Evidence row 2201327

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://site-audit.x402tookit.com/php-exposure"
    ]
  ],
  "name": "Site Audit",
  "owner_address": "0xb531320805c5bed1d46aeadcf4f008fdf172dbda",
  "raw": {
    "accepts": [
      {
        "amount": "30000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      },
      {
        "amount": "30000",
        "asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "extra": {
          "feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM",
          "transactionVersions": [
            0
          ]
        },
        "maxTimeoutSeconds": 300,
        "network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
        "payTo": "DUPiupXtuox38dcGoXUKer5mAydCzmaHjrbQ66qeEm8s",
        "scheme": "exact"
      },
      {
        "amount": "30000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      },
      {
        "amount": "30000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42161",
        "payTo": "0xb531320805C5BED1D46AEaDcF4F008FDF172DBDa",
        "scheme": "exact"
      }
    ],
    "description": "Does a site show a PHP version below the Oct 2026 fixes (CVE-2026-109618/9)? Reads headers; says 'hidden' when it cannot tell.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "url": "https://wordpress.org/"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "asOf": "2026-10-23T03:26:06.744Z",
              "degraded": false,
              "disclaimer": "Screening signal computed from the named public source. Not financial, legal or investment advice; provided as is. Verify at the source before acting.",
              "httpStatus": 200,
              "notChecked": [
                "the version actually running behind a proxy or CDN",
                "fixes a Linux distribution applied without changing the version string",
                "…3 more"
              ],
              "phpDetected": true,
              "reasons": [
                "Hiding the version is normal hardening; it says nothing about whether the server is patched.",
                "Fixed releases: 8.2: 8.2.35, 8.3: 8.3.36, 8.4: 8.4.27, 8.5: 8.5.12. Ask the host or check the server directly."
              ],
              "signs": [
                "WordPress headers (WordPress runs on PHP)"
              ],
              "source": "live GET of the named URL (response headers)",
              "sourceUrl": "https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/",
              "summary": "https://wordpress.org/ shows signs of PHP (WordPress headers (WordPress runs on PHP)) but does not reveal a version, so exposure cannot be judged from outside.",
              "url": "https://wordpress.org/",
              "verdict": "PHP_DETECTED_VERSION_HIDDEN",
              "version": null
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "url": {
                      "description": "Full https URL of the site or page, no credentials",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "properties": {
                    "asOf": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "degraded": {
                      "type": [
                        "boolean",
                        "null"
                      ]
                    },
                    "disclaimer": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "httpStatus": {
                      "type": [
                        "null",
                        "number"
                      ]
                    },
                    "notChecked": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "phpDetected": {
                      "type": [
                        "boolean",
                        "null"
                      ]
                    },
                    "reasons": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "signs": {
                      "items": {
                        "type": "string"
                      },
                      "type": [
                        "array",
                        "null"
                      ]
                    },
                    "source": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "sourceUrl": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "summary": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "url": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "verdict": {
                      "type": [
                        "null",
                        "string"
                      ]
                    },
                    "version": {}
                  },
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-11-02T04:05:40.719Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-11-02T04:05:40.575Z"
    },
    "resource": "https://site-audit.x402tookit.com/php-exposure",
    "serviceName": "Site Audit",
    "tags": [
      "php",
      "security",
      "cve-2026-109618",
      "headers",
      "exposure"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Does a site show a PHP version below the Oct 2026 fixes (CVE-2026-109618/9)? Reads headers; says 'hidden' when it cannot tell."
}

What the leaf hashes

{"body":"4fa2dfd612e13b6689ae5609d324d5d5c6c79c2ad0936e25d01049206087dac7","id":2201327,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793646803419629,"prev":null,"subject":"x402_bazaar:https://site-audit.x402tookit.com/php-exposure","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-11-02 (444186 rows).

1. 0x6dc5c72f50c2ecf951081f55e56b674fa40a789cf6301a7d41dfd60e648bb9dd
2. 0x25f881416e0cd29230b555c6dc2c837c4ebc79c26cacda646473501ae396b69d
3. 0x47e3fe12e97a690ac4173f5feab7de7bca7da05b50ea3b5e3316fd43f353ab90
4. 0xf053ae40e87a5e49b4d89683c41970919a137174f0b00c12bef2d68fa6f75be4
5. 0xf99965c94212f022ca98cb14d4a871751edec3526c1ccfb5b5ca799e1e788460
6. 0x3fbe58344c16433e2061baecc9f0a15b8018931a1d0a0346c5e6368f4477842a
7. 0x0a877f180af4a0fd9d906eaf389895de5b4334dec9d4e0a3ef985955b6fc8b32
8. 0x944a9284180f7b18217b24c3b446a462c5813226e995dceb89f2c7917158a08e
9. 0x9e3bbf9427c0425871ca27166dc4adb06a85b0c942fc6f2982ac3cb0cec08c49
10. 0x217f010c392e184a9cff8e3d179fec33caba2af4cb9995ccc204d2fdb25f9017
11. 0xb0d18cb0ad87720ba47a149f09051a03a9ed3f4ce71bc9a9d9c1b8fcfadee909
12. 0xa95c0aa60c534c116ea78dfa73cda3218c070929dd80984b74bd130bc0058f60
13. 0x9e9a25a642137f47c2c84b5e744fe2a673304740cc0eb165018b100bc5cbaf0c
14. 0xb903742c059190ddedc375958f73db84c3806732f1e54330407245d4734015f5
15. 0x2cdc73dde4ed839d7482b6b91833e64bef56c7626db8439f3bbdfcffd2ae32a3
16. 0x0e5696ae625571c52ddcd8dc09aa6c994b4ab38f2086df20d56f1f01c603e501
17. 0xf9973981f80219d4f00fa9186b40a8144accc0c9875572fb79eaea312a21a187
18. 0x4d205063c881c48edbbb37762a8d3bbb7444d4c42daa882f663a231893d25c35
19. 0x365b161a4b68d750dcc4b3ecce1154a2163c87b08762079428e68f0ebb6a754e

Day root

0x78fecaabbe319e56f5c4b80fc02e2052e198ad24781da8832a475ff65f2002d1

Chained

0xdc35957db5d1371ca382b9152878ffece28ec7c5cb4f98fd71ddb367f8b999b2

Published

On Arc Testnet, block 70432815: 0x56b814612eb2e3e544153df3e91e1f7199106d1e430c7d8c6b653feeb9ebe9af