Deutsche TelekomDeutsche TelekomReport the credential receiver.
The copied login sent entered credentials to a Telegram bot. Outtake can file a bot abuse report for Deutsche Telekom, then check what the provider actually disables.
Provider target
Telegram
Credential receiver
Requested action
Request bot disablement
Recommended in a dated report. Current status and provider outcome need verification.
Provider report / Telegram
What this report asks the provider to do.
The September 8 investigation supports a provider-specific request. Outtake can file it on Deutsche Telekom's behalf and follow the response.
What the report confirmed
The September 8 report captured JavaScript that sent entered credentials to a Telegram bot and a two-member receiving group. No other page was confirmed using that bot.
Evidence for the provider
The bot endpoint in page source, the recorded exfiltration path, the copied T-Online login capture, and the dated investigation.
What Outtake can do
Outtake can file a Telegram abuse report on Deutsche Telekom's behalf, track the provider response, and verify whether the bot has been disabled.
What changes, and what does not
Disabling the bot would interrupt the documented collection path. It would not remove the phishing page or rule out a replacement receiver.
Proof of outcome
Recheck the bot and the page's collection path after the provider responds. Confirm a change before marking this case complete.