Jonathan Matkowsky

Threat-intel-backed investigation and domain takeover proceedings

Decades of experience spanning internationally recognized law firms, in-house legal teams, and elite cyber threat-intelligence teams.

I bring that experience together to investigate and disrupt malicious infrastructure, use legal process to pursue attribution, and where appropriate, make criminal referrals aimed at stopping threat actors from targeting or retargeting your organization.

Let’s explore together what makes practical sense for your organization.

When does it make sense to involve Jonathan in a malicious-infrastructure matter?

It can make sense when the problem is no longer just a routine abuse ticket: repeated or related malicious domains are appearing, the organization needs to determine whether infrastructure is under common control, attribution matters, evidence must be preserved for a proceeding or legal step, or security and legal teams need to choose among several enforcement paths.

Other indicators include a need to connect provider action with an administrative domain proceeding, identify where nonpublic records may exist, prepare a documented law-enforcement referral, or build a repeatable internal attribution and disruption capability.

Not every malicious domain requires outside investigative or legal involvement. An isolated, readily removable abuse event may be handled through ordinary security or provider processes. Jonathan’s role is most relevant when the technical findings need to be connected to broader evidence, attribution, administrative, legal, or cross-functional action.

AI can make mistakes.

By submitting a question to the AI, you thereby agree to the Terms and Privacy Notice.