Is proxytg.com safe?
http://proxytg.com/
Checked on
How we checked
Coverage: partial · 5 of 6 applicable core capabilities
- Antivirus (61 of 95 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
ProxyTG sells a paid VPN through a Telegram bot under a legal identity that contradicts itself
proxytg.com advertises a free Telegram MTProto proxy and a paid VPN from 390 ₽ per month, but every purchase, account and support action is handed off to the Telegram bot @proxytg rather than a checkout on the site. The terms page names a contracting entity that mixes an Italian company form, Russian tax numbers and a Dubai office address with no registration number, and the refund promise is limited to subscriptions the buyer never used. Nothing malicious was detected on the domain, but the operator and the billing terms cannot be verified from what the site publishes, so this sits in the moderate-risk band.
Saved site captureCaptured safely during this scanSaved antivirus result from Apr 6, 2026: no detections across 61 enginesWhere this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 62/100
Moderate Risk covers scores 45–69. 3 findings pulled the score down; 2 pushed it up.
What pulled the score down
- ModerateThe terms name an Italian limited company but list Russian INN/KPP tax numbers and a Dubai office address, with no company registration number disclosed.
- ModerateAll purchase, account and support actions lead to the Telegram bot @proxytg, so no checkout, price confirmation or renewal terms are visible on the domain.
- ModerateRefunds are advertised only for unused subscriptions, and the terms state the EU withdrawal right ends once the digital service is fully performed after immediate activation.
What pushed the score up
- SupportsSafe Browsing returned no warning, TLS is valid, and the hosting IP has an abuse score of 0/100 across zero saved reports.
- SupportsSupport is reachable at support@proxytg.com on the site's own domain, and the site links to ten social profiles.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).
01 · Investigation Brief
Investigation Brief
proxytg.com advertises a free Telegram MTProto proxy and a paid VPN from 390 ₽ per month, but every purchase, account and support action is handed off to the Telegram bot @proxytg rather than a checkout on the site. The terms page names a contracting entity that mixes an Italian company form, Russian tax numbers and a Dubai office address with no registration number, and the refund promise is limited to subscriptions the buyer never used. Nothing malicious was detected on the domain, but the operator and the billing terms cannot be verified from what the site publishes, so this sits in the moderate-risk band.
Who is actually selling the subscription
The terms page identifies the seller as 'ДЖИ ПИ ТИ ФИНАНС - ПЭЙМЕНТ СЕРВИСЕС ПРОВАЙДЕР ЭСТ.', described as an Italian limited company, yet it lists Russian INN and KPP tax identifiers and an office address in the Ontario Tower in Dubai's Business Bay. No company registration number appears anywhere in that block, so a buyer has no way to check which legal entity would take their money or where to serve a claim.
The only direct contact published is support@proxytg.com on the site's own domain, and the site links out to ten social profiles, so there is a reachable support channel even though the corporate identity is muddled.
Independent research surfaced a separate iOS app called 'ProxyTG — прокси' attributed to a private developer whose legal pages sit on a GitHub Pages site, which does not match the entity named in the proxytg.com terms. Whether the app and the website are the same business is not established by the evidence.
Payment and refunds happen outside the website
The buttons 'Купить VPN в боте', 'Подключиться в боте' and 'Перейти в бота' all lead to the Telegram bot @proxytg, and the site states payment is taken in rubles by card, SBP or Telegram Stars inside that bot. No price confirmation, checkout page or renewal terms are visible on proxytg.com itself, so a visitor cannot see the recurring-charge conditions before entering the bot.
The marketing page promises a refund within 14 days only if the service was not used, while the terms explain that subscribing with immediate activation ends the EU 14-day right of withdrawal once the digital service has been fully performed. In practice the advertised refund window is narrow and depends on the operator's own usage records.
The site also runs a referral scheme paying 50% of payments made by invited friends, a growth mechanic that pushes existing users to recruit new paying customers into the same bot.
No malware or phishing signal, but that is not a trust verdict
The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0 out of 100 across zero saved reports. These results describe detections only and say nothing about whether the operator honours its subscription terms.
The domain is 259 days old, which is context rather than misconduct, and the free proxy button hands visitors a Telegram proxy link pointing at a third-party server host rather than a proxytg.com endpoint, so the free tier's infrastructure sits outside the reviewed domain.
Why the score is 62
The terms name an Italian limited company but list Russian INN/KPP tax numbers and a Dubai office address, with no company registration number disclosed.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 95
No detectionsSaved analysis from April 6, 2026 - stale
No detections across 61 engines that rated this URL
No antivirus engine that answered raised an adverse result; 34 had no rating for this URL. This is one signal, not a guarantee.
