Directory

Showing 1–3, most evidence first; contradicted and not yet assessed last · names and descriptions as their source publishes them

• telesint-api.onrender.com/ioctelesint-api.onrender.comIOC feed from Telegram CTI channels. Filters: ip (exact lookup), type(ip|domain|url|md5|sha1|sha256|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].Livechecked 15 Nov 2026, 07:02 UTCEvidence 1/4x402x402 Bazaar4 payers
• telesint-api.onrender.com/intenttelesint-api.onrender.comPre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks.Livechecked 15 Nov 2026, 06:19 UTCEvidence 1/4x402x402 Bazaar2 payers
• telesint-api.onrender.com/vulnerabilitytelesint-api.onrender.comCVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.Livechecked 15 Nov 2026, 04:32 UTCEvidence 1/4x402x402 Bazaar2 payers