by the end of that day the census found active website about adult. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a Turkish 'ifşa' (leak) directory linking to 18 t.me channels that it says redistribute paid OnlyFans content from named models, which is piracy and likely non-consensual intimate imagery. It does not impersonate Telegram: there is no form or login and Telegram is only the distribution platform, so this is abuse, not phishing.
This is a NSFW content aggregator/directory disguised with Telegram branding in its domain name and page title. The site curates and links to adult Telegram channels ("ifşa" = leaks/exposed content), including stolen OnlyFans material. While it uses Telegram's name prominently, it is not impersonating Telegram itself to steal credentials—it is a standalone adult content directory operating under a brand-squat domain. The abuse is the distribution of non-consensual intimate imagery and potentiall
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Sunday, October 25, 2026
Same data as JSON: /api/zone/domain/telegramifsagrupx.lol. This page is not indexed by search engines and does not link to the site it describes.