p3lnvk.site

Name: URL Security Scans for p3lnvk.site
Creator: URLert
License: https://www.urlert.com/terms

Potentially Malicious Low Traffic Unranked

URLert Intelligence Note

🚨 Critical Phishing Alert: Telegram Credential Theft

Risk Category: High-Risk Phishing / Credential Harvesting

URLert.com has classified p3lnvk.site as a malicious entity actively engaged in a targeted phishing campaign. This domain is designed to impersonate official Telegram security infrastructure to deceive users into surrendering sensitive account credentials and personal data.

Deceptive Tactics: The site hosts a fraudulent "account verification" page that mimics the legitimate Telegram interface to establish a false sense of trust.
Credential Harvesting: The primary objective of this site is to capture user phone numbers and SMS verification codes, which allows attackers to hijack Telegram accounts and bypass standard security measures.
Active Lure: Evidence suggests this URL is being distributed via SMS messages that claim "suspicious activity" on the victim's account, utilizing social engineering to create a sense of urgency.
Infrastructure: The domain was registered 0 days ago and is currently utilizing Cloudflare to mask its origin. Such "burn" domains are typical of short-lived, high-impact phishing operations.

Immediate Action Required: Do not interact with this website or enter any personal information. If you have already provided your phone number or an SMS code on this site, immediately open your official Telegram app, navigate to Settings > Devices, and "Terminate all other sessions." Ensure that Two-Step Verification (2FA) is enabled on your account.

p3lnvk.site is classified as a potentially malicious site, focusing on phishing. This website is a phishing site designed to impersonate Telegram's security verification process to steal user credentials and phone numbers.

phishingcredential harvestingfraudimpersonation

Network Infrastructure

Historical and current IP address mappings for this domain.

IP Address / Infrastructure	Status	Subdomains	Last Seen
104.21.52.233 CLOUDFLARENET - Cloudflare, Inc. (AS13335)	Active	p3lnvk.site	Today
172.67.205.61 CLOUDFLARENET - Cloudflare, Inc. (AS13335)	Active	p3lnvk.site	Today

104.21.52.233

CLOUDFLARENET - Cloudflare, Inc. (AS13335)

Active

p3lnvk.site

Seen Today

172.67.205.61

CLOUDFLARENET - Cloudflare, Inc. (AS13335)

Active

p3lnvk.site

Seen Today

Community Intelligence

Real experiences from people who visited this domain

Recent Threat Analysis

URLert analyzed recent scan activity for p3lnvk.site and found 1 result.

Status	Target URL	Type	Time
Dangerous	https://p3lnvk.site/		1d ago

Something wrong?

• Domain owner?

Developer API

Integrate Domain Intelligence

Access this classification data programmatically via our API.

GET /api/v1/classify?domain=p3lnvk.site

{
  "domain": "p3lnvk.site",
  "confidence": "high",
  "category": {
    "purpose": "potentially_malicious",
    "specialization": "Phishing"
  },
  "identity": {
    "headline": "Fraudulent Telegram account verification page",
    "summary": "This website is a phishing site designed to impersonate Telegram's security verification process to steal user credentials and phone numbers.",
    "operator": null,
    "parent_entity": null,
    "topics": [
      "phishing",
      "credential harvesting",
      "fraud",
      "impersonation"
    ]
  },
  "functions": {
    "is_ugc_platform": false,
    "is_file_host": false,
    "is_url_shortener": false,
    "is_public_idp": false,
    "is_crypto_platform": false,
    "allows_user_subdomains": false,
    "is_form_builder": false,
    "is_document_host": false
  },
  "facts": {
    "registered_date": "2026-03-14T09:44:42Z",
    "rank": null,
    "hosting_provider": "CLOUDFLARENET - Cloudflare, Inc."
  }
}

API Documentation ↗ • View Pricing ↗