← The evidence ledger
Evidence row 1367
Observed , by baseline/1.
- Kind
- listing
- About
- source_record agentic_market:api-orioncmd-com
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- ab78ddd8f4f05fb61e27911b2a7796f776df923bfd98be1d8fb5f4f22e4f8dbb
- Leaf
- 0x627897ac5bcec7246c52cb45f436ba85f3fbcfe60fedcfd1e71f61385cc94e15
What was observed
{
"endpoints": [
[
"x402",
"https://api.orioncmd.com/v1/audit-report"
],
[
"x402",
"https://api.orioncmd.com/v1/bulk-threat-check"
],
[
"x402",
"https://api.orioncmd.com/v1/cert"
],
[
"x402",
"https://api.orioncmd.com/v1/dns"
],
[
"x402",
"https://api.orioncmd.com/v1/domain-grade"
],
[
"x402",
"https://api.orioncmd.com/v1/email-auth"
],
[
"x402",
"https://api.orioncmd.com/v1/headers"
],
[
"x402",
"https://api.orioncmd.com/v1/threat-check"
],
[
"x402",
"https://api.orioncmd.com/v1/watch"
]
],
"name": "api.orioncmd.com",
"owner_address": null,
"raw": {
"caip2_networks": [
"eip155:8453"
],
"category": "",
"description": "",
"domain": "api.orioncmd.com",
"endpoints": [
{
"description": "Run a full website security audit with a prioritized fix list for a client or vendor review. $2 USDC on Base per call. Runs every OrionCMD check plus HTTPS redirect, www/apex, security.txt, robots.txt and sitemap. Returns the A-F grade, score and an action plan sorted critical to low. Don't use this for one quick check; single checks start at $0.01.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "2",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"site-audit",
"security-audit",
"vendor-review",
"action-plan",
"msp"
],
"url": "https://api.orioncmd.com/v1/audit-report"
},
{
"description": "OrionCMD Checks: Bulk IOC check: up to 100 domains or IPv4 (domains resolved, IPs matched too). Up to 100 comma- or newline-separated domains, URLs or IPv4 addresses in ?q=. Each domain is resolved (A) and the name, parent domains and resolved IPv4 are matched against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly). No ransomware-claim lookups (use /v1/threat-check). Stale feed answers 503 before payment.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com,203.0.113.7",
"group": "query",
"name": "q",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.5",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/bulk-threat-check"
},
{
"description": "Check a domain's SSL/TLS certificate expiry and renewal from CT logs. $0.01 USDC on Base per call. Returns issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs, plus a live HTTPS pass/fail probe. Don't use this for inspecting the exact certificate served live; details come from CT logs.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "6",
"l30DaysUniquePayers": "3"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl-expiry",
"tls-certificate",
"certificate-transparency",
"https-check"
],
"url": "https://api.orioncmd.com/v1/cert"
},
{
"description": "OrionCMD Checks: Live DNS / email-auth / CAA / DNSSEC check. NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (tree-climbing) and DNSSEC via Cloudflare DoH, with plain-English findings and fixes[] (paste-ready SPF merge, DMARC and CAA records with dig verify commands).",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "3",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/dns"
},
{
"description": "Get a domain security grade A-F with a per-category breakdown. $0.03 USDC on Base per call. Returns one A-F grade, a 0-100 score, points per category (TLS 25, email auth 25, headers 20, DNS 15, expiry 15) and the top fixes. Don't use this for raw cert, DNS and expiry data without a grade; use /v1/site-health.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.03",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"security-grade",
"domain-security",
"scorecard",
"vendor-risk"
],
"url": "https://api.orioncmd.com/v1/domain-grade"
},
{
