Ssl Blacklist
ssl_blacklistabuse.ch SSL Blacklist (SSLBL): check whether a TLS certificate SHA1 fingerprint is blacklisted as malware / botnet C&C infrastructure (listing date and reason, e.g. "QuasarRAT C&C"), check an IP against the SSLBL botnet C2 IP list, or list the most recent blacklisted certificates filtered by reason. Several thousand certificates; CC0, commercial use allowed. Cached locally, refreshed every 30 minutes. Price: $0.005 USDC per successful call (x402, Solana). Same tool over HTTPS: GET https://scorptech.it.com/api/x402/v1/ssl-blacklist
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ip | No | IP to check against the SSLBL botnet C2 IP blacklist | |
| sha1 | No | certificate SHA1 fingerprint, 40 hex (colons / spaces allowed) | |
| limit | No | list mode: entries 1-500 (default 50), newest first | |
| since | No | list mode: only listings on or after YYYY-MM-DD | |
| reason | No | list mode: substring filter on the listing reason, e.g. AsyncRAT |