Observed arrival · 2026-09-18
Basegrep, a credential-search API in plain sight
Credibility concern recorded. The source reference remains available for verification and correction.
Documentation for a metered API that says it searches ULP logs and returns matching usernames and passwords.
- For
- Security researchers studying credential-market infrastructure
- Worth noticing
- The documentation describes free query counts, billed searches, CSV results, and download URLs that expire after 72 hours.
Field notes
The documentation separates free estimation from billed retrieval: a count request reports totals, source breakdowns, and estimated cost before a search runs. It describes deterministic row limits, cost-abort behavior, idempotency keys, and continuation requests intended to avoid overlap. Results are delivered as CSV files through temporary URLs, with the page stating that files remain available for 72 hours. The extract does not verify whether the claimed database or service operates as documented.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue