passabsent from every registrycounted above 28% of Identity
0.002 USDC
per call, as the listing declares it on eip155:
Compare with anotherEvery figure as JSONCite this page
the price, as of 2026-09-25 11:48 UTC · method
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- — / — / 100%
- Calls, trailing 30 days
- 2
- Unique payers, trailing 30 days
- 1
- Last called
- 2026-08-26 14:49 UTC
- First observed by TOLLderived
- 2026-09-10
- Pricederived
- 0.002 USDC
- Networks
- 1
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 66 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.
api.polyform.org serves threat ip, a GET endpoint that TOLL places in identity, listed in neither registry at the last pull.
A call to threat ip costs 0.002 USDC on Base, as declared.
The listing describes the request as the query parameter ip.
threat ip returns json; the example shows ip, score, sources, malicious and observedByPolyform.
The daily sweep got a valid payment challenge from threat ip on 2026-09-23, as at every sweep since 2026-09-11.
No other listing shares its host.
threat ip drew 2 calls from one payer in the trailing 30 days.
The last call to threat ip came 67 days before the snapshot, 2026-08-26.
threat ip sits nearest in price to tools verify semaphore (x402.freeq.one) and cambio (brasil-dados-api.onrender.com) among listings in identity.
threat ip is among the cheapest in identity; 8% of comparable listings ask less.
The wallet paid by threat ip is the payee of 23 endpoints across 2 hosts.
The seller's tags on threat ip are data, api, v1 and threat.
threat ip was missing from the Coinbase registry at the pull of 2026-09-25, confirmed at the pull of 2026-09-25; that is registry presence, not liveness.
The price of threat ip is declared by 196 other listings in identity too.
Where the sentences above compare this endpoint with others, the comparison is against the index as it stands now, live; the figures above are final.
the payment options, as of 2026-09-25 11:48 UTC · method
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.002 USDC | exact | 0xE94682…276dE6 |
the checks, as of 2026-09-23 07:07 UTC · methodendpoint answered HTTP 402
No named check failed.
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-09-23 07:07 UTC | pass | 0 | daily-2026-09-23 |
| 2026-09-22 07:19 UTC | pass | 0 | daily-2026-09-22 |
| 2026-09-21 07:42 UTC | pass | 0 | daily-2026-09-21 |
| 2026-09-19 05:43 UTC | pass | 0 | daily-2026-09-19 |
| 2026-09-18 14:15 UTC | pass | 0 | daily-2026-09-18 |
| 2026-09-17 05:35 UTC | pass | 0 | daily-2026-09-17 |
| 2026-09-16 05:35 UTC | pass | 0 | daily-2026-09-16 |
| 2026-09-15 05:52 UTC | pass | 0 | daily-2026-09-15 |
| 2026-09-14 05:24 UTC | pass | 0 | daily-2026-09-14 |
| 2026-09-13 05:19 UTC | pass | 0 | daily-2026-09-13 |
| 2026-09-12 07:36 UTC | pass | 0 | daily-2026-09-12 |
| 2026-09-11 11:24 UTC | pass | 0 | daily-2026-09-11 |
Presence in a registry, not liveness of the service (method). Newest first.
- absence from Coinbase confirmed, rule v1
- absent from Coinbase at this pull
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-08-26 14:49 UTC · method
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"ip": "IPv4 address to check"
}
},
"output": {
"type": "json",
"example": {
"ip": "45.134.26.5",
"score": 90,
"sources": [
"blocklist.de",
"polyform-observed"
],
"malicious": true,
"observedByPolyform": true
}
}
}Cite this page
This endpoint is delisted: the page is frozen at its last observation and its live URL is the stable one. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "threat ip on api.polyform.org". https://tollindex.com/e/api-polyform-org-v1-threat-ip-91ffc4. Accessed [access date].
BibTeX
@misc{toll-e-api-polyform-org-v1-threat-ip-91ffc4-2026-11-01,
author = {TOLL},
title = {threat ip on api.polyform.org},
howpublished = {\url{https://tollindex.com/e/api-polyform-org-v1-threat-ip-91ffc4}},
year = {2026},
month = {11},
note = {Frozen at its last observation, 2026-11-01 13:19 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.