TeleSint

payment-readyonlineimported

payment-ready until 2026-10-26

imported from the x402 Bazaar, not submitted by the operator · own this service? claim it · or ask to be removed

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

telesint-api.onrender.com ↗

Call it x402 v2

x402 v2

Base URL: https://telesint-api.onrender.com
Payment: x402 v2, header channel

$ curl -i 'https://telesint-api.onrender.com/artifact'

An unpaid request returns HTTP 402 with the payment terms. Sign a payment authorization, then retry with the PAYMENT-SIGNATURE header.

Endpoints 10 paid routes on telesint-api.onrender.com

GET/artifactBase$0.05since 07-20

GET/breachBase$0.03since 07-20

GET/c2Base$0.02since 07-20

GET/darkwebBase$0.03since 07-20

GET/feedBase$0.05since 07-20

GET/intentBase$0.05since 07-20

GET/iocBase$0.01since 07-20

GET/malwareBase$0.02since 07-20

2 more in Example 402 response

Prices as captured in the 402 response: median $0.03 across the 10 endpoints.

Example 402 response

Endpoints and prices

Current paid endpoints; minimum quoted prices in USD where available; first capture dates in UTC
Method	Path	Description	Price	Network	Asset	402 channel	Captured
GET	/artifact	CTI artifact export from a TeleSint record. Required: id (record UUID), format (sigma\|stix\|report). Returns Sigma rule, STIX 2.1 bundle, or structured analyst report built from real enriched intel.	$0.05	Base	USDC	header	since 07-20
GET	/breach	Breach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence.	$0.03	Base	USDC	header	since 07-20
GET	/c2	C2 infrastructure from Telegram. Filters: framework(cobalt_strike\|sliver\|havoc\|brute_ratel), severity, min_confidence, since, tag, limit, offset. Returns items[] with C2 IPs/domains, MITRE TTPs, confidence.	$0.02	Base	USDC	header	since 07-20
GET	/darkweb	Dark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset.	$0.03	Base	USDC	header	since 07-20
GET	/feed	Full intel feed across all categories. Filters: category(ioc\|c2\|actor\|breach\|intent\|vulnerability), severity, min_confidence, since, tag, tlp, limit, offset. Returns all record types newest first. Use for SIEM ingestion.	$0.05	Base	USDC	header	since 07-20
GET	/intent	Pre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale\|0day\|ransomware\|exploit), limit. Signals appear before attacks.	$0.05	Base	USDC	header	since 07-20
GET	/ioc	IOC feed from Telegram CTI channels. Filters: ip (exact lookup), type(ip\|domain\|url\|md5\|sha1\|sha256\|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].	$0.01	Base	USDC	header	since 07-20
GET	/malware	Malware family intelligence from Telegram: new sample drops, behavior analysis, loader/stealer/RAT/backdoor writeups. Filters: severity, min_confidence, since, tag(stealer\|loader\|rat\|backdoor), limit, offset.	$0.02	Base	USDC	header	since 07-20
GET	/source	Raw source verification for a TeleSint record. Pass id (UUID from any items[].id). Returns original defanged message text and source language alongside the AI summary for provenance checks.	$0.02	Base	USDC	header	since 07-20
GET	/vulnerability	CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve\|exploit\|poc\|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.	$0.03	Base	USDC	header	since 07-20

Payment evidence

402 payload captured at 2026-07-20 19:16:02 UTC. Check evidence JSON · Measurement methodology.

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "30000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/vulnerability",
    "mimeType": "application/json",
    "description": "CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "cve",
            "type": "cve",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "severity": "high",
            "min_confidence": 60
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "v1u2l3n4-5678-90ab-cdef-vuln56789012",
                "ts": "2026-05-27T10:00:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "cve",
                    "value": "CVE-2026-1234",
                    "context": "Critical RCE in PAN-OS"
                  },
                  {
                    "type": "url",
                    "value": "https://github[.]com/exploit-db/CVE-2026-1234",
                    "context": "PoC repository"
                  }
                ],
                "tags": [
                  "cve",
                  "rce",
                  "palo-alto",
                  "pan-os",
                  "poc",
                  "exploit-in-the-wild"
                ],
                "ttps": [
                  {
                    "id": "T1190",
                    "name": "Exploit Public-Facing Application",
                    "tactic": "Initial Access"
                  },
                  {
                    "id": "T1203",
                    "name": "Exploitation for Client Execution",
                    "tactic": "Execution"
                  }
                ],
                "channel": "https://t[.]me/vxunderground",
                "summary": "PoC released for CVE-2026-1234 (CVSS 9.8): unauthenticated RCE in Palo Alto PAN-OS. Exploitation observed in the wild targeting government networks.",
                "category": "vulnerability",
                "severity": "critical",
                "confidence": 91
              }
            ],
            "limit": 20,
            "total": 34,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "vulnerability"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Tag keyword filter, e.g. cve, exploit, poc, patch, zero-day"
                  },
                  "ttp": {
                    "type": "string",
                    "description": "MITRE ATT&CK technique ID prefix, e.g. T1190, T1203"
                  },
                  "type": {
                    "type": "string",
                    "description": "IOC type filter: cve"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Other captured 402 responses (9)

