{"id":2633854,"recorded_at":"2026-11-03T19:34:25.378340Z","observed_at":"2026-11-03T19:34:25.378281Z","subject_kind":"source_record","subject":"x402_bazaar:https://telesint-api.onrender.com/intent","kind":"listing","method":"sync.x402_bazaar/1","body":{"endpoints":[["x402","https://telesint-api.onrender.com/intent"]],"name":"telesint-api.onrender.com/intent","owner_address":"0x7f74ce6d34ee0180f0217a16ce05f3b91272570f","raw":{"accepts":[{"amount":"50000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"maxTimeoutSeconds":300,"network":"eip155:8453","payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact"}],"description":"Pre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks.","extensions":{"bazaar":{"info":{"input":{"method":"GET","queryParams":{"country":"us","intent_type":"ransomware","limit":20,"offset":0,"organization":"hospital","sector":"healthcare"},"type":"http"},"output":{"example":{"endpoint":"intent","items":[{"category":"intent","channel":"https://t.me/ctifeeds","confidence":72,"id":"i1n2t3e4-n5t6-7890-abcd-intent789012","iocs":[{"context":"Access sale listing","type":"url","value":"https[://]exploit[.]in/threads/healthcare-access"}],"severity":"critical","summary":"Threat actor selling VPN access to US healthcare network: 5,000 employee credentials, domain admin included","tags":["access-sale","healthcare","vpn","initial-access-broker"],"target":{"countries":["US"],"organizations":[],"sectors":["healthcare"]},"tlp":"WHITE","ts":"2026-05-27T07:22:00Z","ttps":[{"id":"T1078","name":"Valid Accounts","tactic":"Initial Access"},{"id":"T1110","name":"Brute Force","tactic":"Credential Access"}]}],"limit":20,"offset":0,"source":"TeleSint","total":3},"type":"json"}},"schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"claim_type":{"description":"announcement (future attack) | claim (completed) | sale | recruitment | propaganda | report","type":"string"},"country":{"description":"Targeted country keyword, e.g. us | uk | de | fr","type":"string"},"intent_type":{"description":"Signal type: access_sale | 0day | ransomware | exploit | recruitment","type":"string"},"limit":{"description":"Page size, default 20, max 100","type":"number"},"offset":{"description":"Pagination offset, default 0","type":"number"},"organization":{"description":"Targeted organization name partial match","type":"string"},"sector":{"description":"Targeted sector: finance | healthcare | government | energy | retail","type":"string"}},"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"}}},"lastUpdated":"2026-11-03T16:27:54.675Z","quality":{"l30DaysTotalCalls":9,"l30DaysUniquePayers":2,"lastCalledAt":"2026-11-03T16:27:54.466Z"},"resource":"https://telesint-api.onrender.com/intent","type":"http","x402Version":2},"source":"x402_bazaar","summary":"Pre-attack intent signals from Telegram: access sales, 0days, ransomware targeting. Filters: sector, country, organization, intent_type(access_sale|0day|ransomware|exploit), limit. Signals appear before attacks."},"body_sha256":"9a2eab0566ae798c0bfdc21787cec8c63f496a559cdb1984254527cae9f3c163","prev_id":1791389,"leaf":"0x8ffc02254181fcd242ee69ec44ca3d461a6dcc9852eb757d6107f334637a2a9d","leaf_text":"{\"body\":\"9a2eab0566ae798c0bfdc21787cec8c63f496a559cdb1984254527cae9f3c163\",\"id\":2633854,\"kind\":\"listing\",\"method\":\"sync.x402_bazaar/1\",\"observed_us\":1793734465378281,\"prev\":1791389,\"subject\":\"x402_bazaar:https://telesint-api.onrender.com/intent\",\"subject_kind\":\"source_record\"}","day":{"day":"2026-11-03","leaves":425475,"root":"0xb646ffa569e24bf8336b0a15a9d98d0a2f1239f58e10c2b18a9d22e43343566a","chained":"0x35e926359fd19031c6b5e08fb3b44f2524386a57c8fdd353336c185603f53d43","anchor_chain":"eip155:5042002","anchor_tx":"0xa5f9dadba13cde129126b950e64b815e6833cb8ff53b75026c9dbe769c3768c7","anchor_block":70601990},"proof":["0x8ffc366128f705cebe8e5cb6f50fd38ef22f8a9c381536b18ad0b8be1bd66acd","0x1f5ee38975f8651347a34fac9683a0b497c98e63c42e354efbd0717fdf033c81","0x6fb8465c4d1b862239b840714185e965be0f38f628c599bcc2adef511703aae7","0x380193b717161ceef850ef195f379ba73e9c7612440a1004f1f93fa980d00a9f","0x638ffcc12e4578d5b21aa6c2c65046b5bb3a910b0ec89aa4197199d496493d90","0x7dbe4afba3b38764081e283844470ec95e3a883b5974d1ce6a3594b0db24305c","0x2e5a330706c21f226d3a19d1e6d804cb1f1267444ab8299e5c8cf736eeea2646","0xc25f613168843ae3bedd106a9a23b00bfa70e69b9743a69486aac05012e6c4ca","0x37996e4ef2351458536390e40b144c1c06c2d79ebbed97f3f34afc93d92413bc","0xf81f6e149f9a79cf74ea7a424ded3a66bbf9b553ef75d801ec72c55280d75282","0x6bef90c9cccf51c804848194e4a1d7fe81c204273358297f8ccaeea0bc6b6c01","0xd2f2ef99a4ba661f93293ad0148da1386a1afa9e25c573715321776309c2013c","0xeadabd164a90c836de96a615298d69f4b3f10399389106b0c27b6382229154af","0x7f1a60c8109f6f6bf295c743742bf48233a7f558ad73afd2115ffc0eb4e5400f","0xb5ab3a67e92dbd6d8eb3ea95dd8fba5b750735344b87d689cb50ea92ccaeea56","0x77587d79b39ec04901214373cabf0c9651bc2cf065dc080615a260064314c4a5","0x271a5f715272513f57457682f93389885577f2664b5ae5dcea924ad10a098eb5","0x717b5d7cbc24826c5b1f7b7433bf30b76e9ba1370476af4e1b494a5211897cc3","0xe35032d4b064b015fe60638756eeb0bc24e7c7943586468d33349341ee0ed3d6"]}