{"id":1792223,"recorded_at":"2026-11-01T19:06:54.415035Z","observed_at":"2026-11-01T19:06:54.414990Z","subject_kind":"source_record","subject":"x402_bazaar:https://telesint-api.onrender.com/ransomware","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://telesint-api.onrender.com/ransomware"]],"name":"telesint-api.onrender.com/ransomware","owner_address":"0x7f74ce6d34ee0180f0217a16ce05f3b91272570f","raw":{"accepts":[{"amount":"40000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact"}],"description":"Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"country":"us","limit":20,"min_confidence":60,"offset":0,"sector":"finance","severity":"high","since":"2026-05-01T00:00:00Z","tag":"lockbit"},"type":"http"},"output":{"example":{"endpoint":"ransomware","items":[{"actor":{"aliases":["LockBit 3.0","LockBit Black"],"motivation":"financial","name":"LockBit","nation_state":null},"category":"ransomware","channel":"https://t.me/darkwebinformer","confidence":88,"id":"r1a2n3s4-o5m6-7890-abcd-ransom789012","iocs":[{"context":"Ransomware leak site","type":"url","value":"https[://]lockbit3[.]onion/victims/usbank-data"}],"severity":"critical","summary":"LockBit 3.0 claims breach of US regional bank — 2.4M customer records including SSNs posted to leak site","tags":["lockbit","ransomware","finance","data-leak","double-extortion"],"target":{"countries":["US"],"organizations":["Regional Bank Corp"],"sectors":["finance"]},"tlp":"WHITE","ts":"2026-05-27T08:30:00Z","ttps":[{"id":"T1486","name":"Data Encrypted for Impact","tactic":"Impact"},{"id":"T1041","name":"Exfiltration Over C2 Channel","tactic":"Exfiltration"}]}],"limit":20,"offset":0,"source":"TeleSint","total":27},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"country":{"description":"Targeted country keyword, e.g. us | uk | de | fr","type":"string"},"limit":{"description":"Page size, default 20, max 100","type":"number"},"min_confidence":{"description":"Minimum AI confidence score 0-100","type":"number"},"offset":{"description":"Pagination offset, default 0","type":"number"},"organization":{"description":"Targeted organization name partial match","type":"string"},"sector":{"description":"Targeted sector: finance | healthcare | government | energy | retail","type":"string"},"severity":{"description":"Minimum severity: critical | high | medium | low | info","type":"string"},"since":{"description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z","type":"string"},"tag":{"description":"Ransomware group tag, e.g. lockbit, blackcat, cl0p, ransomhub, play, akira","type":"string"}},"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-10-31T18:01:28.832Z","quality":{"l30DaysTotalCalls":5,"l30DaysUniquePayers":1,"lastCalledAt":"2026-10-31T18:01:28.656Z"},"resource":"https://telesint-api.onrender.com/ransomware","type":"http","x402Version":2},"source":"x402_bazaar","summary":"Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset."},"body_sha256":"db9d33402caaf00c8a4838c52b4a991d2b88bc4cc2bfed2e751c46f38b59e807","prev_id":1509322,"leaf":"0x1c88368998e3fbfcfa147a6847c5566624bcf0bd2adf388672a52dc31c4ed66d","leaf_text":"{\"body\":\"db9d33402caaf00c8a4838c52b4a991d2b88bc4cc2bfed2e751c46f38b59e807\",\"id\":1792223,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793560014414990,\"prev\":1509322,\"subject\":\"x402_bazaar:https://telesint-api.onrender.com/ransomware\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-11-01","leaves":302406,"root":"0x7fa2cba1cf3d6b35630896f5fe1a650adb307ea2c376e80a5f2d9276b7cb5ab3","chained":"0x577ff89ba012beeff3197bcff7fa86752074bdf54205a24359cc437be2a952a4","anchor_chain":"eip155:5042002","anchor_tx":"0x435bc1b9331471d72e1998f2e420983b5189d4da65ffbd6f27ef40daf5e1ea90","anchor_block":70262758},"proof":["0x1c884ec4eed24a74759af7bf5635d249b2200d53547ee97d71999f57ad7e9117","0xf750c1371d8ad2fda826619c251fa5ece49670becfca5efe9885a6489a646dfc","0x9a5c21b44c456fd45de9d699fa0d3d0fdaa9ae868d8064e169b64349fca52e6e","0x892a702b7867a847fd5c3c23f4a8a3ac7dd2c573774dfaab0b8835a3977d45fd","0xe6d242a1d7183b35fe7c617fdf0da862c660b77ea41dd9e8a3796cf7db700d82","0xf057140288eb371cbe1cdf71af26b8c1763c998ad82186197761afd75185aa9b","0x33db59af3ec2ba8927541012b8fa133c176b70137efe9aa12862027beeb2611c","0x688867602c879863a811c4060006917699dc13be7aaebe9c587b8dd43b851e89","0xdeee9d0f82c6c2e40471c05f7949cbfe089b59e68bd42da8b5d479d2edadbe0f","0x2af736e1121dec68f83de6ba67ef4fa599c5f06c1f6835016dd202c873e14178","0x09c6c82afdd2ab3bfecc2788a0630b34e3ff8b466a887f426188637d9b259735","0x374e8677cb5f7470293815b5235e57fac081a54b8c9fd798307f056532e9581c","0xae521539711ad5a91adbe0dd002003819ce70e53b6a96152851758fc41b75098","0x175afd1319b72670e83bf74eef6f87ab2173061f5bacdfe981a6b0789c963022","0xb9d6fdc8e6fb3f4feffa2c18849d74fc34d8708b574a778ae149241a90aaf20b","0xa856ad79e6f29a2b5516257f0d4817172cca11251fe2e7e8f3911b105fe2b622","0x02b3554752e71a19b12d7a76dbff436e85387226ceec89fdebdcdaf0122c2932","0x1973893697931b7512ae5dc1a3c92ef92f633ae3574dce9029a35b5e94d2d364","0x3315fd2757fdd435852cc277377234a3f3909a6d2a089d0e36f6d59aacfda910"]}