Intelligence from the underground.
We monitor Telegram's illicit marketplaces, vendor shopbots and crypto settlement rails — and turn scattered chatter into evidence-grade findings that hold up in a report.
What we keep an eye on
Telegram has become the dominant storefront for controlled substances. We follow the whole stack, from the storefront down to the money.
Narcotics marketplaces
Bot front-ends and private groups trading cocaine, MDMA, opioids, benzodiazepines, cannabis and psychedelics.
Vendor shopbots
Automated storefronts with live catalogues, order flows and expiring one-time invite links that gate the private groups.
Payment rails
BTC / LTC / XMR settlement, mixer and non-KYC exchange flows, and the address clusters vendor bots reuse.
Distribution networks
Vendor groups, reshippers and regional supply chains — plus the mirror domains that keep an operation alive after a takedown.
From raw chatter to a filed notice
A repeatable pipeline. Every finding traces back to a timestamped observation.
Collection
MTProto collectors follow invite links, join requests and channel feeds to enumerate storefronts and their operator accounts.
Enrichment
DNS, WHOIS/RDAP, TLS fingerprints, hosting and crypto-address correlation turn a handle into an attributable entity.
Analysis
Classification by category, jurisdiction and operator; mirrors and clones are deduplicated into one entity.
Reporting
Evidence packs and DSA Art.16 notices filed against the correct counterparty — registrar, host, or platform.
Recently actioned
A slice of the current watchlist. Status reflects the furthest enforcement step reached.
| Entity | Type | Jurisdiction | Status |
|---|---|---|---|
| qtbot.to | Marketplace directory | UK / EU | REPORTED |
| @PhoenixShopList_PX2bot | Shopbot hub | UK | REPORTED |
| tesseractbot.org | Marketplace | EU | UNDER REVIEW |
| tsbots.to | Marketplace | UK | MONITORED |
| @UBER_QTBOT | Vendor shopbot | UK | REPORTED |
Grounds we report under
Findings are framed against the instruments the receiving desk actually applies.
Working an abuse case?
We share observations with abuse desks, registrars and reporters. Drop a line and we'll send what we have.