← The evidence ledger
Evidence row 561869
Observed , by sync.agentic_market/1.
- Kind
- listing
- About
- source_record agentic_market:api-orioncmd-com
- Recorded
- Previous row
- #548006
- Body SHA-256
- 727be5def4852de75cfb3d79710c53d1d29efb7cd82a5f7916f16f20d9a5dcfc
- Leaf
- 0x6b8a5854aafd6cb326aebc4832a234d8ef26c058dafdf0f2a886154bd29ac703
What was observed
{
"endpoints": [
[
"x402",
"https://api.orioncmd.com/v1/audit-report"
],
[
"x402",
"https://api.orioncmd.com/v1/bulk-threat-check"
],
[
"x402",
"https://api.orioncmd.com/v1/cert"
],
[
"x402",
"https://api.orioncmd.com/v1/dns"
],
[
"x402",
"https://api.orioncmd.com/v1/domain-grade"
],
[
"x402",
"https://api.orioncmd.com/v1/email-auth"
],
[
"x402",
"https://api.orioncmd.com/v1/expiry"
],
[
"x402",
"https://api.orioncmd.com/v1/headers"
],
[
"x402",
"https://api.orioncmd.com/v1/site-health"
],
[
"x402",
"https://api.orioncmd.com/v1/threat-check"
],
[
"x402",
"https://api.orioncmd.com/v1/watch"
]
],
"name": "api.orioncmd.com",
"owner_address": null,
"raw": {
"caip2_networks": [
"eip155:8453"
],
"category": "",
"description": "",
"domain": "api.orioncmd.com",
"endpoints": [
{
"description": "Run a full website security audit with a prioritized fix list for a client or vendor review. $2 USDC on Base per call. Runs every OrionCMD check plus HTTPS redirect, www/apex, security.txt, robots.txt and sitemap. Returns the A-F grade, score and an action plan sorted critical to low. Don't use this for one quick check; single checks start at $0.01.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "2",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"site-audit",
"security-audit",
"vendor-review",
"action-plan",
"msp"
],
"url": "https://api.orioncmd.com/v1/audit-report"
},
{
"description": "OrionCMD Checks: Bulk IOC check: up to 100 domains or IPv4 (domains resolved, IPs matched too). Up to 100 comma- or newline-separated domains, URLs or IPv4 addresses in ?q=. Each domain is resolved (A) and the name, parent domains and resolved IPv4 are matched against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly). No ransomware-claim lookups (use /v1/threat-check). Stale feed answers 503 before payment.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com,203.0.113.7",
"group": "query",
"name": "q",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.5",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/bulk-threat-check"
},
{
"description": "Check a domain's SSL/TLS certificate expiry and renewal from CT logs. $0.01 USDC on Base per call. Returns issuer, validity, days left, % of lifetime used, renewal cadence and a renewal-stall heuristic from Certificate Transparency logs, plus a live HTTPS pass/fail probe. Don't use this for inspecting the exact certificate served live; details come from CT logs.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "6",
"l30DaysUniquePayers": "3"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl-expiry",
"tls-certificate",
"certificate-transparency",
"https-check"
],
"url": "https://api.orioncmd.com/v1/cert"
},
{
"description": "OrionCMD Checks: Live DNS / email-auth / CAA / DNSSEC check. NS, A/AAAA/CNAME, MX, SPF, DMARC, CAA (tree-climbing) and DNSSEC via Cloudflare DoH, with plain-English findings and fixes[] (paste-ready SPF merge, DMARC and CAA records with dig verify commands).",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "3",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/dns"
},
{
"description": "Get a domain security grade A-F with a per-category breakdown. $0.03 USDC on Base per call. Returns one A-F grade, a 0-100 score, points per category (TLS 25, email auth 25, headers 20, DNS 15, expiry 15) and the top fixes. Don't use this for raw cert, DNS and expiry data without a grade; use /v1/site-health.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.03",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"security-grade",
"domain-security",
"scorecard",
"vendor-risk"
],
"url": "https://api.orioncmd.com/v1/domain-grade"
},
{
"description": "OrionCMD Checks: Email authentication posture: SPF, DMARC, DKIM, MTA-STS, TLS-RPT, BIMI. SPF validity and DNS-lookup count (limit 10), DMARC policy/pct/rua, DKIM on common selectors, MTA-STS mode, TLS-RPT and BIMI, with a rough 0-100 score and plain-English findings. Live DNS via Cloudflare DoH.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/email-auth"
},
{
"description": "When does a domain expire? Registration expiry and registrar via RDAP. $0.01 USDC on Base per call. Returns registrar, registration and expiry dates, days left, EPP status and nameservers. Within 60 days of expiry, fixes[] gives auto-renew steps for the registrar. Don't use this for SSL certificate expiry; use /v1/cert.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"domain-expiry",
"rdap",
"whois",
"registrar",
"domain-renewal"
],
"url": "https://api.orioncmd.com/v1/expiry"
},
{
"description": "OrionCMD Checks: HTTP security headers + redirect chain for a site. One HTTPS GET from Cloudflare's edge: redirect chain, final status, HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy, COOP, a simple A-F grade and plain-English findings.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.01",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/headers"