Captured payload 2 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/artifact",
    "mimeType": "application/json",
    "description": "CTI artifact export from a TeleSint record. Required: id (record UUID), format (sigma|stix|report). Returns Sigma rule, STIX 2.1 bundle, or structured analyst report built from real enriched intel."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "format": "sigma"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "format": "stix",
            "source": "TeleSint",
            "artifact": {
              "id": "bundle--f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
              "type": "bundle",
              "objects": [
                {
                  "id": "indicator--f8a3c1d2-ip-0",
                  "name": "IP: 91.92.109.83",
                  "type": "indicator",
                  "labels": [
                    "malicious-activity"
                  ],
                  "pattern": "[network-traffic:dst_ref.type = 'ipv4-addr' AND network-traffic:dst_ref.value = '91.92.109.83']",
                  "confidence": 90,
                  "valid_from": "2026-05-27T09:15:00Z",
                  "pattern_type": "stix",
                  "spec_version": "2.1"
                },
                {
                  "id": "attack-pattern--f8a3c1d2-T1071-001",
                  "name": "Application Layer Protocol: Web Protocols",
                  "type": "attack-pattern",
                  "spec_version": "2.1",
                  "external_references": [
                    {
                      "external_id": "T1071.001",
                      "source_name": "mitre-attack"
                    }
                  ]
                },
                {
                  "id": "report--f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
                  "name": "Cobalt Strike beacon with malleable C2 profile mimicking Microsoft update traffic",
                  "type": "report",
                  "labels": [
                    "c2",
                    "cobalt-strike",
                    "malleable-c2"
                  ],
                  "confidence": 90,
                  "spec_version": "2.1"
                }
              ],
              "spec_version": "2.1"
            },
            "category": "c2",
            "endpoint": "artifact",
            "record_id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "generated_at": "2026-06-01T12:00:00Z"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "id",
                  "format"
                ],
                "properties": {
                  "id": {
                    "type": "string",
                    "description": "Intel record UUID from any TeleSint endpoint response (items[].id)"
                  },
                  "format": {
                    "type": "string",
                    "description": "Artifact format: sigma (detection rule) | stix (STIX 2.1 bundle) | report (analyst report)"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 3 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "10000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/ioc",
    "mimeType": "application/json",
    "description": "IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[]."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "ransomware",
            "tlp": "WHITE",
            "type": "ip",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "channel": "vxunderground",
            "severity": "high",
            "min_confidence": 70
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
                "ts": "2026-05-27T14:32:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "url",
                    "value": "https://github[.]com/Nightmare-Eclipse/MiniPlasma",
                    "context": "Exploit repository"
                  },
                  {
                    "type": "ip",
                    "value": "185.220[.]101.47",
                    "context": "C2 callback address"
                  },
                  {
                    "type": "sha256",
                    "value": "e3b0c44298fc1c149afb4c8996fb924...",
                    "context": "Dropper hash"
                  }
                ],
                "tags": [
                  "zero-day",
                  "windows",
                  "government",
                  "exploit"
                ],
                "ttps": [
                  {
                    "id": "T1204.002",
                    "name": "User Execution: Malicious File",
                    "tactic": "Execution"
                  },
                  {
                    "id": "T1071.001",
                    "name": "Application Layer Protocol: Web Protocols",
                    "tactic": "Command and Control"
                  }
                ],
                "channel": "https://t[.]me/vxunderground",
                "summary": "Windows zero-day exploit released by Nightmare Eclipse threat group targeting government networks",
                "category": "ioc",
                "severity": "high",
                "confidence": 80
              }
            ],
            "limit": 20,
            "total": 42,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "ioc"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Tag keyword filter, e.g. ransomware, cobalt-strike, apt"
                  },
                  "tlp": {
                    "type": "string",
                    "description": "TLP classification: WHITE | GREEN | AMBER | RED"
                  },
                  "type": {
                    "type": "string",
                    "description": "IOC type: ip | domain | url | md5 | sha1 | sha256 | cve"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "channel": {
                    "type": "string",
                    "description": "Partial match on source Telegram channel name"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 4 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "30000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/darkweb",
    "mimeType": "application/json",
    "description": "Dark web intelligence from Telegram: marketplace listings, forum chatter, access broker posts, credential shops, Tor site activity. Filters: severity, min_confidence, since, tag, sector, country, organization, limit, offset."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "access-broker",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "sector": "finance",
            "severity": "high",
            "min_confidence": 60
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "d1a2r3k4-w5e6-7890-abcd-darkweb78901",
                "ts": "2026-05-27T06:45:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "url",
                    "value": "https://exploit[.]in/threads/healthcare-access-12345",
                    "context": "Underground forum listing"
                  }
                ],
                "tags": [
                  "access-broker",
                  "healthcare",
                  "initial-access",
                  "domain-admin",
                  "exploit-in"
                ],
                "ttps": [
                  {
                    "id": "T1078",
                    "name": "Valid Accounts",
                    "tactic": "Initial Access"
                  }
                ],
                "target": {
                  "sectors": [
                    "healthcare"
                  ],
                  "countries": [
                    "US"
                  ],
                  "organizations": []
                },
                "channel": "https://t[.]me/darkwebinformer",
                "summary": "Access broker selling domain admin access to US healthcare network (5,000 employees) — asking $15,000 on exploit.in forum",
                "category": "darkweb",
                "severity": "critical",
                "confidence": 78
              }
            ],
            "limit": 20,
            "total": 14,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "darkweb"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Tag keyword: access-broker | credential-shop | combo-list | carding | forum | marketplace"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Targeted sector: finance | healthcare | government | energy | retail"
                  },
                  "country": {
                    "type": "string",
                    "description": "Targeted country keyword, e.g. us | uk | de | fr"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "organization": {
                    "type": "string",
                    "description": "Targeted organization name partial match"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 5 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "20000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/malware",
    "mimeType": "application/json",
    "description": "Malware family intelligence from Telegram: new sample drops, behavior analysis, loader/stealer/RAT/backdoor writeups. Filters: severity, min_confidence, since, tag(stealer|loader|rat|backdoor), limit, offset."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "stealer",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "severity": "high",
            "min_confidence": 60
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "m1a2l3w4-a5r6-7890-abcd-malware78901",
                "ts": "2026-05-27T11:00:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "sha256",
                    "value": "a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",
                    "context": "Lumma Stealer sample"
                  },
                  {
                    "type": "domain",
                    "value": "lumma-panel[.]xyz",
                    "context": "C2 panel domain"
                  }
                ],
                "tags": [
                  "lumma",
                  "stealer",
                  "maas",
                  "infostealer",
                  "chrome"
                ],
                "ttps": [
                  {
                    "id": "T1555.003",
                    "name": "Credentials from Web Browsers",
                    "tactic": "Credential Access"
                  },
                  {
                    "id": "T1071.001",
                    "name": "Application Layer Protocol: Web Protocols",
                    "tactic": "Command and Control"
                  }
                ],
                "channel": "https://t[.]me/vxunderground",
                "summary": "New Lumma Stealer v4.1 released with browser cookie bypass targeting Chrome 124+ — sold as MaaS on underground forums",
                "category": "malware",
                "severity": "high",
                "confidence": 85
              }
