Is mtproto.ru a scam?

Our automated security review found no threat indicators on mtproto.ru. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.

Is mtproto.ru safe to use?

mtproto.ru passed our automated security checks with a trust score of 88/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.

Does mtproto.ru have a valid SSL certificate?

Yes. mtproto.ru presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE2, expiring in 79 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has mtproto.ru been flagged by antivirus engines?

No. All 92 antivirus engines in our malware network report mtproto.ru as clean.

Is mtproto.ru on any phishing or malware blacklists?

No. mtproto.ru is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is mtproto.ru hosted?

mtproto.ru resolves to an IP operated by Mo's Operations GmbH in FR (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

Is mtproto.ru a well-known website?

Yes. mtproto.ru sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

How often is the mtproto.ru report updated?

This is a permanent record of the scan run on June 24, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around mtproto.ru have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is mtproto.ru legit or a scam?

Our verdict:Safe· 88/100

SafeSuspiciousDangerous

A long-standing Russian informational site and proxy directory for Telegram's MTProto protocol with a clean security record since 2021.

Why we trust it

Zero detections across 92 antivirus engines in our network.Domain has been active and consistent since January 2021.Positive mentions in reputable independent news publications.

mtproto.ruScanned 7h ago

Post Facebook

Trust score

SAFE

Heuristics 99·MT 82

Warning signals (2)

Redirects to another domain Scam-network signals (0/100)

Positive signals (4)

Antivirus clear Not on major blacklists Encrypted connection Clean server reputation

View density

Analysis Summary

Threat Intelligence

0/92

All engines report clean

Domain Age

—

Registration date unknown

MT Intelligence

Safe

Low likelihood · 85% confidence

SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

LIVE RENDER

mtproto.ru

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Low scam likelihoodengineMT · Guardiantrust82/100

MT AgentLive web researchVisual inspection

Confidence

The domain has been active for over three years and maintains a clean reputation across our antivirus network and major browser blocklists. Our analysis confirms it serves as a third-party resource for the Telegram ecosystem, providing technical explanations and proxy server lists. It does not attempt to harvest credentials or impersonate the official Telegram login flow. Independent research shows the site has been recommended by reputable news outlets as a reliable way to maintain connectivity. The infrastructure is stable, and there are no reports of malicious activity or fraud associated with its operations.

Full dossier

Analysis complete

Page Content

The site provides educational content regarding the Mobile Transport Protocol (MTProto), including technical guides on authorization keys and protocol descriptions. It features a directory of proxy servers intended to help users maintain access to Telegram in regions with connectivity issues.

Infrastructure

The site is hosted on a stable IP with no history of abuse reports. It utilizes a valid SSL certificate and loads resources from trusted domains including Telegram and Yandex. The technical setup is consistent with a functional web application rather than a temporary scam landing page.

Domain History

Registered in early 2021, the domain has a significant operational history. Unlike typical phishing sites that are registered and discarded within weeks, this domain has maintained its purpose as a proxy resource for several years.

Web Reputation

The site has been cited positively by independent media organizations as a tool for digital freedom. While some users reported connectivity issues in 2026 due to regional network blocks, these are related to censorship rather than security threats or fraudulent behavior.

Risk Factors

Third-party proxy servers carry inherent privacy risks as traffic passes through external hardware.
The site is not an official Telegram property, though it accurately describes its relationship as a third-party resource.
WHOIS data is set to private, which is common for individual-run resource sites but limits ownership transparency.

Positive Signals

Zero detections across 92 antivirus engines in our network.
Domain has been active and consistent since January 2021.
Positive mentions in reputable independent news publications.
No history of phishing, malware, or credential harvesting detected by our crawler.

