passlisted in Coinbasefirst observed 2026-10-10
0.01 USDC
per call, as the listing declares it on eip155:
- Validation state
- pass
- Uptime, 7 / 30 / 90 days
- 100% / 100% / 100%
- Calls, trailing 30 days
- —
- Unique payers, trailing 30 days
- —
- Last called
- 2026-10-10 06:22 UTC
- First observed by TOLLderived
- 2026-10-10
- Pricederived
- 0.01 USDC
- Networks
- 1
How big is this endpoint among the ones like it?
No trace is drawn of this endpoint’s own volume, because there is nothing to draw: the registry that lists it publishes no usage counters, so TOLL has never observed a call count for it and does not estimate one. Everything else on this page is measured as usual, and the listing is complete as the registry publishes it.
TOLL first observed it on 2026-10-10.
lookup is a GET endpoint at api.ransomware-tracker.com, listed in the Coinbase registry and filed by TOLL under search.
lookup is priced at 0.01 USDC on Base.
The request to lookup is the query parameter q.
The daily sweep got a valid payment challenge from lookup on 2026-10-10.
lookup returns json; the example shows found, label, query, claims and claim_count.
api.ransomware-tracker.com lists no other endpoint.
On this snapshot the call counter for lookup is absent while the last-call timestamp reads 2026-10-10; absent is not zero.
lookup sits nearest in price to exa search (stableenrich.dev) and research people (win.oneshotagent.com) among listings in search.
lookup is priced above 41% of comparable listings in search.
The payee wallet is shared by 10 listings across 10 hosts.
The seller's tags on lookup are ransomware, threat-intelligence, leak-site and cybersecurity.
846 other listings in search declare exactly the same price.
the payment options, as of 2026-10-10 12:29 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.01 USDC | exact | 0x2dAF65…7D65dD |
the checks, as of 2026-10-10 12:49 UTC · method · pinnableendpoint answered HTTP 402
No named check failed.
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-10-10 06:22 UTC · method · live
The input and output block
{
"input": {
"type": "http",
"method": "GET",
"queryParams": {
"q": "example.com"
}
},
"output": {
"type": "json",
"example": {
"found": true,
"label": "unverified claim from a criminal leak site",
"query": {
"kind": "domain",
"value": "example.com"
},
"claims": [
{
"group": "akira",
"label": "unverified claim from a criminal leak site",
"sector": "Technology",
"country": "United States",
"sources": [
{
"url": "https://www.ransomlook.io/",
"name": "RansomLook",
"license": "CC BY 4.0",
"license_url": "https://creativecommons.org/licenses/by/4.0/"
}
],
"website": "example.com",
"organization": "example.com",
"first_observed_at": "2026-09-01T03:10:00Z",
"claimed_published_at": "2026-09-01T00:00:00Z"
}
],
"claim_count": 1
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-10-10 12:29 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "lookup on api.ransomware-tracker.com", snapshot of 2026-10-10 12:29 UTC. https://tollindex.com/e/api-ransomware-tracker-com-v1-lookup-a676a8/at/2026-10-10T12-29Z. Accessed [access date].
BibTeX
@misc{toll-e-api-ransomware-tracker-com-v1-lookup-a676a8-2026-10-10T12-29Z,
author = {TOLL},
title = {lookup on api.ransomware-tracker.com},
howpublished = {\url{https://tollindex.com/e/api-ransomware-tracker-com-v1-lookup-a676a8/at/2026-10-10T12-29Z}},
year = {2026},
month = {10},
note = {Pinned view of the snapshot of 2026-10-10 12:29 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.