            ],
            "limit": 20,
            "total": 19,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "malware"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Malware type tag: stealer | loader | rat | backdoor | botnet | worm | dropper | rootkit"
                  },
                  "ttp": {
                    "type": "string",
                    "description": "MITRE ATT&CK technique ID prefix, e.g. T1059, T1071"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 6 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/intent",
    "mimeType": "application/json",
    "description": "Pre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "limit": 20,
            "offset": 0,
            "sector": "healthcare",
            "country": "us",
            "intent_type": "ransomware",
            "organization": "hospital"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "i1n2t3e4-n5t6-7890-abcd-intent789012",
                "ts": "2026-05-27T07:22:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "url",
                    "value": "https://exploit[.]in/threads/healthcare-access",
                    "context": "Access sale listing"
                  }
                ],
                "tags": [
                  "access-sale",
                  "healthcare",
                  "vpn",
                  "initial-access-broker"
                ],
                "ttps": [
                  {
                    "id": "T1078",
                    "name": "Valid Accounts",
                    "tactic": "Initial Access"
                  },
                  {
                    "id": "T1110",
                    "name": "Brute Force",
                    "tactic": "Credential Access"
                  }
                ],
                "target": {
                  "sectors": [
                    "healthcare"
                  ],
                  "countries": [
                    "US"
                  ],
                  "organizations": []
                },
                "channel": "https://t[.]me/ctifeeds",
                "summary": "Threat actor selling VPN access to US healthcare network: 5,000 employee credentials, domain admin included",
                "category": "intent",
                "severity": "critical",
                "confidence": 72
              }
            ],
            "limit": 20,
            "total": 3,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "intent"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Targeted sector: finance | healthcare | government | energy | retail"
                  },
                  "country": {
                    "type": "string",
                    "description": "Targeted country keyword, e.g. us | uk | de | fr"
                  },
                  "intent_type": {
                    "type": "string",
                    "description": "Signal type: access_sale | 0day | ransomware | exploit | recruitment"
                  },
                  "organization": {
                    "type": "string",
                    "description": "Targeted organization name partial match"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 7 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "30000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/breach",
    "mimeType": "application/json",
    "description": "Breach disclosures from Telegram. Filters: sector, country, organization, severity, min_confidence, since, limit. Returns items[] with target{sectors,countries,organizations}, leak iocs[], confidence."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "sector": "finance",
            "country": "us",
            "severity": "high",
            "organization": "acme",
            "min_confidence": 60
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "b1r2e3a4-c5h6-7890-abcd-123456789012",
                "ts": "2026-05-27T11:45:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "url",
                    "value": "https://lockbit3[.]onion/leak/usbank-data",
                    "context": "Ransomware leak site"
                  }
                ],
                "tags": [
                  "lockbit",
                  "ransomware",
                  "finance",
                  "data-leak",
                  "pii"
                ],
                "ttps": [
                  {
                    "id": "T1486",
                    "name": "Data Encrypted for Impact",
                    "tactic": "Impact"
                  },
                  {
                    "id": "T1041",
                    "name": "Exfiltration Over C2 Channel",
                    "tactic": "Exfiltration"
                  }
                ],
                "target": {
                  "sectors": [
                    "finance"
                  ],
                  "countries": [
                    "US"
                  ],
                  "organizations": [
                    "Regional Bank Corp"
                  ]
                },
                "channel": "https://t[.]me/cyberinsider",
                "summary": "LockBit claims breach of US regional bank: 2.4M customer records including SSNs and account numbers",
                "category": "breach",
                "severity": "critical",
                "confidence": 75
              }
            ],
            "limit": 20,
            "total": 17,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "breach"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "sector": {
                    "type": "string",
                    "description": "Targeted sector: finance | healthcare | government | energy | retail"
                  },
                  "country": {
                    "type": "string",
                    "description": "Targeted country keyword, e.g. us | uk | de | fr"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "organization": {
                    "type": "string",
                    "description": "Targeted organization name partial match"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 8 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "20000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/c2",
    "mimeType": "application/json",
    "description": "C2 infrastructure from Telegram. Filters: framework(cobalt_strike|sliver|havoc|brute_ratel), severity, min_confidence, since, tag, limit, offset. Returns items[] with C2 IPs/domains, MITRE TTPs, confidence."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "c2",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "severity": "high",
            "framework": "cobalt_strike",
            "min_confidence": 70
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "c2a1b2c3-d4e5-f6a7-b8c9-d0e1f2a3b4c5",
                "ts": "2026-05-27T09:15:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "ip",
                    "value": "91.92[.]109.83",
                    "context": "Cobalt Strike team server"
                  },
                  {
                    "type": "domain",
                    "value": "windowsupdate[.]xyz",
                    "context": "Malleable C2 domain"
                  },
                  {
                    "type": "url",
                    "value": "https://91.92[.]109.83/updates",
                    "context": "Beacon callback URL"
                  }
                ],
                "tags": [
                  "cobalt-strike",
                  "malleable-c2",
                  "windows-masquerade"
                ],
                "ttps": [
                  {
                    "id": "T1071.001",
                    "name": "Application Layer Protocol: Web Protocols",
                    "tactic": "Command and Control"
                  },
                  {
                    "id": "T1573.001",
                    "name": "Encrypted Channel: Symmetric Cryptography",
                    "tactic": "Command and Control"
                  }
                ],
                "channel": "https://t[.]me/malwrhunterteam",
                "summary": "Cobalt Strike beacon detected with malleable C2 profile mimicking Microsoft update traffic",
                "category": "c2",
                "severity": "critical",
                "confidence": 90
              }
            ],
            "limit": 20,
            "total": 8,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "c2"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Tag keyword filter, e.g. cobalt-strike, sliver, c2"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "framework": {
                    "type": "string",
                    "description": "C2 framework: cobalt_strike | sliver | havoc | brute_ratel | metasploit"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 9 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "20000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/source",
    "mimeType": "application/json",
    "description": "Raw source verification for a TeleSint record. Pass id (UUID from any items[].id). Returns original defanged message text and source language alongside the AI summary for provenance checks."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "include_raw": "true"
          }
        },
        "output": {
          "type": "json",
          "example": {
            "id": "f8a3c1d2-4b5e-4f6a-9c8d-1e2f3a4b5c6d",
            "ts": "2026-06-10T14:32:00Z",
            "source": "TeleSint",
            "channel": "hxxps://t[.]me/vxunderground",
            "summary": "New Cobalt Strike C2 beacon observed at 91.92.109.83 using malleable C2 profile mimicking Microsoft update traffic. Initial access via spear-phishing (T1566.001).",
            "category": "ioc",
            "endpoint": "source",
            "raw_text": "⚡️ Новый C2: 91[.]92[.]109[.]83 — Cobalt Strike маллируемый профиль. Вектор: spear-phishing -> T1566.001",
            "translated": true,
            "ingested_at": "2026-06-10T14:33:01Z",
            "provenance_note": "This record was translated from the original source language. The raw_text field contains the defanged original. The summary field is the AI-generated English interpretation — treat it as analyst-grade, not verbatim.",
            "source_language": "ru"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "required": [
                  "id"
                ],
                "properties": {
                  "id": {
                    "type": "string",
                    "description": "Record UUID from any TeleSint endpoint items[].id"
                  },
                  "include_raw": {
                    "type": "string",
                    "description": "Return original raw_text bytes (defanged). Default: true"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Captured payload 10 of 10

