resources/sicher/POST /v1/hash-reputation
POSTorigin + 2 sourcesqualified signals

https://sicher.halowerk.com/v1/hash-reputationPOST /v1/hash-reputation · x402 API by sicher

Queries three abuse.ch metadata services for an MD5, SHA-1 or SHA-256 value. It reports known malware metadata, associated ThreatFox indicators, and URLhaus payload provenance, then derives a conservative known-malicious or unknown verdict. No endpoint for sample retrieval is called and no binary is downloaded. A missing record means unknown to these sources, not proven benign. VirusTotal is deliberately not used because its public terms do not permit redistribution in this paid product.

https://sicher.halowerk.com/v1/hash-reputation

What does this x402 API do?

https://sicher.halowerk.com/v1/hash-reputation. This is an x402-gated POST API resource from sicher. TOLL·402 did not invoke this route automatically because doing so was not considered safe. No normalized USD price is recorded; the listing names Base. No settled paid call has been verified.

Published price
No normalized USD price is recorded
Networks
Base
Latest evidence
TOLL·402 did not invoke this route automatically because doing so was not considered safe
Resource ID
3d23697ada3e6c4fb96b0543
USE THIS RESOURCE

Start with a quote-only recipe. Payment signing stays in your project.

CODE
AI CODING TOOLS
quote-check.ts
const response = await fetch("https://sicher.halowerk.com/v1/hash-reputation", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({
  "type": "http",
  "method": "POST",
  "bodyType": "json",
  "bodyFieldNames": [
    "hash"
  ],
  "pathParamNames": [],
  "queryParamNames": []
}),
});

console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));

// A valid 402 is a quote, not a completed paid call.

Review the provider input schema before running this non-read-only method. No payment code is included.

STATUS HISTORY

  1. Exact route checked

    not safely testable · potentially-mutating-method:POST

  2. Origin reachable

    HEAD https://sicher.halowerk.com/ returned 200.

  3. Observed in cdp-bazaar

    The registry record was observed and retained with provenance.

  4. Observed in 402-index

    Discovered through bazaar.

  5. Registry record checked

    Registry health: healthy.

What evidence supports this listing?

cdp-bazaarobserved 2026-08-25 · open source record ↗
402-indexobserved 2026-08-25 · open source record ↗
origin checkHEAD https://sicher.halowerk.com/ → 200 on 2026-08-25
route quotenot invoked automatically · potentially-mutating-method:POST · 2026-08-25

Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →

Which networks and payment options does it accept?

The normalized listing price is No normalized USD price is recorded. Raw protocol requirements remain visible below for implementation and audit use.

Baseexact5000 atomic · 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
sicher POST /v1/hash-reputation · 3d2369 x402 API · TOLL·402