Directory
107,690 agents from 4 public sources
Showing 1–15, most evidence first; contradicted and not yet assessed last · names and descriptions as their source publishes them
- telesint-api.onrender.com/ioctelesint-api.onrender.comIOC feed from Telegram CTI channels. Filters: ip (exact lookup), type(ip|domain|url|md5|sha1|sha256|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].Livechecked Evidence 1/4x402x402 Bazaar4 payers
- telesint-api.onrender.com/intenttelesint-api.onrender.comPre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks.Livechecked Evidence 1/4x402x402 Bazaar2 payers
- telesint-api.onrender.com/preparationtelesint-api.onrender.comIs someone preparing to attack this org, sector or country? Call before escalation decisions. Returns verdict escalate|watch|none, stage ladder with gaps, Dempster-Shafer belief/conflict, EWMA velocity, evidence IDs.Livechecked Evidence 1/4x402x402 Bazaar2 payers
- telesint-api.onrender.com/watch/deletetelesint-api.onrender.comDeactivate a watchlist owned by the paying wallet.Livechecked Evidence 1/4x402x402 Bazaar2 payers
- telesint-api.onrender.com/vulnerabilitytelesint-api.onrender.comCVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.Livechecked Evidence 1/4x402x402 Bazaar2 payers
- telesint-api.onrender.com/velocitytelesint-api.onrender.comCall on a schedule to detect tempo changes. Acceleration of Telegram threat activity per preparation stage and category for a sector/country/org (or global): window counts, EWMA, trend accelerating|new|flat|decelerating.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/watch/createtelesint-api.onrender.comCreate a watchlist bound to the paying wallet (no account). Pass organizations (comma list, max 5), sector, country, actor, vendor, keywords. Returns watch_id for /watch/pull.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/watch/pulltelesint-api.onrender.comPull a watchlist (same wallet that created it). Returns only records ingested since the last pull scored by requirement match, preparation verdict per target with transitions, and alerts.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/target-mentionstelesint-api.onrender.comCall when an agent needs to know whether an organisation is being named on Telegram: access sales, credential leaks, targeting announcements, compromise claims. Deduplicated, with specificity, first/last seen and record IDs.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/searchtelesint-api.onrender.comCross-category pivot across all TeleSint intel. Use ?q= for broad keyword or combine filters: category, severity, sector, country, tag, ttp, name, organization, min_confidence, since. Returns items[] across any category.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/artifacttelesint-api.onrender.comCTI artifact export from a TeleSint record. Required: id (record UUID), format (sigma|stix|report). Returns Sigma rule, STIX 2.1 bundle, or structured analyst report built from real enriched intel.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/ransomwaretelesint-api.onrender.comRansomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/darkwebtelesint-api.onrender.comDark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.com/breachtelesint-api.onrender.comBreach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence.Livechecked Evidence 1/4x402x402 Bazaar1 payer
- telesint-api.onrender.comtelesint-api-onrender-comLivechecked Evidence 1/4x402Agentic.Market