{
  "error": "Payment required",
  "accepts": [
    {
      "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
      "extra": {
        "name": "USD Coin",
        "version": "2"
      },
      "payTo": "0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F",
      "amount": "50000",
      "scheme": "exact",
      "network": "eip155:8453",
      "maxTimeoutSeconds": 300
    }
  ],
  "resource": {
    "url": "https://telesint-api.onrender.com/feed",
    "mimeType": "application/json",
    "description": "Full intel feed across all categories. Filters: category(ioc|c2|actor|breach|intent|vulnerability), severity, min_confidence, since, tag, tlp, limit, offset. Returns all record types newest first. Use for SIEM ingestion."
  },
  "extensions": {
    "bazaar": {
      "info": {
        "input": {
          "type": "http",
          "method": "GET",
          "queryParams": {
            "tag": "ransomware",
            "tlp": "WHITE",
            "limit": 20,
            "since": "2026-05-01T00:00:00Z",
            "offset": 0,
            "category": "ioc",
            "severity": "high",
            "min_confidence": 60
          }
        },
        "output": {
          "type": "json",
          "example": {
            "items": [
              {
                "id": "f1e2e3d4-5678-90ab-cdef-123456789abc",
                "ts": "2026-05-27T14:32:00Z",
                "tlp": "WHITE",
                "iocs": [
                  {
                    "type": "sha256",
                    "value": "d4e5f6a7b8c9d0e1...",
                    "context": "Ransomware dropper"
                  }
                ],
                "tags": [
                  "blackcat",
                  "alphv",
                  "ransomware"
                ],
                "ttps": [
                  {
                    "id": "T1486",
                    "name": "Data Encrypted for Impact",
                    "tactic": "Impact"
                  }
                ],
                "channel": "https://t[.]me/vxunderground",
                "summary": "New ransomware dropper IOCs from BlackCat/ALPHV campaign",
                "category": "ioc",
                "severity": "critical",
                "confidence": 88
              }
            ],
            "limit": 20,
            "total": 156,
            "offset": 0,
            "source": "TeleSint",
            "endpoint": "feed"
          }
        }
      },
      "schema": {
        "type": "object",
        "$schema": "https://json-schema.org/draft/2020-12/schema",
        "required": [
          "input"
        ],
        "properties": {
          "input": {
            "type": "object",
            "required": [
              "type",
              "method"
            ],
            "properties": {
              "type": {
                "type": "string",
                "const": "http"
              },
              "method": {
                "enum": [
                  "GET"
                ],
                "type": "string"
              },
              "queryParams": {
                "type": "object",
                "properties": {
                  "tag": {
                    "type": "string",
                    "description": "Tag keyword filter, e.g. ransomware, cobalt-strike, apt"
                  },
                  "tlp": {
                    "type": "string",
                    "description": "TLP classification: WHITE | GREEN | AMBER | RED"
                  },
                  "limit": {
                    "type": "number",
                    "description": "Page size, default 20, max 100"
                  },
                  "since": {
                    "type": "string",
                    "description": "ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"
                  },
                  "offset": {
                    "type": "number",
                    "description": "Pagination offset, default 0"
                  },
                  "category": {
                    "type": "string",
                    "description": "Intel category filter: ioc | c2 | actor | breach | intent | vulnerability"
                  },
                  "severity": {
                    "type": "string",
                    "description": "Minimum severity: critical | high | medium | low | info"
                  },
                  "min_confidence": {
                    "type": "number",
                    "description": "Minimum AI confidence score 0-100"
                  }
                }
              }
            },
            "additionalProperties": false
          },
          "output": {
            "type": "object",
            "required": [
              "type"
            ],
            "properties": {
              "type": {
                "type": "string"
              },
              "example": {
                "type": "object"
              }
            }
          }
        }
      }
    }
  },
  "x402Version": 2
}

