kgm-helps.click presents itself as a potentially malicious site, focusing on telegram phishing. This domain hosts a deceptive website that mimics the official Telegram login interface. It is designed to hijack user accounts by prompting them to scan a QR code, a technique known as session hijacking.
Historical and current IP address mappings for this domain.
| IP Address / Infrastructure | Status | Subdomains | Last Seen |
|---|---|---|---|
NETLAB-SDN - NetLab Global (AS979) | Active | kgm-helps.click | Today |
Real experiences from people who visited this domain
URLert analyzed recent scan activity for kgm-helps.click and found 1 result.
| Status | Target URL | Time |
|---|---|---|
| Malicious | https://hdy.kgm-helps.click/ | 4w ago |
Learn about common risks for this type of website
Access this classification data programmatically via our API.
{
"domain": "kgm-helps.click",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Telegram Phishing"
},
"identity": {
"headline": "Phishing site impersonating Telegram login",
"summary": "This domain hosts a deceptive website that mimics the official Telegram login interface. It is designed to hijack user accounts by prompting them to scan a QR code, a technique known as session hijacking.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"telegram",
"account takeover",
"social engineering"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2025-09-24T06:17:45.571000Z",
"rank": null,
"hosting_provider": "NETLAB-SDN - NetLab Global"
}
}