OpenRouter
Named by 24 kept items in this workspace.
14 items name it under tools, 8 under classification.technologies and 2 under affected products.
The items that name it 24
Service VOLTA POSTs the serialized evidence bundle to, under a system prompt, to get an LLM target assessment
Service through which the actor accessed various LLMs during testing
OPENROUTER_BASE_URL setting redirected to attacker
AI service; sk-or- (v1-) prefixed keys harvested by the payload.
Service providing access to hundreds of AI models through a single connection; the AI provider behind zkAPI's issued keys
Access to models GLM 5.2, DeepSeek v4 Pro and Opus-4.6 used in the campaign
AI model access service used by the operator; account balance capture on 25 Aug 2026 showed $7,005.71 spent over four weeks
Local LLM proxy option for routing model SDK requests through an auditable local monitoring point
LLM used for semantic validation of IOCs against 8 contradiction classes to determine if intelligence is COHERENT, SUSPICIOUS, or CONTRADICTED
part of the runtime stack (model provider access)
AI provider used for intelligent payload generation
Hosted API provider option for T3MP3ST's LLM backbone
Router supported by Shannon for reaching models via a custom base URL
provides access to 100+ models from multiple providers through a single API; used in the demonstration to supply the LLM for Strix
Gateway/model-provider option for routing LLM traffic (e.g. GLM-5.2)
model aggregator and routing layer; cited as source for data showing agent token usage has exceeded human token usage since February, growing ~14x between February and August versus 2.8x for humans
In every workspace you can read 73
Security
AI
All technologies in this workspace.