Can I trust it score from our own monitoring

score from our own monitoring

84/100 Solid

                           │         │    ····│···
0                          55        75       93

                │     │   ·│··
0               55    75   93

#161 of 386 in Data. Bands: strong 93+, solid 75+, mixed 55+, weak below 55.

Reliability: 100% uptime 30d
Compliance: A 14/14 checks pass
Price: $0.01 to $0.05 p62 in Data
Risk: clean no risk flag
Traction: $2.54 30d 9 buyers, top buyer 66% (address, not entity)

14/14 compliance checks

402 payload captured
accepts[] array present
payTo address recoverable
payTo at accepts[0].payTo (conformant shape)
payTo is a valid on-chain address
atomic price declared
atomic price in a sane range
asset (token) address declared
network resolves to CAIP-2
payment scheme declared
served over HTTPS
declares the current x402 version (2)
EIP-712 domain parameters present on every EVM entry
x402 v2 envelope delivered in the payment-required header

402 terms unchanged since 2026-07-20. Last up 2026-10-19.

── Site signals

homepage reachable
openapi doc
pricing page
llms.txt
robots.txt
terms page

How the score works

What the score read on this service: status online, 100% uptime 30d, 407ms response p95, x402 compliance 14 of 14, $0.01 price against the category, on-chain traction measured. Each of those is measured, and each is published in full below.

The score comes from our own monitoring, never from reviews, operator claims, or a language model: reliability, x402 compliance, price against the category, a deterministic risk flag, and a small on-chain traction term, weighted by ranking generation 3. It is not placement anyone can buy: the paid verify tier is reported beside it and is not one of its inputs. Every component below stays published and read-only.

Bands on the 0 to 100 measured score: strong at 93 and above, solid from 75, mixed from 55, weak below 55. Price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, so the score places a service in its own field.

