address poisoning derived

402.com.trIdentity derived

GET https://402.com.tr/api/x402/address-poisoning

passlisted in Coinbase#32 by calls of 162 on this host

0.03 USDC

per call, as the listing declares it on eip155:8453

Compare with another Every figure as JSON Cite this page

the price, as of 2026-10-13 14:08 UTC · method · pinnable

Validation state: pass; as of 2026-10-19 05:55 UTC · method · pinnable · sweep daily-2026-10-19
Uptime, 7 / 30 / 90 days: 100% / 100% / 100%; as of 2026-10-19 05:55 UTC · method · pinnable · 7 of 7 in 7d, 12 of 12 in 30d, 12 of 12 in 90d
Calls, trailing 30 days: 4; as of 2026-10-13 14:08 UTC · method · pinnable
Unique payers, trailing 30 days: 2; as of 2026-10-13 14:08 UTC · method · pinnable
Last called: 2026-10-13 08:01 UTC; as of 2026-10-13 14:08 UTC · method · pinnable
First observed by TOLLderived: 2026-10-08; as of 2026-10-08 23:19 UTC · method · pinnable · observation began 10 September 2026; listings that predate it show that date
Pricederived: 0.03 USDC; as of 2026-10-13 14:08 UTC · method · pinnable · on eip155:8453
Networks: 1; as of 2026-10-13 14:08 UTC · method · pinnable

Counters

13 observations, 4 of them a change

How has the volume on this endpoint moved?

Calls counted in the trailing 30 days on this endpoint, at every snapshot since 2026-10-09. Each point is a trailing-30-day sum as the registry published it, not a daily rate. The axis is truncated to the range of the data with a break at its foot.

In words

402.com.tr lists 162 endpoints; address poisoning is tied 32nd by calls with 28 others.

The listing describes the request as the query parameters to and wallet.

address poisoning returns json; the example shows to, wallet, verdict, checkedAt, daysAnalysed, knownCounterparties and 1 other.

The registry's counters give address poisoning 4 calls and 2 unique payers over 30 days.

address poisoning was last called on the day of the snapshot.

It is priced at 0.03 USDC on Base.

address poisoning answers GET requests at 402.com.tr; it is listed in the Coinbase registry and TOLL files it under identity.

address poisoning answered the sweep of 2026-10-19 with a valid 402, as at every sweep since 2026-10-08.

Closest in price to address poisoning within identity: stonk gems invoke at api.solenrich.com and care pack at omniguchi.0000402.xyz.

address poisoning is priced above 78% of comparable listings in identity.

Within identity, 72% of endpoints with counters have fewer calls.

The wallet paid by address poisoning is the payee of 232 endpoints on one host.

Seller tags: address-poisoning, scam, send-safety and wallet-security.

The price of address poisoning is declared by 56 other listings in identity too.

Payment options as declared

the payment options, as of 2026-10-13 14:08 UTC · method · pinnable

Every payment option declared on this listing
registry	network	asset	amount	scheme	pay to
Coinbase	eip155:8453	USDC	0.03 USDC	exact	0x973a31…6f12d6

Preflight checks at the last sweep

the checks, as of 2026-10-19 05:55 UTC · method · pinnableendpoint answered HTTP 402

No named check failed.

Validation history, 90 days

Every sweep that observed this endpoint, newest first.

Validation observations over the last 90 days
observed, UTC	state	sweep
2026-10-19 05:55 UTC	pass	daily-2026-10-19
2026-10-18 08:08 UTC	pass	daily-2026-10-18
2026-10-17 18:09 UTC	pass	daily-2026-10-17
2026-10-16 04:23 UTC	pass	daily-2026-10-16
2026-10-15 05:57 UTC	pass	daily-2026-10-15
2026-10-14 04:21 UTC	pass	daily-2026-10-14
2026-10-13 08:47 UTC	pass	daily-2026-10-13
2026-10-12 06:11 UTC	pass	daily-2026-10-12
2026-10-11 04:34 UTC	pass	daily-2026-10-11
2026-10-10 09:50 UTC	pass	daily-2026-10-10
2026-10-09 04:34 UTC	pass	daily-2026-10-09
2026-10-08 23:22 UTC	pass	new-after-daily-2026-10-08

Registry presence

Presence in a registry, not liveness of the service (method). Newest first.

2026-10-08 23:19 UTClisted in Coinbase

Declared input and output, as listed

From the registry record, not validated by TOLL.the declared schema, as of 2026-10-13 08:01 UTC · method · live

The input and output block

{
  "input": {
    "type": "http",
    "method": "GET",
    "pathParams": {},
    "queryParams": {
      "to": "0xcF77a3Ba9A5CA399B7c97c74d54e5b1Beb874E43",
      "wallet": "0xFe21a68f21d556A3C4274a44c2Fb5410c50cDa1C"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "to": "0xcF77a3Ba9A5CA399B7c97c74d54e5b1Beb874E43",
      "wallet": "0xFe21a68f21d556A3C4274a44c2Fb5410c50cDa1C",
      "verdict": "no_resemblance",
      "checkedAt": "2026-10-11T17:11:56.415Z",
      "daysAnalysed": 90,
      "knownCounterparties": 4,
      "lookalikeMatchesCount": 0
    }
  }
}

What the listing says

The address-poisoning attack: a scammer sends dust from an address whose first/last characters match one you really use, hoping you copy-paste the poisoned one. An auto-paying agent is the perfect victim. This compares the recipient against the head/tail of addresses the wallet actually transacts with and flags a look-alike that is NOT a real counterparty. Pass wallet= (yours) and to= (the recipient). A heuristic — verify the full address regardless. Not financial advice.

the record, 2026-10-13 08:01 UTC · method · pinnable

As declared

GET
eip155:8453
USDC
exact

Every tag is a field on the listing, not a keyword TOLL assigned.

Who is paid

0x973a31…6f12d6

Takes payment for 232 endpoints on 1 host.

Among Identity

counted above72%

of 2,150 that carry counters

cheaper than78%

of 2,153 with a comparable price

2,199 endpoints are in this category. 56 declare exactly this price.

the comparison, 2026-10-13 14:08 UTC · method · live

Nearest on price

stonk gems invokeapi.solenrich.com0.03 USDCpass
care packomniguchi.0000402.xyz0.03 USDCpass
ledgerworxai.tech0.035 USDCpass
rugcheckapi.losbeto.xyz0.025 USDCpass
aml risk scoreapi.strale.io0.0216 USDCpass

Same category, nearest declared price, one per payee wallet (method). the list, 2026-10-13 14:08 UTC · method · live

Elsewhere in the record

Cite this page

The pinned URL below renders this page from the snapshot of 2026-10-13 14:08 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).

Plain text

TOLL, "address poisoning on 402.com.tr", snapshot of 2026-10-13 14:08 UTC. https://tollindex.com/e/402-com-tr-api-x402-address-poisoning-16fb73/at/2026-10-13T14-08Z. Accessed [access date].

BibTeX

@misc{toll-e-402-com-tr-api-x402-address-poisoning-16fb73-2026-10-13T14-08Z,
  author = {TOLL},
  title = {address poisoning on 402.com.tr},
  howpublished = {\url{https://tollindex.com/e/402-com-tr-api-x402-address-poisoning-16fb73/at/2026-10-13T14-08Z}},
  year = {2026},
  month = {10},
  note = {Pinned view of the snapshot of 2026-10-13 14:08 UTC. Accessed [access date].}
}

Reports and replies about this endpoint

None yet. Anything submitted through the form below is published here with its outcome.

Report an error about address poisoning, or reply as the named seller