telegramann.com.cn
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of telegramann.com.cn
The website appears to present itself as a Chinese-language Telegram download portal. Its page title and metadata describe it as an "official download site" for Telegram, offering desktop and mobile downloads for Android, iOS, Windows, macOS, and Linux, and the screenshot prominently uses Telegram branding and interface-style design elements.
Based on the visible content, the site seems intended to help users obtain Telegram client software and learn about platform features. However, it is hosted on the separate domain telegramann.com.cn rather than Telegram's primary official domain, while also linking out to legitimate Telegram-related download pages. The operator is not clearly identified in the provided scan data, and the domain naming pattern may cause confusion because it closely resembles the Telegram brand while adding extra characters.
Safety Assessment for telegramann.com.cn
This domain was flagged by 20 out of 91 security engines at the time of the scan, with many of those detections classifying it as phishing or otherwise malicious. That level of multi-engine agreement is a strong risk indicator, especially because the page appears to imitate an official Telegram download resource while operating from a different domain. The site’s branding, wording such as "official download," and visual presentation may lead visitors to believe they are interacting with an authorized Telegram property.
At the same time, the malware scan summary did not identify malicious files on the sampled page, and major blacklist databases included in the scan were clean at the time of review. Those cleaner signals do not outweigh the broader phishing consensus from multiple security engines, particularly for a site that appears to mimic a well-known communications platform. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate expiring on 2026-08-04, and it appears to be served by nginx from an IP hosted by Antbox Network Limited in Hong Kong. DNSSEC was not enabled according to the provided data, and the domain uses nameservers under 22.cn. The domain age and creation details were not available, which limits historical trust assessment.
From a technical-content perspective, the page references common third-party assets such as Cloudflare-hosted libraries and Google Fonts, and it links to legitimate Telegram domains for some downloads. No flagged external links or iframes were reported in the supplied scan. Even so, a valid certificate and clean linked resources do not by themselves establish legitimacy, particularly when the surrounding page appears to imitate a known brand and multiple security engines have raised phishing concerns.
Share your experience with this website. Was it safe? Did you encounter any issues?