It is a score inside Data, and only there: price and speed are scored against the whole category field, every listing in it that carries no danger flag, the scored service included, which here means 386 listings, this one among them: the same 386 the position above is counted against. When the two differ, the field is the wider one, because a listing we have measured too little of to rank still sits in the field the price and the speed are normalized over. The same service in a different field would read differently. The same engine answers GET /api/v1/best, and asked for a different pool (the whole directory, or another filter) it returns a different number for this service under this same ranking generation. Neither is more correct: they answer different questions, and the methodology states which is which.

Settled via coinbase ($2.54, 59 tx). Traction is a conservative undercount; first settlement seen 2026-05-22.

All measured facts

What it does

TeleSint is a listed x402 Data API. Captured payment terms name Base. Monitoring and settlement figures below describe the observations available to this directory; an unpaid HTTP 402 check does not prove that a paid call will deliver.

Assessment computed at 2026-10-19 07:53:03 UTC. Latest service check observed at 2026-10-19 11:34:10 UTC. Service data JSON · Measurement methodology.

Page rendered at 2026-10-19 11:42:22 UTC. This response time is separate from the observation and computation times attached to each measurement.

Latest endpoint observation: 2026-10-19 11:34:10 UTC. Latest price capture: 2026-07-20 19:15:58 UTC. Prices are recorded quotes, not a promise of availability. Token assets and payment terms are listed separately. Endpoint data JSON · Price history JSON · Measurement methodology.

Assessment computed at 2026-10-19 07:53:03 UTC. Uptime uses the stated daily-rollup window; response times are in milliseconds, compliance is passed/evaluated checks, and traction is a measured settlement floor. The comparison score is out of 100 within this category. Assessment JSON · Measurement methodology.

Observed daily coverage: 2026-09-20 to 2026-10-19 UTC. Daily monitoring and settlement rollups do not expose their computation time; a bucket date is not an update timestamp. Latest settlement in the assessment: 2026-10-14 23:20:47 UTC. Uptime and response JSON · Volume JSON · Buyers JSON · Measurement methodology.

Ranked from the measured category pool, refreshed at most once a minute. The comparison has no persisted computation timestamp; the assessment time above belongs to this service only. Ranking API documentation · Ranking methodology.

x402 List home · Services · Data

uptime · latest daily rollup: 100%
uptime 7d: 100%
uptime 30d: 100%
uptime 90d: 100%
response p95: 407ms
avg response: 231ms
total checks: 2,713

Measured on the unpaid 402 handshake, not the paid call. A service can 402 correctly and still fail after payment.

price (min): $0.01
price (max): $0.05
category percentile (min): p62 in Data
category percentile (max): p58 in Data
endpoints / prices: 10 / 4
model: tiered
stability: 100%

No deterministic risk flag. Risk fires only on an exact blocklist match, or a reserved-brand name with a mismatched verified payTo. Never from low uptime, a high price, or a model guess.

domain age: -
registrar: -
hosting: free host
domain created: ---

Identity facts, not a risk score.

assessment volume 30d: $2.54
exact assessment volume 30d (USD): 2.54
assessment recorded at (UTC): 2026-10-19T07:53:03.533Z
buyers 30d: 9
settlements 30d: 59
measured since: 2026-05-22 (start of our harvest window)
last settlement: 2026-10-14
top buyer share: 66% of 30d volume (address, not entity)
top 3 buyers share: 91% of 30d volume (addresses, not entities)
concentrated volume: no
trend 7d vs 30d: 0.17x the 30d daily rate
networks: eip155:8453
volume all-time: $122.29
settlements all-time: 3,813
median settlement 30d: $0.03
max settlement 30d: $0.10

Assessment volume uses the latest 30d assessment. Over time sums daily address snapshots, rounded to cents and refreshed separately. The two sources can differ in timing, precision and shared-address attribution. Amounts use cents for comparison; known sub-cent values keep up to 12 significant digits. The exact stored assessment value is shown above.

Conservative undercount: only USDC settlements via facilitators we measure are counted. A measured floor, not an estimate.

Top buyer share lowers the on-chain traction part of the ranking score behind this page's verdict and /best, by up to half when one address holds all 30d volume. The Recommended and Highest volume sorts of the services list do not use it; they use the Concentrated volume rule instead.

member since: 2026-07-20

Recent checks

Latest 18 unpaid HTTP checks, newest first; response times in milliseconds, observation times in UTC
Checked at (UTC)	Status	HTTP	Response	Endpoints
2026-10-19 11:34:10 UTC	Online	402	142ms	10
2026-10-19 11:18:12 UTC	Online	402	133ms	10
2026-10-19 10:57:12 UTC	Online	402	228ms	10
2026-10-19 10:41:02 UTC	Online	402	172ms	10
2026-10-19 10:25:02 UTC	Online	402	241ms	10
2026-10-19 10:09:04 UTC	Online	402	276ms	10
2026-10-19 09:53:03 UTC	Online	402	256ms	10
2026-10-19 09:37:03 UTC	Online	402	308ms	10
2026-10-19 09:21:02 UTC	Online	402	211ms	10
2026-10-19 09:05:02 UTC	Online	402	205ms	10
2026-10-19 08:49:03 UTC	Online	402	342ms	10
2026-10-19 08:33:03 UTC	Online	402	261ms	10
2026-10-19 08:17:02 UTC	Online	402	255ms	10
2026-10-19 08:01:05 UTC	Online	402	335ms	10
2026-10-19 07:45:05 UTC	Online	402	490ms	10
2026-10-19 07:29:02 UTC	Online	402	230ms	10
2026-10-19 07:13:04 UTC	Online	402	352ms	10
2026-10-19 06:57:03 UTC	Online	402	293ms	10