AI Recommendation

You can safely browse this site for information on MTProto. If you use the provided proxy servers, remember that your metadata may be visible to the proxy operator, which is a standard characteristic of all proxy services.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for mtproto.ru, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

Active · Russia

Site traces back to an actively registered business.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 complaints · 2 positive

Key findings

7 headline facts from open-web research

mtproto.ru is a Russian-language site providing information about the MTProto (Mobile Transport Protocol) used by Telegram for encryption and data exchange, with a prominent "Подключиться" (Connect) button linking to /main.php.
The /main.php page lists example MTProto proxy servers (e.g., stmt.x5retail.org, tgmt.st-29.ru) or directs users to third-party servers; the site claims high-speed servers (up to 1 Gbit/s), encryption, and protection from ISP surveillance.
Domain registered in 2021 (first analysis on 2ip.ru dated Jan 6, 2021); current WHOIS shows owner as "Private Person", registrar BEGET-RU, status REGISTERED/DELEGATED/UNVERIFIED, using Cloudflare nameservers.
Mentioned positively in Meduza.io article (Mar 2026) as one of several recommended free MTProto proxies for bypassing restrictions in Russia without installing VPN.
Users on Pikabu.ru reported the site and its proxies as unavailable/blocked in May 2026 (Rostelecom, Tyumen region), with discussions suggesting possible Roskomnadzor (RKN) blocking of MTProxy servers.
No scam reports, fraud complaints, malware detections, or negative Trustpilot/ScamAdviser results found across searches for "mtproto.ru scam", reviews, or complaints.
Official MTProto documentation is hosted at core.telegram.org/mtproto; mtproto.ru is an independent third-party site providing proxy access and protocol explanation, common in the Russian MTProto proxy ecosystem.

Business registration

Status: active · Russia

Registered via BEGET-RU registrar; owner listed as Private Person; domain created around January 2021 (per 2ip.ru analysis), with WHOIS history from at least Nov 2024 showing Private Person and Cloudflare nameservers.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases and consumer-review sites for mtproto.ru and found no reports of fraudulent activity. The site is documented as a long-standing resource for Telegram users in Russia, with mentions in Meduza as a recommended tool for bypassing network blocks. While some users on community forums like Pikabu noted the site was occasionally inaccessible due to local ISP restrictions, these reports were related to network filtering rather than security concerns.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Low correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Linked signals (2)

t.metelegram.org

Antivirus Engines

Clean pass · verified

Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines

Clean

Kaspersky

Clean

Bitdefender

Clean

Microsoft

Not in pass

ESET-NOD32

Not in pass

Avira

Not in pass

Sophos

Clean

Fortinet

Clean

Google Safebrowsing

Clean

Emsisoft

Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles2

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Links to 2 social profiles.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerLet's Encrypt · YE2

ExpiresSep 11, 2026 (79d)

Self-signedNo

Hosting & Technology

HostingMo's Operations GmbH

Server locationFR

Web servernginx/1.28.0

Platform / CMSDataLife Engine (http://dle-news.ru)

PopularityTop 100k worldwide

Redirect Chain

Hops

Cross-domain

Yes

Lookalike

Punycode

1301http://mtproto.ru/
2301http://www.mtproto.ru/cross-domain
3200https://www.mtproto.ru/cross-domain

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPMo's Operations GmbH

Usage typeData Center/Web Hosting/Transit

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

Double-check the exact URL in your address bar
Confirm you are actually on mtproto.ru and not a lookalike like m-tproto.ru.com or an IDN homoglyph.
Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
Discuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

yandex.ru pagead2.googlesyndication.com twitter.com t.me telegram.org translations.telegram.org mc.yandex.ru

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review found no threat indicators on mtproto.ru. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
mtproto.ru passed our automated security checks with a trust score of 88/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
Yes. mtproto.ru presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE2, expiring in 79 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
No. All 92 antivirus engines in our malware network report mtproto.ru as clean.
No. mtproto.ru is not currently listed on the major browser blocklist feeds that modern browsers use.
mtproto.ru resolves to an IP operated by Mo's Operations GmbH in FR (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
Yes. mtproto.ru sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
This is a permanent record of the scan run on June 24, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around mtproto.ru have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·mtproto.ru

SAFE

This is a legitimate Russian-language informational resource and proxy provider for the Telegram MTProto protocol. It has been active since 2021 and is recognized by independent media as a tool for bypassing network restrictions. You can use the information provided here safely.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Safe reports

villaspinaresdesananton.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.