Recent investigations reveal a growing trend: the utilization of Telegram for malicious activities. Sophisticated cybercriminals are increasingly employing the platform's private channels to exchange stolen credentials, plan campaigns, and facilitate illicit trade . This necessitates improved dark web monitoring capabilities specifically focused on