- Malicious
- 0
- Suspicious
- 0
- Total
- 95
All 95 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- benkow.cc - Clean
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- Cluster25 - Unrated
- CMC Threat Intelligence - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Clean
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- malwares.com URL checker - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- securolytics - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- Spam404 - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Unrated
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
Large blue hero with the Russian headline 'ПРОКСИ ДЛЯ TELEGRAM И VPN' and a badge reading 'ProxyTG — бесплатный прокси для Telegram и VPN для всех устройств'. Top navigation shows 'Главная', 'Помощь', 'Блог', a language selector 'RU' with a Russian flag, and a white 'Бот' button. Body text states the Telegram proxy is free without registration and that a VPN for phone, computer and TV is bought in the @proxytg bot ('Купить VPN можно в боте @proxytg'). A floating card in the lower right reads 'Бот @proxytg — Управляйте VPN в Telegram' with a Telegram paper-plane icon.
What the captured page showed
4 observations- 01
Large blue hero with the Russian headline 'ПРОКСИ ДЛЯ TELEGRAM И VPN' and a badge reading 'ProxyTG — бесплатный прокси для Telegram и VPN для всех устройств'.
- 02
Top navigation shows 'Главная', 'Помощь', 'Блог', a language selector 'RU' with a Russian flag, and a white 'Бот' button.
- 03
Body text states the Telegram proxy is free without registration and that a VPN for phone, computer and TV is bought in the @proxytg bot ('Купить VPN можно в боте @proxytg').
- 04
A floating card in the lower right reads 'Бот @proxytg — Управляйте VPN в Telegram' with a Telegram paper-plane icon.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
ProxyTG — бесплатный прокси для Telegram и VPN
- Meta description
Бесплатный прокси для Telegram без регистрации — в один клик. VPN для всех устройств: 13 стран, до 5 устройств, от 390 ₽ в месяц. Купить — в боте @proxytg.
Pages we read
- Main page/Read
- Terms/termsRead
03 · Investigation Story
Investigation story
What the site claims
ProxyTG — бесплатный прокси для Telegram и VPN
What we observed
The page content was captured and checked alongside 61 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Saas
Observed behavior
Evidence behind this classification
- 01The terms name an Italian limited company but list Russian INN/KPP tax numbers and a Dubai office address, with no company registration number disclosed.
- 02Refunds are advertised only for unused subscriptions, and the terms state the EU withdrawal right ends once the digital service is fully performed after immediate activation.
- 03All purchase, account and support actions lead to the Telegram bot @proxytg, so no checkout, price confirmation or renewal terms are visible on the domain.
Web research findings
Independent findings for proxytg.com, including public complaints, named review sources, registration records, and look-alike-domain evidence.
No independently sourced scam reports or credibility records were found for proxytg.com. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainproxytg.com
- Redirects toproxytg.com
- Hosted byCloudflare, Inc.
- Referencesgoogletagmanager.com · t.me
Domain Timeline
- Feb 18, 2026Domain registered
First appeared in WHOIS records — 8 months old when this review was saved.
- Nov 5, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (support@proxytg.com).
- Links to 10 social profiles.
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
Certificate issued for proxytg.com.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Google Tag Manager
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1308http://proxytg.com/
- 2200https://proxytg.com/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The terms name an Italian limited company but list Russian INN/KPP tax numbers and a Dubai office address, with no company registration number disclosed. · All purchase, account and support actions lead to the Telegram bot @proxytg, so no checkout, price confirmation or renewal terms are visible on the domain.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 95 engines flagged | Limited | No saved finding | stale fallback · analysed Apr 6, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Visual evidence | 4 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 5, 2026 |
| Independent research | 1 independent finding was saved | Completed | No adverse finding | this scan · Nov 5, 2026 |
- Antivirus
- Result0 of 95 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Apr 6, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Visual evidence
- Result4 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 5, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is proxytg.com a scam or is it safe?
Is proxytg.com safe to use?
Has proxytg.com been flagged by antivirus engines?
Is proxytg.com on any phishing or malware blacklists?
How old is the proxytg.com domain?
Does proxytg.com have a valid SSL certificate?
Where is proxytg.com hosted?
How often is the proxytg.com report updated?
08 · Final Verdict
Final verdict
ProxyTG sells a paid VPN through a Telegram bot under a legal identity that contradicts itself
proxytg.com advertises a free Telegram MTProto proxy and a paid VPN from 390 ₽ per month, but every purchase, account and support action is handed off to the Telegram bot @proxytg rather than a checkout on the site. The terms page names a contracting entity that mixes an Italian company form, Russian tax numbers and a Dubai office address with no registration number, and the refund promise is limited to subscriptions the buyer never used. Nothing malicious was detected on the domain, but the operator and the billing terms cannot be verified from what the site publishes, so this sits in the moderate-risk band.
09 · Community
Community
Are you the owner of proxytg.com?Verify and reply