},
{
"description": "Check a domain's certificate, DNS and expiry together in one call. $0.03 USDC on Base per call. Returns a summary, the renewal-stall heuristic, the Let's Encrypt 64-day (2027-02-10) note and fixes[] with paste-ready DNS records and auto-renew steps, each with a verify command. Partial results if one source fails. Don't use this for an A-F grade; use /v1/domain-grade.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.03",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "2",
"l30DaysUniquePayers": "2"
},
"serviceName": "OrionCMD Checks",
"tags": [
"site-health",
"ssl",
"dns",
"domain-expiry",
"bundle"
],
"url": "https://api.orioncmd.com/v1/site-health"
},
{
"description": "Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check.",
"method": "GET",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": "example.com",
"group": "query",
"name": "domain",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.02",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "4",
"l30DaysUniquePayers": "3"
},
"serviceName": "OrionCMD Checks",
"tags": [
"threat-check",
"ioc",
"malicious-domain",
"ransomware",
"domain-reputation"
],
"url": "https://api.orioncmd.com/v1/threat-check"
},
{
"description": "OrionCMD Checks: Prepaid domain threat watch: up to 25 domains for 30 days, webhook alerts. Pay once; each domain is re-checked about once a day for 30 days. You get an HMAC-signed JSON POST at your https webhook_url (event watch.changed) when a domain or its IPv4 appears in (or leaves) ThreatCluster's high-confidence IOC feed, when a new ransomware leak-site claim names it, when its A/NS/MX records change, or when registration expiry changes or falls within 30 days. A watch.created POST is sent",
"method": "POST",
"parameters": [
{
"default": null,
"description": "",
"enumValues": [],
"example": [],
"group": "body",
"name": "items",
"required": false,
"type": "array"
},
{
"default": null,
"description": "",
"enumValues": [],
"example": "https://example.com/hooks/orion-watch",
"group": "body",
"name": "webhook_url",
"required": false,
"type": "string"
}
],
"pricing": {
"amount": "0.3",
"currency": "USDC",
"maxAmount": "",
"minAmount": "",
"network": "eip155:8453",
"scheme": "exact"
},
"providerName": "",
"quality": {
"l30DaysTotalCalls": "1",
"l30DaysUniquePayers": "1"
},
"serviceName": "OrionCMD Checks",
"tags": [
"ssl",
"tls",
"certificate",
"dns",
"domain"
],
"url": "https://api.orioncmd.com/v1/watch"
}
],
"enriched": false,
"iconUrl": "",
"id": "api-orioncmd-com",
"integrationType": "",
"isNew": false,
"name": "api.orioncmd.com",
"networks": [
"Base"
],
"priceSummary": {
"avgCostBasis": "exact",
"avgCostPerTransaction": "0.266364",
"currency": "USDC",
"maxAmount": "2",
"minAmount": "0.01"
},
"provider": "api.orioncmd.com",
"providerUrl": "",
"serviceName": "OrionCMD Checks",
"tags": [
"site-audit",
"security-audit",
"vendor-review",
"action-plan",
"msp",
"ssl",
"tls",
"certificate",
"dns",
"domain",
"ssl-expiry",
"tls-certificate",
"certificate-transparency",
"https-check",
"security-grade",
"domain-security",
"scorecard",
"vendor-risk",
"domain-expiry",
"rdap",
"whois",
"registrar",
"domain-renewal",
"site-health",
"bundle",
"threat-check",
"ioc",
"malicious-domain",
"ransomware",
"domain-reputation"
]
},
"source": "agentic_market",
"summary": ""
}What the leaf hashes
{"body":"727be5def4852de75cfb3d79710c53d1d29efb7cd82a5f7916f16f20d9a5dcfc","id":561869,"kind":"listing","method":"sync.agentic_market/1","observed_us":1793137270794723,"prev":548006,"subject":"agentic_market:api-orioncmd-com","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (273461 rows).
- 0x6b8a21fa3df10786c9c9e01296df32b3794df4ef9f3d321267d5078c30df92dc
- 0x7ab923645024444e79d66ec696469679bb80e78960b07b1916047ec1e8289646
- 0x86520f8bd314f367b4125dd142bd3f14df32aa955447ebc33459cee195240d96
- 0xe1a853a74ebca4b52c0dcbc173670f4bab053f9af90fe420813164527543fae1
- 0x29bd3df7d3c3cf80356ff60d5b59216d605ab92e6f72242a3cf10127181b0db4
- 0xdc56d410cdacaf2de9877087b8f719bac6df5978da969ae42c932ba260c6b282
- 0x1473b647c6e4ca3f6a4fd2c98f7168f559aa8bdb25dfb4ede3886b1de57e6b3e
- 0x1577532ddf529050cb164363ad2e532aed8d7fb0b3f43b85e9683c54a63375b6
- 0x4123ca37006d33e406a46c1cac51be883d0d68fc8eb4d0c98455ace0144f44c3
- 0xc0de6a748e789906f53a9948fbd08624fafeb0614506dc1c1e4ad9f30452f381
- 0xdc9ca5cffc0291f8ddf9255389acf7653056f9ad5b5eee5581f407185fc803d1
- 0x1907258a29a881c6f59707e890e9f73f7aff1ace32101f20e208f76e9fac9a60
- 0x927616fada4e04588c09f6e02e8f6e3a1351bac8355e394da3bd0bf249a5c503
- 0x3c5462812bd2f841e3d7deefc01555f18262fe5e0d5a7eb155330b7a7cb0388e
- 0x6f00f0da417f4126951ba8ba9b7962c847e91f5c61364ad9ad47e5f979698a60
- 0x23cf9bb4337ee8be7fcae368fd69d24c62c11fb45882127b4cd919bb96a19996
- 0x0e01aa9525097570a6edaf32bfc959de57bf5c24317cf10c0716affea85ca60d
- 0xa20d48798a34aba12eb9c7297722982d910f06c148f5e27ac59307422964a585
- 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699
- Day root
- 0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795
- Chained
- 0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4
- Published
- On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4