SiteCheck Web Intel

Looks up a file hash (SHA-256, SHA-1 or MD5) in abuse.ch MalwareBazaar: whether the sample is known, its other hashes, file name, type, size, signature (malware family), first/last seen, reporter, origin country, delivery method, tags, download count and code-signing info. Metadata only; the sample itself is never downloaded.

DataLiveeip155:8453Exactvia cdp

https://api.webintel-api.workers.dev/api/security/malbazaar-samples

SecurityMalbazaarSamples

Calls · 30d

2

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far.

$7.88

Verified settled volume

2,993 settlements proven x402 by their on-chain EIP-3009 marker.

$0.0020

Listed price

As published in the catalog. Always read the live 402 before paying.

2

Calls · 30d

Upstream's own call count for this endpoint, not ours.

2

Unique payers · 30d

Last called 2026-10-24 02:52Z

—

Upstream on-chain volume

Reported by the source catalog.

Paid to

0xb8491F953e6860D3b5840b73c60883Ff099ceAfA

The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.

Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Provider

The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.

Accepts

The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.

0.002USDC≈ $0.002 USD

on Base · exact scheme

Pay 0.002 USDC on Base to 0xb849…ceAfA. The signed payment is good for 5 minutes.

Paid to: 0xb849…ceAfA
USD Coin contract: 0x8335…02913
Payment window: 5 minutes
As published: 2000 smallest units

2000units

on solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: J8vnmB…BRdhR
Token contract: EPjFWd…TDt1v
Payment window: 5 minutes

2000units

on eip155:5042 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xa475…39be3
Token contract: 0x3600…00000
Payment window: 5 minutes

2000units

on Polygon · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0x3c49…c3359
Payment window: 5 minutes

2000units

on Arbitrum · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0xaf88…e5831
Payment window: 5 minutes

2000units

on eip155:143 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0x7547…fb603
Payment window: 5 minutes

2000units

on eip155:480 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0x79A0…D24d1
Payment window: 5 minutes

2000units

on Optimism · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0x0b2C…7Ff85
Payment window: 5 minutes

2000units

on eip155:42220 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: 0xb849…ceAfA
Token contract: 0xcebA…2118C
Payment window: 5 minutes

20000units

on stellar:pubnet · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: GBIX2M…DOAFI
Token contract: CCW67T…JMI75
Payment window: 5 minutes

0.002units

on xrpl:0 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: rDxNZC…Cf8UJ
Token contract: 524C55…00000
Payment window: 5 minutes

1549units

on xrpl:0 · exact scheme

That figure is in the token’s smallest units. Roundhouse does not hold this contract’s decimals, so it is shown as published rather than converted.

Paid to: rDxNZC…Cf8UJ
Token contract: XRP
Payment window: 5 minutes

The catalog’s raw entry

[
  {
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:8453",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
    "extra": {
      "feePayer": "Hc3sdEAsCGQcpgfivywog9uwtk8gUBUZgsxdME1EJy88"
    },
    "payTo": "J8vnmBx4pS1X7UUBTfz1yWBKiw69Dj2yRGRHDaXBRdhR",
    "amount": "2000",
    "scheme": "exact",
    "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x3600000000000000000000000000000000000000",
    "extra": {
      "name": "USDC",
      "version": "2"
    },
    "payTo": "0xa4751fCAa83c9669cfe507bb6807507729839be3",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:5042",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:137",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:42161",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603",
    "extra": {
      "name": "USDC",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:143",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",
    "extra": {
      "name": "USDC",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:480",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
    "extra": {
      "name": "USD Coin",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:10",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C",
    "extra": {
      "name": "USDC",
      "version": "2"
    },
    "payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
    "amount": "2000",
    "scheme": "exact",
    "network": "eip155:42220",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75",
    "extra": {
      "areFeesSponsored": true
    },
    "payTo": "GBIX2M7HNL2G2VYU5KZ446OSN55ZWHS3WBEUP4JTLS6R34VXIGTDOAFI",
    "amount": "20000",
    "scheme": "exact",
    "network": "stellar:pubnet",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "524C555344000000000000000000000000000000",
    "extra": {
      "issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
      "invoiceId": "5fa8aea1-8551-4c5e-a170-e59ec99e87f4",
      "sourceTag": 804681468,
      "areFeesSponsored": false
    },
    "payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
    "amount": "0.002",
    "scheme": "exact",
    "network": "xrpl:0",
    "maxTimeoutSeconds": 300
  },
  {
    "asset": "XRP",
    "extra": {
      "invoiceId": "2d272c7b-07c7-4c08-95d6-146dede2e29b",
      "sourceTag": 804681468,
      "areFeesSponsored": false
    },
    "payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
    "amount": "1549",
    "scheme": "exact",
    "network": "xrpl:0",
    "maxTimeoutSeconds": 300
  }
]