"description": "OrionCMD Checks: Email authentication posture: SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI. SPF validity and DNS-lookup count (limit 10), DMARC policy/pct/rua, DKIM on common selectors, MTA-STS mode, TLS-RPT and BIMI, with a rough 0-100 score and plain-English findings. Live DNS via Cloudflare DoH.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/email-auth"
},
{
"description": "OrionCMD Checks: HTTP security headers + redirect chain for a site. One HTTPS GET from Cloudflare's edge: redirect chain, final status, HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, a simple A-F grade and plain-English findings.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/headers"
},
{
"description": "Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.02",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "4",
"l30DaysUniquePayers": "3"
},
"serviceName": "OrionCMD Checks",
"tags": [
"threat-check",
"ioc",
"malicious-domain",
"ransomware",
"domain-reputation"
],
"url": "https://api.orioncmd.com/v1/threat-check"
},
{
"description": "OrionCMD Checks: Prepaid domain threat watch: up to 25 domains for 30 days, webhook alerts. Pay once; each domain is re-checked about once a day for 30 days. You get an HMAC-signed JSON POST at your https webhook_url (event watch.changed) when a domain or its IPv4 appears in (or leaves) ThreatCluster's high-confidence IOC feed, when a new ransomware leak-site claim names it, when its A/NS/MX records change, or when registration expiry changes or falls within 30 days. A watch.created POST is sent",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "items",
"required": false,
"type": "array"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "https://example.com/hooks/orion-watch",
"group": "body",
"name": "webhook_url",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.3",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/watch"
}
],
"enriched": false,
"iconUrl": "",
"id": "api-orioncmd-com",
"integrationType": "",
"isNew": false,
"name": "api.orioncmd.com",
"networks": [
"Base"
],
"priceSummary": {
"avgCostBasis": "exact",
"avgCostPerTransaction": "0.321111",
"currency": "USDC",
"maxAmount": "2",
"minAmount": "0.01"
},
"provider": "api.orioncmd.com",
"providerUrl": "",
"serviceName": "OrionCMD Checks",
"tags": [
"site-audit",
"security-audit",
"vendor-review",
"action-plan",
"msp",
"ssl",
"tls",
"certificate",
"dns",
"domain",
"ssl-expiry",
"tls-certificate",
"certificate-transparency",
"https-check",
"security-grade",
"domain-security",
"scorecard",
"vendor-risk",
"threat-check",
"ioc",
"malicious-domain",
"ransomware",
"domain-reputation"
]
},
"source": "agentic_market",
"summary": ""
}What the leaf hashes
{"body":"ab78ddd8f4f05fb61e27911b2a7796f776df923bfd98be1d8fb5f4f22e4f8dbb","id":1367,"kind":"listing","method":"baseline/1","observed_us":1793025253897831,"prev":null,"subject":"agentic_market:api-orioncmd-com","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x6277e6425e3dcaa031049188b4f4a7fb9a5740602fc024575cb22fce9287547c
- 0x5ba2534f14b74a973336d063c0b48d105f90812dd2e9f5768436139c42b6f888
- 0xcf49154e670ccc02e6eb8940c941abf35e89242ebcae09c8254ffaf2b9290563
- 0xaf80852df903f1887f676c2a71e542518c9f13fea33f9793ec92eec19ce0c94b
- 0xcc33020b2acd319c9743a9ccbb2490454917d0bade395869677c34f46d76506e
- 0x738a5adff27563f9f68e47766a1455683c1f8974200e4a7bfafbdcf5334a63da
- 0x58ecb00b29a67b9e1bb3ddf5a1bc940bef144b0c13a7538b63c17ab39c815441
- 0x4226b84fb1259735a51f2d1584f934904dfbcadaf36ea410375cbb9c9865eb52
- 0xe3dec21127ba7d316156370fd220eba2bd6f5a93b45c91aa4c73dfc340e9ffe9
- 0xbc3c355b950c7c23082f84a109d9c2ea6ccfd6ca5cc47b5103a3180b43e85bfd
- 0x131755a2ea202f5e6a5e7b2b4223cbbcd0bee9398f637648162d1129112491ce
- 0x7285c0b02d1aedd949b8ba0c7b2499f7121588ebdd4c96ef8725919bb84dd534
- 0x89fcaf55e37dd777228f271b79ea895534a66ec0d184363c2a6eb1b4d23c9ef1
- 0x216cebb9ae5414599109a02297c4817d7d1c6b1394afeb97efe38e32f0053974
- 0x7726154b91b2ad65b13849ef6cb6443b1f0ff113a3089c9bd5f2bcfc16be099d
- 0x47b89901b0f07938a6b9a66ddf35683903f79d756a7c7763665fd632758b08d0
- 0x9a83be955a206deb65b995adfd92c58fa31c95fbbf926bd199d300e70b08b26d
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae