{"api":"v1","generated_at":"2026-09-15T23:44:45.735Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/telesint-api-onrender-com-ioc-f35711","pinned_page":"https://tollindex.com/e/telesint-api-onrender-com-ioc-f35711/at/2026-09-15T21-20Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-15T21:20:12.737Z","snapshot_stamp":"2026-09-15T21-20Z","endpoint":{"slug":"telesint-api-onrender-com-ioc-f35711","canonical_url":"https://telesint-api.onrender.com/ioc","resource":"https://telesint-api.onrender.com/ioc","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].","service_name":null,"declared_category":null,"declared_tags":[],"route_template":null,"registry_updated":"2026-09-14T19:54:36.619Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"ioc","category":"communications","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-15T21:20:12.737Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.01 USDC","amount_units":0.01,"decimals_known":true,"pay_to":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact"}],"counters":{"observed_at":"2026-09-15T21:20:12.737Z","calls_30d":9,"unique_payers_30d":7,"last_called_at":"2026-09-14T19:54:36.240Z"},"validation":{"latest":{"observed_at":"2026-09-15T07:01:11.855Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-15"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-15T07:01:11.855Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T06:27:51.859Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T06:17:33.691Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T09:27:56.277Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T14:45:55.586Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","page":"https://tollindex.com/seller/0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","endpoints":4,"hosts":1},"reports":0,"registry_record":{"cdp":[{"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","amount":"10000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-09-14T19:54:36.24Z","l30DaysTotalCalls":9,"l30DaysUniquePayers":7},"resource":"https://telesint-api.onrender.com/ioc","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET","queryParams":{"tag":"ransomware","tlp":"WHITE","type":"ip","limit":20,"since":"2026-05-01T00:00:00Z","offset":0,"channel":"vxunderground","severity":"high","min_confidence":70}},"output":{"type":"json","example":{"items":[{"id":"f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d","ts":"2026-05-27T14:32:00Z","tlp":"WHITE","iocs":[{"type":"url","value":"https://github[.]com/Nightmare-Eclipse/MiniPlasma","context":"Exploit repository"},{"type":"ip","value":"185.220[.]101.47","context":"C2 callback address"},{"type":"sha256","value":"e3b0c44298fc1c149afb4c8996fb924...","context":"Dropper hash"}],"tags":["zero-day","windows","government","exploit"],"ttps":[{"id":"T1204.002","name":"User Execution: Malicious File","tactic":"Execution"},{"id":"T1071.001","name":"Application Layer Protocol: Web Protocols","tactic":"Command and Control"}],"channel":"https://t[.]me/vxunderground","summary":"Windows zero-day exploit released by Nightmare Eclipse threat group targeting government networks","category":"ioc","severity":"high","confidence":80}],"limit":20,"total":42,"offset":0,"source":"TeleSint","endpoint":"ioc"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"tag":{"type":"string","description":"Tag keyword filter, e.g. ransomware, cobalt-strike, apt"},"tlp":{"type":"string","description":"TLP classification: WHITE | GREEN | AMBER | RED"},"type":{"type":"string","description":"IOC type: ip | domain | url | md5 | sha1 | sha256 | cve"},"limit":{"type":"number","description":"Page size, default 20, max 100"},"since":{"type":"string","description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"},"offset":{"type":"number","description":"Pagination offset, default 0"},"channel":{"type":"string","description":"Partial match on source Telegram channel name"},"severity":{"type":"string","description":"Minimum severity: critical | high | medium | low | info"},"min_confidence":{"type":"number","description":"Minimum AI confidence score 0-100"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}}},"description":"IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].","lastUpdated":"2026-09-14T19:54:36.619Z","x402Version":2}]}}