Extensions

{
  "bazaar": {
    "info": {
      "input": {
        "type": "http",
        "method": "GET",
        "queryParams": {
          "hash": "343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23"
        }
      },
      "output": {
        "type": "json",
        "example": {
          "hash": "343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23",
          "link": "https://bazaar.abuse.ch/sample/343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23/",
          "known": true,
          "sample": {
            "md5": "33db07d7bae224099d9591a6f3e08187",
            "sha1": "c1e14f89257d8f11365305b526a7acb89cf7bf1d",
            "tags": [
              "ConnectWise",
              "msi"
            ],
            "sha256": "343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23",
            "ssdeep": "393216:b6ohU+8bjJ84Qq9ySZ8Es6ohU+8bjJ8P6ohU+8bjJ8y6ohU+8bjJ8:Ooh0bj19ySZzToh0bjroh0bjSoh0bj",
            "imphash": null,
            "codeSign": {
              "issuer": "DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1",
              "subject": "ConnectWise, LLC",
              "validTo": "2027-02-19T23:59:59Z",
              "validFrom": "2026-02-20T00:00:00Z"
            },
            "fileName": "343677702458d1e861b68b62073f10c33b5f859dbbd782c63d85547994728c23.msi",
            "fileSize": 16936960,
            "fileType": "msi",
            "lastSeen": null,
            "mimeType": "application/x-msi",
            "reporter": "Tuxxin",
            "downloads": 72,
            "firstSeen": "2026-10-22 19:53:53",
            "signature": "ConnectWise",
            "originCountry": "US",
            "deliveryMethod": "web_download"
          },
          "source": "https://mb-api.abuse.ch/api/v1/",
          "checkedAt": "2026-10-23T09:38:37.696Z"
        }
      }
    },
    "schema": {
      "type": "object",
      "$schema": "https://json-schema.org/draft/2020-12/schema",
      "required": [
        "input"
      ],
      "properties": {
        "input": {
          "type": "object",
          "required": [
            "type",
            "method"
          ],
          "properties": {
            "type": {
              "type": "string",
              "const": "http"
            },
            "method": {
              "enum": [
                "GET"
              ],
              "type": "string"
            },
            "queryParams": {
              "type": "object",
              "required": [
                "hash"
              ],
              "properties": {
                "hash": {
                  "type": "string",
                  "description": "SHA-256 (64 hex), SHA-1 (40 hex) or MD5 (32 hex) of the file (required)"
                },
                "sha256": {
                  "type": "string",
                  "description": "Same as hash (older name)"
                }
              }
            }
          },
          "additionalProperties": false
        },
        "output": {
          "type": "object",
          "required": [
            "type"
          ],
          "properties": {
            "type": {
              "type": "string"
            },
            "example": {
              "type": "object"
            }
          }
        }
      }
    }
  }
}

Provenance

Seen in the source catalog: 2026-10-24 02:52Z
Last indexed by Roundhouse: 2026-10-26 17:30Z
Last enriched (probe, favicon, geo): 2026-10-23 22:46Z
x402 version: 2
Max timeout: 300s
Liveness probe: HTTP 402

Hand this page to an agent

Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.

GET api.roundhouseai.io/v0/endpoints

This endpoint's own trailing-30-day call count, as published by the upstream catalog and snapshotted daily. 3 snapshots so far. Verified volume counts only settlements with an on-chain EIP-3009 marker.

Show the prompt

Using Roundhouse, look up the x402 service SiteCheck Web Intel and tell me whether it is
worth paying: what a call costs, whether the endpoint answered when last probed, and what
its payment record actually shows.

curl -s 'https://api.roundhouseai.io/v0/endpoints?q=SiteCheck%20Web%20Intel'
curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>'

Then call it: read the price from the live 402 at https://api.webintel-api.workers.dev/api/security/malbazaar-samples, never from
a cached figure, and pay with an x402 client.

The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except
/v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at
GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at
https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further.

If you do not have Roundhouse tools or skills installed, read
https://roundhouseai.io/skill.md first — it is the whole procedure.