← The evidence ledger
Evidence row 2201901
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://file-formats.x402tookit.com/extension-vs-content
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 8c0a462c814187b3439d943480006e85310530b34d7ab119daae8cb2e4663d8c
- Leaf
- 0x8329533de12a25fd8fbfd65b9289f7a9f8beca1c8e06852148353b3d795d452d
What was observed
{
"endpoints": [
[
"x402",
"https://file-formats.x402tookit.com/extension-vs-content"
]
],
"name": "File Format Inspector",
"owner_address": "0xb531320805c5bed1d46aeadcf4f008fdf172dbda",
"raw": {
"accepts": [
{
"amount": "20000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
"transactionVersions": [
0
]
},
"maxTimeoutSeconds": 300,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:137",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:42161",
"payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
"scheme": "exact"
}
],
"description": "Compare a file name's extension with its real type from the first bytes; flags executables disguised as documents or images.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"filename": "invoice.pdf",
"hex": "4d5a90000300000004000000ffff0000"
},
"type": "http"
},
"output": {
"example": {
"asOf": "2026-10-11T23:43:20.979Z",
"degraded": false,
"detectedCategory": "executable",
"detectedMime": "application/vnd.microsoft.portable-executable",
"detectedType": "Windows PE executable (MZ)",
"disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
"doubleExtension": false,
"extension": "pdf",
"filename": "invoice.pdf",
"notChecked": [
"anything beyond the header bytes",
"double extensions are judged by the last one only",
"…2 more"
],
"reasons": [
"The content is Windows PE executable (MZ) but the name says .pdf: an executable disguised under a harmless-looking extension."
],
"source": "computed locally (published file signatures)",
"summary": "Mismatch: .pdf versus Windows PE executable (MZ).",
"verdict": "EXECUTABLE_DISGUISED"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"filename": {
"description": "The file name as supplied, for example invoice.pdf or photo.jpg",
"type": "string"
},
"hex": {
"description": "First bytes of the file as hex, up to 512 bytes",
"type": "string"
}
},
"required": [
"filename",
"hex"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"asOf": {
"type": [
"null",
"string"
]
},
"degraded": {
"type": [
"boolean",
"null"
]
},
"detectedCategory": {
"type": [
"null",
"string"
]
},
"detectedMime": {
"type": [
"null",
"string"
]
},
"detectedType": {
"type": [
"null",
"string"
]
},
"disclaimer": {
"type": [
"null",
"string"
]
},
"doubleExtension": {
"type": [
"boolean",
"null"
]
},
"extension": {
"type": [
"null",
"string"
]
},
"filename": {
"type": [
"null",
"string"
]
},
"notChecked": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"reasons": {
"items": {
"type": "string"
},
"type": [
"array",
"null"
]
},
"source": {
"type": [
"null",
"string"
]
},
"summary": {
"type": [
"null",
"string"
]
},
"verdict": {
"type": [
"null",
"string"
]
}
},
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-11-01T22:54:02.858Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-11-01T22:54:02.563Z"
},
"resource": "https://file-formats.x402tookit.com/extension-vs-content",
"serviceName": "File Format Inspector",
"tags": [
"file-type",
"extension",
"spoofing",
"security"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Compare a file name's extension with its real type from the first bytes; flags executables disguised as documents or images."
}What the leaf hashes
{"body":"8c0a462c814187b3439d943480006e85310530b34d7ab119daae8cb2e4663d8c","id":2201901,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646810119253,"prev":null,"subject":"x402_bazaar:https://file-formats.x402tookit.com/extension-vs-content","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (444186 rows).
- 0x83294b4141d0499844fccac59921c6b3463e5670b7bfb532f61cad4c1f53eecc
- 0xdf48e27d09894c85c4e166a7e4eca08eac0ad99896897d3e006c7533763ade9a
- 0x9832baa8172a8b7f82035829155d504e7ff972bd743bf7450184137d3962a33f
- 0xf03f1d6d5d83c38ff51c33c80fbb09cb91b50c803d5bec99af42dcb181453b46
- 0xc1f8944e46fc220fe93cb9632cb386b2701406c4569b6cd54dea0d9a2339ddce
- 0x892b056dc7ed82e740f66207b196feaa9987aee1d858da2c3481a893ad3220ca
- 0xd4c9c82e605d6aa31e40e53aab04d46beef4e00001f7de0bb45314fd6e8b8868
- 0x9b3996cf4188a1965fdf644f187ebc4033996512375cfa854101070080654fdc
- 0x6585370b019150c880c40270ab9dee0ceed03628a12203020ef140d171849aff
- 0x9e2ca5752fef40d4be1227be83c850baaf380ccbd2be2b126e86d74ae001c6c7
- 0x6012ca3e294d721e95293a0f0d4d05cfe67ff640b8184bb4d81660ad69ab45f4
- 0x9236ce44089e10e350435c01e569b60f72046bb5112e06356a17b8f3c0a940ee
- 0xf82dc9b9d8e081f36e55e80fab45654768c11eb158257f63f8ca7ff17d181d54
- 0x5d40473873ebe898bcca4e49df524bf4345695f06abe3579f4bdb7b306b863f8
- 0x46991481c678139203ebc3c532867ce1643c09ddc33966c4fb48bb7f033ab22f
- 0x3b89dd05634a82075204d3c671f613081ddfd9df739c64c0a8f39081bdfa32c7
- 0x1805ef693fbdb2c23fcb61616f830408ca89bec1dc5b68ee47a770ffc0b9760a
- 0x4d205063c881c48edbbb37762a8d3bbb7444d4c42daa882f663a231893d25c35
- 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e
- Day root
- 0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1
- Chained
- 0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2
- Published
- On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af