14 Services from telesint-api.onrender.com

Returns AI-enriched malware family intelligence sourced from public Telegram CTI channels, with IOCs, MITRE ATT&CK TTPs, confidence scores, and TLP classifications

Retrieves AI-enriched dark web threat intelligence from Telegram CTI channels, covering access brokers, credential shops, combo lists, carding activity, underground forums, and marketplaces with MITRE ATT&CK tagging.

Exports a structured artifact (Sigma rule, STIX 2.1 bundle, or analyst report) for a specific threat intelligence record by UUID

Looks up an Autonomous System Number (ASN) against Telegram-sourced cyber threat intelligence, returning threat actors, C2 associations, abuse categories, phishing kits, bulletproof hosting indicators, and blocking recommendations.

Retrieves AI-enriched vulnerability and exploitation intelligence from Telegram CTI channels, including CVE details, PoC releases, CVSS severity, MITRE ATT&CK mappings, and in-the-wild exploitation signals

Retrieves indicators of compromise (IOCs) sourced from Telegram cyber threat intelligence channels, with filtering by type, severity, confidence, TLP, tags, and time window.

Searches across all Telegram-sourced CTI categories (IOCs, actors, breaches, vulnerabilities, malware, etc.) using keywords, tags, MITRE ATT&CK techniques, and filters to return AI-enriched threat intelligence records

Retrieves a single enriched cyber threat intelligence record by UUID from TeleSint's Telegram-sourced CTI feed, including AI-generated summary, MITRE ATT&CK tags, TLP classification, and original defanged raw text.

Returns breach disclosure intelligence sourced from Telegram CTI channels, filterable by sector, country, organization, severity, and confidence.

Returns ransomware group activity intelligence sourced from Telegram, including victim posts, leak site announcements, and extortion demands, with filtering by group, severity, sector, country, and confidence.

Returns active C2 (command-and-control) infrastructure intelligence — IPs, domains, MITRE TTPs, and confidence scores — sourced from Telegram threat intelligence channels, filterable by C2 framework, severity, and confidence.

Returns structured threat actor profiles sourced from Telegram CTI channels, filterable by name, nation-state, motivation, TTP, and severity.

Returns a unified threat intelligence feed across all categories (IOCs, C2, actors, breaches, intent signals) sourced from Telegram CTI channels, newest first, suitable for SIEM ingestion.

Retrieves pre-attack intent signals from Telegram channels, including access sales, zero-day listings, ransomware targeting, and exploit discussions, before attacks materialize.