{"id":"b98bd0c2-af8b-4e73-b952-c6a6cd9eb4c9","url":"https://telesint-api.onrender.com/c2?framework=cobalt_strike&limit=20&min_confidence=70&offset=0&severity=high&since=2026-05-01T00%3A00%3A00Z&tag=c2","method":"GET","fingerprint":"3251983d400c36c327965a6c8aadcb5a628d4441ec641bfb1a17476e7e555c19","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.020000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"tag":{"type":"string","description":"Tag keyword filter, e.g. cobalt-strike, sliver, c2"},"limit":{"type":"number","description":"Page size, default 20, max 100"},"since":{"type":"string","description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"},"offset":{"type":"number","description":"Pagination offset, default 0"},"severity":{"type":"string","description":"Minimum severity: critical | high | medium | low | info"},"framework":{"type":"string","description":"C2 framework: cobalt_strike | sliver | havoc | brute_ratel | metasploit"},"min_confidence":{"type":"number","description":"Minimum AI confidence score 0-100"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 22:33:18.060302+00","last_seen_at":"2026-08-23 22:33:17.871+00","last_success_at":"2026-09-14 08:41:04.697+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 08:46:04.697+00","search_tsv":"","catalog_number":"8015","x402_version":2,"resource_url":"https://telesint-api.onrender.com/c2?framework=cobalt_strike&limit=20&min_confidence=70&offset=0&severity=high&since=2026-05-01T00%3A00%3A00Z&tag=c2","resource_description":"C2 infrastructure from Telegram. Filters: framework(cobalt_strike|sliver|havoc|brute_ratel), severity, min_confidence, since, tag, limit, offset. Returns items[] with C2 IPs/domains, MITRE TTPs, confidence.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"tag":"c2","limit":20,"since":"2026-05-01T00:00:00Z","offset":0,"severity":"high","framework":"cobalt_strike","min_confidence":70}},"output":{"type":"json","example":{"items":[{"id":"c2a1b2c3-d4e5-f6a7-b8c9-d0e1f2a3b4c5","ts":"2026-05-27T09:15:00Z","tlp":"WHITE","iocs":[{"type":"ip","value":"91.92[.]109.83","context":"Cobalt Strike team server"},{"type":"domain","value":"windowsupdate[.]xyz","context":"Malleable C2 domain"},{"type":"url","value":"https://91.92[.]109.83/updates","context":"Beacon callback URL"}],"tags":["cobalt-strike","malleable-c2","windows-masquerade"],"ttps":[{"id":"T1071.001","name":"Application Layer Protocol: Web Protocols","tactic":"Command and Control"},{"id":"T1573.001","name":"Encrypted Channel: Symmetric Cryptography","tactic":"Command and Control"}],"channel":"https://t[.]me/malwrhunterteam","summary":"Cobalt Strike beacon detected with malleable C2 profile mimicking Microsoft update traffic","category":"c2","severity":"critical","confidence":90}],"limit":20,"total":8,"offset":0,"source":"TeleSint","endpoint":"c2"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"tag":{"type":"string","description":"Tag keyword filter, e.g. cobalt-strike, sliver, c2"},"limit":{"type":"number","description":"Page size, default 20, max 100"},"since":{"type":"string","description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"},"offset":{"type":"number","description":"Pagination offset, default 0"},"severity":{"type":"string","description":"Minimum severity: critical | high | medium | low | info"},"framework":{"type":"string","description":"C2 framework: cobalt_strike | sliver | havoc | brute_ratel | metasploit"},"min_confidence":{"type":"number","description":"Minimum AI confidence score 0-100"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","amount":"20000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact","network":"eip155:8453","amountAtomic":"20000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 08:41:04.697+00","bazaar_validation_error":null,"window":"24h","probes_n":24,"handshake_uptime":0.9583333,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":398,"latency_p90":821,"price_drift_pct":0,"score":0.8127,"computed_at":"2026-09-14 08:41:19.891+00","source_metadata":[{"raw":{"url":"https://telesint-api.onrender.com/c2?framework=cobalt_strike&limit=20&min_confidence=70&offset=0&severity=high&since=2026-05-01T00%3A00%3A00Z&tag=c2","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"3251983d400c36c327965a6c8aadcb5a628d4441ec641bfb1a17476e7e555c19","advertisedPriceUsd":0.02},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://telesint-api.onrender.com/c2?framework=cobalt_strike&limit=20&min_confidence=70&offset=0&severity=high&since=2026-05-01T00%3A00%3A00Z&tag=c2","resource_description":"C2 infrastructure from Telegram. Filters: framework(cobalt_strike|sliver|havoc|brute_ratel), severity, min_confidence, since, tag, limit, offset. Returns items[] with C2 IPs/domains, MITRE TTPs, confidence.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"tag":"c2","limit":20,"since":"2026-05-01T00:00:00Z","offset":0,"severity":"high","framework":"cobalt_strike","min_confidence":70}},"output":{"type":"json","example":{"items":[{"id":"c2a1b2c3-d4e5-f6a7-b8c9-d0e1f2a3b4c5","ts":"2026-05-27T09:15:00Z","tlp":"WHITE","iocs":[{"type":"ip","value":"91.92[.]109.83","context":"Cobalt Strike team server"},{"type":"domain","value":"windowsupdate[.]xyz","context":"Malleable C2 domain"},{"type":"url","value":"https://91.92[.]109.83/updates","context":"Beacon callback URL"}],"tags":["cobalt-strike","malleable-c2","windows-masquerade"],"ttps":[{"id":"T1071.001","name":"Application Layer Protocol: Web Protocols","tactic":"Command and Control"},{"id":"T1573.001","name":"Encrypted Channel: Symmetric Cryptography","tactic":"Command and Control"}],"channel":"https://t[.]me/malwrhunterteam","summary":"Cobalt Strike beacon detected with malleable C2 profile mimicking Microsoft update traffic","category":"c2","severity":"critical","confidence":90}],"limit":20,"total":8,"offset":0,"source":"TeleSint","endpoint":"c2"}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","properties":{"tag":{"type":"string","description":"Tag keyword filter, e.g. cobalt-strike, sliver, c2"},"limit":{"type":"number","description":"Page size, default 20, max 100"},"since":{"type":"string","description":"ISO 8601 timestamp filter, e.g. 2026-05-01T00:00:00Z"},"offset":{"type":"number","description":"Pagination offset, default 0"},"severity":{"type":"string","description":"Minimum severity: critical | high | medium | low | info"},"framework":{"type":"string","description":"C2 framework: cobalt_strike | sliver | havoc | brute_ratel | metasploit"},"min_confidence":{"type":"number","description":"Minimum AI confidence score 0-100"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","amount":"20000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x7F74cE6d34ee0180f0217A16Ce05f3B91272570F","scheme":"exact","network":"eip155:8453","amountAtomic":"20000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 08:41:04.697+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.8127,"uptime":0.9583333,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":398,"latency_p90":821,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}