testonay.lol
Appeared in the .lol zone on Friday, September 4, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a Turkish-language 'Nexus Panel' admin login fronting a Telegram mass-account automation tool (string session / SMS code / 2FA ingestion, bulk group joining, scheduled auto-messaging), i.e. a spam/bot-farm control panel rather than a page impersonating Telegram to end users; the Telegram name and paper-plane icon describe the abused platform, not a credential-harvesting lure.
Page titled 'Nexus | Telegram Management' with Telegram's paper-plane logo impersonates Telegram to harvest admin credentials. The password form posts to itself with no offsite links (sealed-room phish shape), and the interface falsely claims to be a Telegram account management system offering bulk group joining, scheduled messaging, and account integration—functionality that does not exist in Telegram and would require stealing session tokens or credentials.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Friday, September 4, 2026
Same data as JSON: /api/zone/domain/testonay.lol. This page is not indexed by search engines and does not link to the site it describes.