Changes0 in 30d

No changes recorded in the last 30 days.

all changes

Over time

On-chain volume daily snapshots, USD 30d: $2.54, peak $1.69 on 10-11

                                                                      $1.69                      
                                                                      ██                         
                                                                      ██                         
                                                                      ██                         
                                                                      ██                         
       ▂▂ ▁▁ ·  ▂▂ ▁▁ ▁▁ ·  ·  ▁▁ ▂▂ ▁▁ ·  ▁▁ ▁▁ ·  ▁▁ ▁▁ ▄▄ ▂▂ ·  ·  ██ ·  ·  ▂▂ ·  ·  ·  ·  ·  
    $0

volume no data in the payload

Distinct buyers per dayDistinct buyers per day

        1  1  ·  3  1  1  ·  ·  1  2  1  ·  1  1  ·  1  1  2  1  ·  ·  2  ·  ·  2  ·  ·  ·  ·  ·

Uptime 100% on all 29 completed days

       ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██

       09-20                                     10-04                                   10-19*

Volume 30d: $2.54
Uptime: 100% on all 29 completed days

Daily on-chain settlement volume in US dollars, 2026-09-20 to 2026-10-19; highest day $1.69 on 10-11; 14 days have no data in the payload; distinct buyers per day

Day    Volume             USD  Buyers
09-20                   $0.10       1
09-21                   $0.04       1
09-22  · no data
09-23                   $0.09       3
09-24                   $0.02       1
09-25                   $0.01       1
09-26  · no data, 2 days to 09-27
09-28                   $0.05       1
09-29                   $0.07       2
09-30                   $0.03       1
10-01  · no data
10-02                   $0.01       1
10-03                   $0.03       1
10-04  · no data
10-05                   $0.03       1
10-06                   $0.02       1
10-07                   $0.15       2
10-08                   $0.10       1
10-09  · no data, 2 days to 10-10
10-11                   $1.69       2
10-12  · no data, 2 days to 10-13
10-14                   $0.10       2
10-15  · no data, 5 days to 10-19*

More charts

Response time daily average, ms min 158ms, avg 233ms, max 301ms

       ▅▅ ▆▆ ▇▇ ▆▆ ▅▅ ▅▅ ▅▅ ▇▇ ██ ▇▇ ██ ▇▇ ▇▇ ▇▇ ▆▆ ▇▇ ▇▇ ██ ▆▆ ▅▅ ▆▆ ▅▅ ▅▅ ▄▄ ▅▅ ▆▆ ▅▅ ▅▅ ▇▇ ▇▇

09-20 to 10-19* UTC

      ▅▆▇▆▅▅▅▇█▇█▇▇▇▆▇▇█▆▅▆▅▅▄▅▆▅▅▇▇

      09-20         10-04     10-19*

Scores over time

x402 compliance low 14/14, high 14/14

       ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄ ▄▄

09-20 to 10-19* UTC

      ▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

      09-20         10-04     10-19*

Price percentile in Data own low to high; exact values below

       ▁▁ ▃▃ ▃▃ ▃▃ ▁▁ ▁▁ ▁▁ ▁▁ ▁▁ ▃▃ ▃▃ ▃▃ ▃▃ ▃▃ ▅▅ ▅▅ ▅▅ ▅▅ ▇▇ ▇▇ ▅▅ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▅▅ ▅▅ ▇▇ ▇▇

09-20 to 10-19* UTC

      ▁▃▃▃▁▁▁▁▁▃▃▃▃▃▅▅▅▅▇▇▅▇▇▇▇▇▅▅▇▇

      09-20         10-04     10-19*

Site signals present (of 6) own low to high; exact values below

       ▇▇ ▇▇ ▁▁ ▁▁ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇ ▇▇

09-20 to 10-19* UTC

      ▇▇▁▁▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇▇

      09-20         10-04     10-19*

       09-20                                     10-04                                   10-19*

      09-20         10-04     10-19*

Scores: one day per column, 09-20 to 10-19*, on the columns of Response time. Uptime held 100% every day in this window, including any partial day. Daily readings remain in the Uptime strip and Values. The checklist grew from 11 to 14 checks on 2026-07-28, before this window. Pillar lines use their own low and high. Exact dated readings are available in each readout and in Values.

Each series spans only the dates it has data for. Every series is also served as JSON at /api/v1/services/telesint/price, /scores, /volume and /buyers.

Values

* today so far, partial (UTC).

The uptime summary counts completed UTC days only. The strip, readouts and table retain today's partial reading.

Daily snapshot total, 30d: $2.54, peak $1.69 on 10-11. The visible 30d total in Traction comes from the latest assessment. These sources can differ in their window, refresh time, cent rounding and shared-address attribution.

