{"id":1509322,"recorded_at":"2026-10-31T18:53:17.843144Z","observed_at":"2026-10-31T18:53:17.843049Z","subject_kind":"source_record","subject":"x402_bazaar:https://telesint-api.onrender.com/ransomware","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://telesint-api.onrender.com/ransomware"]],"name":"telesint-api.onrender.com/ransomware","owner_address":"0x7f74ce6d34ee0180f0217a16ce05f3b91272570f","raw":{"accepts":[{"amount":"40000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact"}],"description":"Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"country":"us","limit":20,"min_confidence":60,"offset":0,"sector":"finance","severity":"high","since":"2026-05-01T00:00:00Z","tag":"lockbit"},"type":"http"},"output":{"example":{"endpoint":"ransomware","items":[{"actor":{"aliases":["LockBit 3.0","LockBit Black"],"motivation":"financial","name":"LockBit","nation_state":null},"category":"ransomware","channel":"https://t.me/darkwebinformer","confidence":88,"id":"r1a2n3s4-o5m6-7890-abcd-ransom789012","iocs":[{"context":"Ransomware leak site","type":"url","value":"https[://]lockbit3[.]onion/victims/usbank-data"}],"severity":"critical","summary":"LockBit 3.0 claims breach of US regional bank — 2.4M customer records including SSNs posted to leak site","tags":["lockbit","ransomware","finance","data-leak","double-extortion"],"target":{"countries":["US"],"organizations":["Regional Bank Corp"],"sectors":["finance"]},"tlp":"WHITE","ts":"2026-05-27T08:30:00Z","ttps":[{"id":"T1486","name":"Data Encrypted for Impact","tactic":"Impact"},{"id":"T1041","name":"Exfiltration Over C2 Channel","tactic":"Exfiltration"}]}],"limit":20,"offset":0,"source":"TeleSint","total":27},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"country":{"description":"Targeted country keyword, e.g. us | uk | de | fr","type":"string"},"limit":{"description":"Page size, default 20, max 100","type":"number"},"min_confidence":{"description":"Minimum AI confidence score 0-100","type":"number"},"offset":{"description":"Pagination offset, default 0","type":"number"},"organization":{"description":"Targeted organization name partial match","type":"string"},"sector":{"description":"Targeted sector: finance | healthcare | government | energy | retail","type":"string"},"severity":{"description":"Minimum severity: critical | high | medium | low | info","type":"string"},"since":{"description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z","type":"string"},"tag":{"description":"Ransomware group tag, e.g. lockbit, blackcat, cl0p, ransomhub, play, akira","type":"string"}},"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-31T18:01:28.832Z","quality":{"l30DaysTotalCalls":1,"l30DaysUniquePayers":1,"lastCalledAt":"2026-10-31T11:32:19.896Z"},"resource":"https://telesint-api.onrender.com/ransomware","type":"http","x402Version":2},"source":"x402_bazaar","summary":"Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset."},"body_sha256":"40c8c661de85737670378d4124696d75ed150ba7057d2cce02db944cdbbf6148","prev_id":null,"leaf":"0x5fe703efc027041e5c2b8fd0f59eccf9fda3c86de60e0e2f498f557341bb9da3","leaf_text":"{\"body\":\"40c8c661de85737670378d4124696d75ed150ba7057d2cce02db944cdbbf6148\",\"id\":1509322,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793472797843049,\"prev\":null,\"subject\":\"x402_bazaar:https://telesint-api.onrender.com/ransomware\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-10-31","leaves":246033,"root":"0x24463725d1c0d9894bd6123691d532547aaa79f0762c0e45aa6a68acf1fd71ab","chained":"0x7d4824ff313dee7252a46f9d5c37b452851deb6c9f24a40c2f74ee0e53c82980","anchor_chain":"eip155:5042002","anchor_tx":"0xedb7b832f4ebf6781b5ecd2ed241c435b862f4d3761541fa31adc1831b8c44a0","anchor_block":70093156},"proof":["0x5fe6e0ae6298eca114e5c12d5ed36ec382f1b8a58298606949671142b0240be6","0xd58a32f420b84ba85c23741d9d5ebc78713fe43b12f1ef7c2372df1faffa6208","0x6cbcd10f73d53649d015ced30e31175c80934eeb36c4f6317767998a059f6b16","0x7253625d6219a3dde5e3f2ebfcd8664b18237c8c53686e90e3e7ae404428495d","0x285f801b6ec0767bfbb37e490b5af603a2561f9209be05bd22ffc496bac27907","0xb5a6a13b20d2b61b16bacbda0ce7e1eb7030ae80215e7874a84cbad5150c19c6","0x38c1db82c3924c1117e9fbabed4dab9e6be3e679015455e93646c8ffcf839d53","0x00b808ed12423a2b850b15b098a4323b1589020b5294dde94396e35fc85fe490","0x21394466d594260adda2dc2bf73cb5c1879933df7303eb846cb13d53cc60d8c5","0xf9a4dda2c11159aa9a812bff372d0b37096e7d57f1b1d868f5df504ac17d4275","0x35dd700307c7b96fcdc54dce42117e1dc30c97fbfe046cdd000d4db21d017fa2","0xb050fb959229ce2d2752a2e58057828b1a49fa3aa1ed7ec678a5298072e25c59","0x238075122bf391de34d3a894036bb855e1137942648f00143f9a686a726fcddd","0xe765fc7bdfb534be348bf6984775b8261507431e58900f7a1ab269c53c5b1e8b","0xb9a00c724331b305deaa876d5d2baf53b847ff3c7ce37abb0ae1653b2534aad5","0xad4540f06e3fdfe46524d8592f8d854d4849e16217bc047eaf024f0abebe34b0","0xa00a931d72706fa2402bfc9b441a12eb7c6a61ff42a542916106e3637177f101","0x59f83f7228f07febe2780660e422e171b0359b8aa031ee3be07e991118130c15"]}