# telegram-1eb.pages.dev — SUSPICIOUS

> telegram-1eb.pages.dev is a fake Telegram login page hosted on Cloudflare Pages. This domain mimics the real Telegram web app to steal user credentials.

## Summary
PhishDestroy identifies telegram-1eb.pages.dev as a live phishing domain actively impersonating the legitimate Telegram web interface, with the sole purpose of harvesting user login credentials. This site is designed to appear identical to the official Telegram web client, tricking visitors into entering their usernames and passwords. The page is currently accessible and operational, posing an immediate risk to any user who visits or enters sensitive information.  This domain was flagged by PhishDestroy after technical analysis revealed multiple red flags: it resolves to IP address 188.114.96.3, uses a Google Trust Services SSL certificate to appear legitimate, and is registered through Cloudflare, Inc. VirusTotal currently shows 0/95 security vendors detecting this threat, indicating it has not yet been widely recognized by automated scanning systems. The domain is hosted on Cloudflare Pages, a legitimate service that has been abused to host malicious content.  If you visited telegram-1eb.pages.dev, especially if you entered any login credentials, immediately change your Telegram password and enable two-factor authentication on your real Telegram account. Additionally, scan your device for malware using reputable antivirus software and monitor your account for any unusual activity. Avoid clicking any links from unsolicited messages and verify the authenticity of websites by checking the official Telegram domain (web.telegram.org) before entering sensitive information. Report this domain to your security team or use PhishDestroy's blocking tools to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/359ca435-2141-4e09-b536-e596844d3246
- PhishDestroy: https://phishdestroy.io/domain/telegram-1eb.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/telegram-1eb.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/telegram-1eb.pages.dev/
Last updated: 2026-03-26