TOLL

What software pays for, recorded every six hours.

Snapshot
2026-10-13 14:08 UTC
Sweep
daily-2026-10-14 · finished 2026-10-14 10:32 UTC
Listed
32,435

threat scanners derived

api.polyform.orgIdentityderived

GET https://api.polyform.org/v1/threat/scanners

passlisted in Coinbasecounted above 34% of Identity

0.01 USDC

per call, as the listing declares it on eip155:8453

Compare with anotherEvery figure as JSONCite this page

the price, as of 2026-10-13 14:08 UTC · method · pinnable

Validation state
pass
as of 2026-10-14 09:42 UTC · method · pinnable · sweep daily-2026-10-14
Uptime, 7 / 30 / 90 days
100% / 100% / 100%
as of 2026-10-14 09:42 UTC · method · pinnable · 7 of 7 in 7d, 15 of 15 in 30d, 19 of 19 in 90d
Calls, trailing 30 days
2
as of 2026-10-13 14:08 UTC · method · pinnable
Unique payers, trailing 30 days
2
as of 2026-10-13 14:08 UTC · method · pinnable
Last called
2026-10-08 05:34 UTC
as of 2026-10-13 14:08 UTC · method · pinnable
First observed by TOLLderived
2026-09-10
as of 2026-09-10 19:08 UTC · method · pinnable · observation began 10 September 2026; listings that predate it show that date
Pricederived
0.01 USDC
as of 2026-10-13 14:08 UTC · method · pinnable · on eip155:8453
Networks
1
as of 2026-10-13 14:08 UTC · method · pinnable

Counters

84 observations, 2 of them a change, fewer than the 3 a trace needs

How big is this endpoint among the ones like it?

1 call100,000this endpoint
Calls counted in the trailing thirty days across the 2,150 endpoints in Identity that carry counters, binned on a logarithmic scale because the range runs over five orders of magnitude. The marked bin is this endpoint, at 2: 930 in the category are counted higher and 1,219 lower.

No trace is drawn of this endpoint’s own volume. Its counters have changed 2 times across 84 observations, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.

In words

threat scanners is a GET endpoint at api.polyform.org, listed in the Coinbase registry and filed by TOLL under identity.

threat scanners is priced at 0.01 USDC on Base.

Its declared inputs are the query parameter limit.

threat scanners returns json; the example shows count and scanners.

The daily sweep got a valid payment challenge from threat scanners on 2026-10-14, as at every sweep since 2026-09-11.

No other listing shares its host.

threat scanners drew 2 calls from 2 unique payers in the trailing 30 days, every call from a different payer.

threat scanners was last called 5 days before the snapshot.

Closest in price to threat scanners within identity: br pix parse at api.losbeto.xyz and verify job at livecheck.fly.dev.

threat scanners is priced above 34% of comparable listings in identity.

Its payee wallet receives for 23 listed endpoints across 2 hosts.

The seller's tags on threat scanners are data, api, v1 and threat.

It disappeared from the registry on 2026-09-25 and returned on 2026-10-07.

The price of threat scanners is declared by 707 other listings in identity too.

Payment options as declared

the payment options, as of 2026-10-13 14:08 UTC · method · pinnable

Every payment option declared on this listing
registrynetworkassetamountschemepay to
Coinbaseeip155:8453USDC0.01 USDCexact0xE94682…276dE6

Preflight checks at the last sweep

the checks, as of 2026-10-14 09:42 UTC · method · pinnableendpoint answered HTTP 402

No named check failed.

Validation history, 90 days

Every sweep that observed this endpoint, newest first.

Validation observations over the last 90 days
observed, UTCstatefailed checkssweep
2026-10-14 09:42 UTCpass0daily-2026-10-14
2026-10-13 15:00 UTCpass0daily-2026-10-13
2026-10-12 12:00 UTCpass0daily-2026-10-12
2026-10-11 10:39 UTCpass0daily-2026-10-11
2026-10-10 18:50 UTCpass0daily-2026-10-10
2026-10-09 12:21 UTCpass0daily-2026-10-09
2026-10-08 14:09 UTCpass0daily-2026-10-08
2026-10-07 13:30 UTCpass0daily-2026-10-07
2026-09-23 08:09 UTCpass0daily-2026-09-23
2026-09-22 08:23 UTCpass0daily-2026-09-22
2026-09-21 08:45 UTCpass0daily-2026-09-21
2026-09-19 06:43 UTCpass0daily-2026-09-19
2026-09-17 06:34 UTCpass0daily-2026-09-17
2026-09-16 06:31 UTCpass0daily-2026-09-16
2026-09-15 06:48 UTCpass0daily-2026-09-15
2026-09-14 06:16 UTCpass0daily-2026-09-14
2026-09-13 06:07 UTCpass0daily-2026-09-13
2026-09-12 08:24 UTCpass0daily-2026-09-12
2026-09-11 14:05 UTCpass0daily-2026-09-11

Registry presence

Presence in a registry, not liveness of the service (method). Newest first.

  1. back in Coinbase
  2. absence from Coinbase confirmed, rule v1
  3. absent from Coinbase at this pull
  4. listed in Coinbase

Declared input and output, as listed

From the registry record, not validated by TOLL.the declared schema, as of 2026-10-08 05:34 UTC · method · live

The input and output block
{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "limit": "1-500 (default 200)"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "count": 200,
      "scanners": [
        {
          "ip": "45.134.26.5",
          "probe": "/.env",
          "firstSeen": "2026-08-25T04:00:00Z"
        }
      ]
    }
  }
}
Cite this page

The pinned URL below renders this page from the snapshot of 2026-10-13 14:08 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).

Plain text

TOLL, "threat scanners on api.polyform.org", snapshot of 2026-10-13 14:08 UTC. https://tollindex.com/e/api-polyform-org-v1-threat-scanners-e1ade6/at/2026-10-13T14-08Z. Accessed [access date].

BibTeX

@misc{toll-e-api-polyform-org-v1-threat-scanners-e1ade6-2026-10-13T14-08Z,
  author = {TOLL},
  title = {threat scanners on api.polyform.org},
  howpublished = {\url{https://tollindex.com/e/api-polyform-org-v1-threat-scanners-e1ade6/at/2026-10-13T14-08Z}},
  year = {2026},
  month = {10},
  note = {Pinned view of the snapshot of 2026-10-13 14:08 UTC. Accessed [access date].}
}

Reports and replies about this endpoint

None yet. Anything submitted through the form below is published here with its outcome.

Report an error about threat scanners, or reply as the named seller

No account, no token. Published unedited with its outcome, upheld or not. Do not include personal data.

Kind

Published as typed. Optional.

10 to 4,000 characters.

Verify with the payee wallet (optional, EVM)

Sign this message with the wallet named on the page and paste the signature; it is checked, stored, never published. TOLL reply about endpoint e1ade60a35daeaf9f197a477cca0fc78b4235fd1484743d2c5be4ebb8a6047ea from wallet 0xE9468282B22c09243Ce1a455fE2d1DF0d7276dE6

The 0x address named as payee on this page, 42 characters.

The hex signature of the message above, starting 0x.