TOLL

What software pays for, recorded every six hours.

Snapshot
2026-10-10 12:29 UTC
Sweep
daily-2026-10-09 · finished 2026-10-09 14:02 UTC
Listed
33,188

lookup derived

dragonseye-lookup.dario-9fa.workers.devSearchderived

GET https://dragonseye-lookup.dario-9fa.workers.dev/v1/lookup

passlisted in Coinbasecounted above 0% of Search

0.01 USDC

per call, as the listing declares it on eip155:8453

Compare with anotherEvery figure as JSONCite this page

the price, as of 2026-10-10 12:29 UTC · method · pinnable

Validation state
pass
as of 2026-10-10 06:44 UTC · method · pinnable · sweep new-after-daily-2026-10-10
Uptime, 7 / 30 / 90 days
100% / 100% / 100%
as of 2026-10-10 06:44 UTC · method · pinnable · 1 of 1 in 7d, 1 of 1 in 30d, 1 of 1 in 90d
Calls, trailing 30 days
1
as of 2026-10-10 12:29 UTC · method · pinnable
Unique payers, trailing 30 days
1
as of 2026-10-10 12:29 UTC · method · pinnable
Last called
2026-10-10 03:40 UTC
as of 2026-10-10 12:29 UTC · method · pinnable
First observed by TOLLderived
2026-10-10
as of 2026-10-10 05:49 UTC · method · pinnable · observation began 10 September 2026; listings that predate it show that date
Pricederived
0.01 USDC
as of 2026-10-10 12:29 UTC · method · pinnable · on eip155:8453
Networks
1
as of 2026-10-10 12:29 UTC · method · pinnable

Counters

1 observations, 1 of them a change, fewer than the 3 a trace needs

How big is this endpoint among the ones like it?

1 call100,000this endpoint
Calls counted in the trailing thirty days across the 2,504 endpoints in Search that carry counters, binned on a logarithmic scale because the range runs over five orders of magnitude. The marked bin is this endpoint, at 1: 1,843 in the category are counted higher and 660 lower.

No trace is drawn of this endpoint’s own volume. Its counters have changed 1 time across 1 observation, and 3 changes are the fewest this site will draw a trace through, because two points and a guess are not a series. Every observation is in the JSON.

In words

TOLL first observed it on 2026-10-10.

lookup, a GET endpoint on dragonseye-lookup.dario-9fa.workers.dev, appears in the Coinbase registry; TOLL's taxonomy puts it in search.

On Base, lookup asks 0.01 USDC per call.

Requests carry the query parameter q.

lookup answered the sweep of 2026-10-10 with a valid 402.

A response from lookup, as declared, includes found, label, query, claims and claim_count.

lookup is the only listed endpoint on dragonseye-lookup.dario-9fa.workers.dev.

The registry counted one call from one payer in the trailing 30 days.

The last call to lookup came on the day of the snapshot, 2026-10-10.

Closest in price to lookup within search: exa search at stableenrich.dev and research people at win.oneshotagent.com.

lookup is priced above 41% of comparable listings in search.

Its payee wallet receives for 10 listed endpoints across 10 hosts.

The seller's tags on lookup are ransomware, threat-intelligence, leak-site and cybersecurity.

846 other listings in search declare exactly the same price.

Payment options as declared

the payment options, as of 2026-10-10 12:29 UTC · method · pinnable

Every payment option declared on this listing
registrynetworkassetamountschemepay to
Coinbaseeip155:8453USDC0.01 USDCexact0x2dAF65…7D65dD

Preflight checks at the last sweep

the checks, as of 2026-10-10 06:44 UTC · method · pinnableendpoint answered HTTP 402

No named check failed.

Registry presence

Presence in a registry, not liveness of the service (method). Newest first.

  1. listed in Coinbase

Declared input and output, as listed

From the registry record, not validated by TOLL.the declared schema, as of 2026-10-10 03:40 UTC · method · live

The input and output block
{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "q": "example.com"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "found": true,
      "label": "unverified claim from a criminal leak site",
      "query": {
        "kind": "domain",
        "value": "example.com"
      },
      "claims": [
        {
          "group": "akira",
          "label": "unverified claim from a criminal leak site",
          "sector": "Technology",
          "country": "United States",
          "sources": [
            {
              "url": "https://www.ransomlook.io/",
              "name": "RansomLook",
              "license": "CC BY 4.0",
              "license_url": "https://creativecommons.org/licenses/by/4.0/"
            }
          ],
          "website": "example.com",
          "organization": "example.com",
          "first_observed_at": "2026-09-01T03:10:00Z",
          "claimed_published_at": "2026-09-01T00:00:00Z"
        }
      ],
      "claim_count": 1
    }
  }
}
Cite this page

The pinned URL below renders this page from the snapshot of 2026-10-10 12:29 UTC and does not change; the live page does, every six hours. Data reuse is under CC BY 4.0 (terms).

Plain text

TOLL, "lookup on dragonseye-lookup.dario-9fa.workers.dev", snapshot of 2026-10-10 12:29 UTC. https://tollindex.com/e/dragonseye-lookup-dario-9fa-workers-dev-v1-lookup-9f380d/at/2026-10-10T12-29Z. Accessed [access date].

BibTeX

@misc{toll-e-dragonseye-lookup-dario-9fa-workers-dev-v1-lookup-9f380d-2026-10-10T12-29Z,
  author = {TOLL},
  title = {lookup on dragonseye-lookup.dario-9fa.workers.dev},
  howpublished = {\url{https://tollindex.com/e/dragonseye-lookup-dario-9fa-workers-dev-v1-lookup-9f380d/at/2026-10-10T12-29Z}},
  year = {2026},
  month = {10},
  note = {Pinned view of the snapshot of 2026-10-10 12:29 UTC. Accessed [access date].}
}

Reports and replies about this endpoint

None yet. Anything submitted through the form below is published here with its outcome.

Report an error about lookup, or reply as the named seller

No account, no token. Published unedited with its outcome, upheld or not. Do not include personal data.

Kind

Published as typed. Optional.

10 to 4,000 characters.

Verify with the payee wallet (optional, EVM)

Sign this message with the wallet named on the page and paste the signature; it is checked, stored, never published. TOLL reply about endpoint 9f380d010849dae56e8652283cf5a694e5fffe267afb3e170af0ff443bf85329 from wallet 0x2dAF658B01e257206375798a15832E9f547D65dD

The 0x address named as payee on this page, 42 characters.

The hex signature of the message above, starting 0x.