One more vendor-bot network down: infected[.]bot — Telegram-vendor front-end.
on the .bot gTLD, a registry run by Amazon that explicitly requires
bots to be registered through Amazon's own process (so the operator
was in breach of the registry AUP from day one).
Host suspended the account; parallel report to Amazon Registry now
in for the still-active domain, to close off the host-swap recovery
path before they can use it.

#OSINT #ThreatIntel #InfoSec #Telegram #Cybercrime #Abusereporting

#Intro

I am ZeroTrace, an independent, UK-based security researcher using passive #OSINT to track, map, and dismantle online drug trafficking infrastructure, and founder of http://www.drift-lock.co.uk

My work focuses on Telegram-based marketplaces and the digital supply chains—domains, registrars, and hosting providers—that enable them.

What I post here:

Deep dives into infrastructure resilience (how networks relocate post-takedown)

Aggregated threat intel on bulletproof hosts and complicit registrars

Defanged IOCs and infrastructure mapping threads

All findings are reported to relevant platform abuse teams and UK law enforcement. Transparent tracking log: https://drift-lock.co.uk

#ThreatIntel #CTI #AbuseDesk #NetworkSecurity #CyberSecurity