Daily address snapshots: 2026-09-20 to 2026-10-19 UTC; * today so far, partial (UTC). Daily snapshots store cents. A recorded $0.00 with settlements cannot distinguish exact zero from volume rounded away. Lost precision is unavailable here.

Settlement volume uses the stored USD valuation of tracked payments; it is distinct from token quantities. USD-pegged assets are valued at 1 USD per token in these rollups. The measured settlement floor does not cover all payments to this service.

Assessment history last recorded at 2026-10-19 07:53:03 UTC. Each UTC day uses its last recorded run; missing readings stay unmeasured. Assessment history JSON · Measurement methodology.

Daily values, 2026-09-20 to 2026-10-19: address settlement volume in USD, distinct buyer and settlement counts, uptime percent, average response milliseconds, compliance passed/total, price percentile 0-100, site signals out of 6; UTC dates
Day	Volume	Buyers	Settlements	Uptime	Response	Compliance	Price percentile	Site signals
2026-09-20	$0.10	1	3	100%	177.02ms	14/14	p59	4/6
2026-09-21	$0.04	1	1	100%	216.59ms	14/14	p60	4/6
2026-09-22	no data	no data	no data	100%	277.71ms	14/14	p60	0/6
2026-09-23	$0.09	3	3	100%	234.46ms	14/14	p60	0/6
2026-09-24	$0.02	1	1	100%	193.00ms	14/14	p59	4/6
2026-09-25	$0.01	1	1	100%	195.33ms	14/14	p59	4/6
2026-09-26	no data	no data	no data	100%	196.93ms	14/14	p59	4/6
2026-09-27	no data	no data	no data	100%	262.18ms	14/14	p59	4/6
2026-09-28	$0.05	1	1	100%	301.32ms	14/14	p59	4/6
2026-09-29	$0.07	2	3	100%	281.08ms	14/14	p60	4/6
2026-09-30	$0.03	1	1	100%	285.74ms	14/14	p60	4/6
2026-10-01	no data	no data	no data	100%	261.12ms	14/14	p60	4/6
2026-10-02	$0.01	1	1	100%	263.41ms	14/14	p60	4/6
2026-10-03	$0.03	1	1	100%	258.73ms	14/14	p60	4/6
2026-10-04	no data	no data	no data	100%	235.43ms	14/14	p61	4/6
2026-10-05	$0.03	1	1	100%	273.21ms	14/14	p61	4/6
2026-10-06	$0.02	1	1	100%	266.63ms	14/14	p61	4/6
2026-10-07	$0.15	2	5	100%	289.69ms	14/14	p61	4/6
2026-10-08	$0.10	1	4	100%	231.70ms	14/14	p62	4/6
2026-10-09	no data	no data	no data	100%	199.22ms	14/14	p62	4/6
2026-10-10	no data	no data	no data	100%	209.17ms	14/14	p61	4/6
2026-10-11	$1.69	2	28	100%	199.11ms	14/14	p62	4/6
2026-10-12	no data	no data	no data	100%	206.52ms	14/14	p62	4/6
2026-10-13	no data	no data	no data	100%	157.57ms	14/14	p62	4/6
2026-10-14	$0.10	2	4	100%	193.84ms	14/14	p62	4/6
2026-10-15	no data	no data	no data	100%	208.62ms	14/14	p62	4/6
2026-10-16	no data	no data	no data	100%	190.78ms	14/14	p61	4/6
2026-10-17	no data	no data	no data	100%	201.03ms	14/14	p61	4/6
2026-10-18	no data	no data	no data	100%	250.19ms	14/14	p62	4/6
2026-10-19*	no data	no data	no data	100%	260.61ms	14/14	p62	4/6

Alternatives in Data

claw402 strong 97/100 100% up 30d $1.1k 30d

SniperX•x402 strong 97/100 99.9% up 30d $582.66 30d

glim.sh strong 95/100 100% up 30d $30.28 30d

cn402 strong 93/100 100% up 30d $39.26 30d

twit.sh strong 93/100 100% up 30d $47.43 30d

5 of 385 other ranked services in Data, ordered by the same measured score.

see the whole category

Own this service?

Keep this listing accurate. Ownership is proven with a domain check and every change is reviewed by hand.

Update this listing

Earn the verified tier: x402list pays a real call to this endpoint and, if it delivers, the service is delivery-verified. The fee covers the cost of the probe, not the badge; there is no refund if the call does not deliver. Agent and API only, no in-browser signing. See /api.

Verify this service ($0.25)

Embed a badge

HTML

<a href="https://x402-list.com/services/telesint?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/telesint.svg" alt="TeleSint listed on x402-list" height="28">
</a>

Markdown

[![TeleSint on x402-list](https://x402-list.com/badge/telesint.svg)](https://x402-list.com/services/telesint?utm_source=badge&utm_medium=referral&utm_campaign=embed)

HTML, live uptime variant

<a href="https://x402-list.com/services/telesint?utm_source=badge&utm_medium=referral&utm_campaign=embed">
  <img src="https://x402-list.com/badge/telesint.svg?data=uptime" alt="TeleSint uptime on x402-list" height="28">
</a>

Delisting

To request delisting, email info@x402-list.com or update your listing at /services/telesint/update.