faillisted in Coinbase#52 by calls of 1,027 on this host
0.002 USDC
per call, as the listing declares it on eip155:
- Validation state
- fail
- Uptime, 7 / 30 / 90 days
- 80% / 93% / 93%
- Calls, trailing 30 days
- 3
- Unique payers, trailing 30 days
- 3
- Last called
- 2026-10-08 06:09 UTC
- First observed by TOLLderived
- 2026-10-04
- Pricederived
- 0.002 USDC
- Networks
- 5
How has the volume on this endpoint moved?
On 2026-10-19 it answered HTTP 503 rather than 402; TOLL records that as a failure.
malicious ip is a POST endpoint at api.vextorium.com, listed in the Coinbase registry and filed by TOLL under identity.
malicious ip is priced at 0.002 USDC on Base.
Callers of malicious ip supply a json body with the field ip.
For malicious ip the listing declares 5 accepts on Base, Solana, Polygon, Optimism and 1 other, to 2 different wallets.
malicious ip returns json; the example shows ip, note, risk, listed, private, findings and 1 other.
The registry's counters give malicious ip 3 calls and 3 unique payers over 30 days, every call from a different payer.
malicious ip was last called 5 days before the snapshot.
Of api.vextorium.com's 1,027 listings, malicious ip ranks tied 52nd by calls with 481 others.
malicious ip is among the cheapest in identity; 7% of comparable listings ask less.
Closest in price to malicious ip within identity: chain ens at api.losbeto.xyz and aman ens resolve at amanchain-relay.gitajhd.workers.dev.
For 1 of the options on malicious ip, TOLL has no verified decimals and shows the raw amount.
The wallet paid by malicious ip is the payee of 1,037 endpoints across 3 hosts.
Across identity, 2,150 endpoints carry counters and malicious ip out-counts 57% of them.
The seller's tags on malicious ip are ip-reputation, threat-intel, security and botnet.
113 other listings in identity declare exactly the same price.
the payment options, as of 2026-10-13 14:08 UTC · method · pinnable
| registry | network | asset | amount | scheme | pay to |
|---|---|---|---|---|---|
| Coinbase | eip155: | USDC | 0.002 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | solana: | USDC | 0.002 USDC | exact | HcjfmZLg…yt3pz2 |
| Coinbase | eip155: | USDC | 0.002 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | eip155: | USDC | 0.002 USDC | exact | 0xb9f06D…b71aCf |
| Coinbase | eip155: | GatewayWalletBatched | 2000 smallest units, decimals unknown | exact | 0xb9f06D…b71aCf |
the checks, as of 2026-10-19 12:59 UTC · method · pinnableendpoint answered HTTP 503
returns_402· an unauthenticated request gets HTTP 402
Every sweep that observed this endpoint, newest first.
| observed, UTC | state | failed checks | sweep |
|---|---|---|---|
| 2026-10-19 12:59 UTC | fail | 1 | daily-2026-10-19 |
| 2026-10-16 10:41 UTC | pass | 0 | daily-2026-10-16 |
| 2026-10-15 12:40 UTC | pass | 0 | daily-2026-10-15 |
| 2026-10-14 10:32 UTC | pass | 0 | daily-2026-10-14 |
| 2026-10-13 15:53 UTC | pass | 0 | daily-2026-10-13 |
| 2026-10-12 13:00 UTC | pass | 0 | daily-2026-10-12 |
| 2026-10-11 11:35 UTC | pass | 0 | daily-2026-10-11 |
| 2026-10-10 19:42 UTC | pass | 0 | daily-2026-10-10 |
| 2026-10-09 14:02 UTC | pass | 0 | daily-2026-10-09 |
| 2026-10-08 15:22 UTC | pass | 0 | daily-2026-10-08 |
| 2026-10-07 14:39 UTC | pass | 0 | daily-2026-10-07 |
| 2026-10-06 16:43 UTC | pass | 0 | daily-2026-10-06 |
| 2026-10-05 13:05 UTC | pass | 0 | daily-2026-10-05 |
| 2026-10-04 15:28 UTC | pass | 0 | daily-2026-10-04 |
| 2026-10-04 08:21 UTC | pass | 0 | new-after-daily-2026-10-04 |
Presence in a registry, not liveness of the service (method). Newest first.
- listed in Coinbase
From the registry record, not validated by TOLL.the declared schema, as of 2026-10-08 06:09 UTC · method · live
The input and output block
{
"input": {
"body": {
"ip": "8.8.8.8"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"ip": "8.8.8.8",
"note": "A clean result does not guarantee the IP is safe; for its network and country use ip-info.",
"risk": "no alerts",
"listed": false,
"private": false,
"findings": [],
"reviewed_lists": [
"abuse.ch Feodo Tracker",
"Tor exit nodes"
]
}
}
}Cite this page
The pinned URL below renders this page from the snapshot of 2026-10-13 14:08 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).
Plain text
TOLL, "malicious ip on api.vextorium.com", snapshot of 2026-10-13 14:08 UTC. https://tollindex.com/e/api-vextorium-com-v1-malicious-ip-fffe50/at/2026-10-13T14-08Z. Accessed [access date].
BibTeX
@misc{toll-e-api-vextorium-com-v1-malicious-ip-fffe50-2026-10-13T14-08Z,
author = {TOLL},
title = {malicious ip on api.vextorium.com},
howpublished = {\url{https://tollindex.com/e/api-vextorium-com-v1-malicious-ip-fffe50/at/2026-10-13T14-08Z}},
year = {2026},
month = {10},
note = {Pinned view of the snapshot of 2026-10-13 14:08 UTC. Accessed [access date].}
}None yet. Anything submitted through the form below is published here with its outcome.