← The evidence ledger
Evidence row 64507
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 11279262041b78e81c4dd9a6089ca9278ec8f97c4aa433841a8e3e0a6baccef4
- Leaf
- 0x231a26b286655cf9e14b8334ec28347385333a012ccde058ab3dd5e62bea7471
What was observed
{
"endpoints": [
[
"x402",
"https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report"
]
],
"name": "17711 Domain Security Check",
"owner_address": "0x19824cf672f28fa63024731ebc7405aa3733e0ba",
"raw": {
"accepts": [
{
"amount": "9000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"assetTransferMethod": "eip3009",
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 120,
"network": "eip155:8453",
"payTo": "0x19824cf672f28fa63024731ebc7405aa3733e0ba",
"scheme": "exact"
}
],
"description": "Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"domain": "string",
"max_age_seconds": 0
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"age_seconds": 0,
"blocklisted": [
{
"cidr": "string",
"ip": "string",
"source": "string"
}
],
"dns": {
"caa": [
"string"
],
"dnssec": false,
"name_servers": [
"string"
]
},
"domain": "string",
"findings": [
{
"code": "string",
"message": "string",
"severity": "string"
}
],
"from_cache": false,
"grade": "string",
"http": {
"discloses_version": false,
"headers_missing": [
"string"
],
"headers_present": [
"string"
],
"http_redirects_to_https": false,
"https_status": 0
},
"ip_addresses": [
"string"
],
"mail": {
"dmarc": "string",
"mta_sts": false,
"mx": [
"string"
],
"provider": "string",
"spf": "string"
},
"retrieved_at": "string",
"score": 0,
"tls": {
"days_remaining": 0,
"error": "string",
"expires_at": "string",
"issuer": "string",
"protocol": "string",
"reachable": false,
"san_count": 0,
"valid": false
}
},
"type": "json"
}
},
"schema": {
"$defs": {
"BlocklistHit": {
"properties": {
"cidr": {
"type": "string"
},
"ip": {
"type": "string"
},
"source": {
"type": "string"
}
},
"required": [
"ip",
"source",
"cidr"
],
"type": "object"
},
"DnsSecurity": {
"properties": {
"caa": {
"description": "CAA records: the certificate authorities allowed to issue for the domain.",
"items": {
"type": "string"
},
"type": "array"
},
"dnssec": {
"description": "Whether the answer for the domain is validated by DNSSEC.",
"type": "boolean"
},
"name_servers": {
"description": "Authoritative name servers (at most 8).",
"items": {
"type": "string"
},
"type": "array"
}
},
"required": [
"dnssec",
"name_servers",
"caa"
],
"type": "object"
},
"Finding": {
"properties": {
"code": {
"description": "Stable machine-readable code, e.g. `tls.expired`, `mail.dmarc_absent`, `http.hsts_missing`.",
"type": "string"
},
"message": {
"description": "What was observed and why it matters, in one sentence.",
"type": "string"
},
"severity": {
"description": "`critical`, `high`, `medium`, `low` or `info`.",
"type": "string"
}
},
"required": [
"severity",
"code",
"message"
],
"type": "object"
},
"HttpSecurity": {
"properties": {
"discloses_version": {
"description": "Whether the `Server` / `X-Powered-By` headers disclose a software version.",
"type": "boolean"
},
"headers_missing": {
"description": "The ones that are missing.",
"items": {
"type": "string"
},
"type": "array"
},
"headers_present": {
"description": "Security headers found on the HTTPS response (`strict-transport-security`,\n`content-security-policy`, `x-content-type-options`, `x-frame-options`, `referrer-policy`,\n`permissions-policy`).",
"items": {
"type": "string"
},
"type": "array"
},
"http_redirects_to_https": {
"description": "`true` when plain HTTP on port 80 redirects to HTTPS, `false` when it serves content or\nredirects elsewhere, absent when port 80 does not answer.",
"type": [
"boolean",
"null"
]
},
"https_status": {
"description": "Status of `GET https://<domain>/`.",
"format": "uint16",
"maximum": 65535,
"minimum": 0,
"type": [
"integer",
"null"
]
}
},
"required": [
"headers_present",
"headers_missing",
"discloses_version"
],
"type": "object"
},
"MailSecurity": {
"properties": {
"dmarc": {
"description": "DMARC policy: `reject`, `quarantine`, `none` or `absent`.",
"type": [
"string",
"null"
]
},
"mta_sts": {
"description": "Whether an MTA-STS policy is published (`_mta-sts` TXT record).",
"type": "boolean"
},
"mx": {
"description": "Mail servers (MX) of the website's domain, highest priority first (at most 5).",
"items": {
"type": "string"
},
"type": "array"
},
"provider": {
"description": "Mail platform deduced from the MX records (`google-workspace`, `microsoft-365`, ...).",
"type": [
"string",
"null"
]
},
"spf": {
"description": "SPF policy: `strict` (-all), `soft` (~all), `neutral` (?all), `open` (+all) or `none`.",
"type": [
"string",
"null"
]
}
},
"required": [
"mx",
"mta_sts"
],
"type": "object"
},
"TlsSecurity": {
"properties": {
"days_remaining": {
"description": "Days left before expiry (negative once expired).",
"format": "int64",
"type": [
"integer",
"null"
]
},
"error": {
"description": "Why the handshake or validation failed, when it did.",
"type": [
"string",
"null"
]
},
"expires_at": {
"description": "Certificate end of validity (UTC).",
"type": [
"string",
"null"
]
},
"issuer": {
"type": [
"string",
"null"
]
},
"protocol": {
"description": "`TLS1.3` or `TLS1.2`.",
"type": [
"string",
"null"
]
},
"reachable": {
"description": "Whether HTTPS answered on port 443.",
"type": "boolean"
},
"san_count": {
"description": "Number of host names the certificate covers.",
"format": "uint32",
"minimum": 0,
"type": "integer"
},
"valid": {
"description": "Whether the certificate chain validates for this host name.",
"type": "boolean"
}
},
"required": [
"reachable",
"valid",
"san_count"
],
"type": "object"
}
},
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"properties": {
"body": {
"properties": {
"domain": {
"description": "The domain to assess: `stripe.com`, `www.stripe.com` or a full URL (only the host is used).",
"type": "string"
},
"max_age_seconds": {
"default": null,
"description": "The oldest report you accept, in seconds. Omit it for the default (reports up to 1 hour old);\n`0` forces a fresh assessment. The response always says how old it is.",
"format": "uint64",
"minimum": 0,
"type": [
"integer",
"null"
]
}
},
"required": [
"domain"
],
"title": "GetReportRequest",
"type": "object"
},
"bodyType": {
"const": "json"
},
"method": {
"const": "POST"
},
"type": {
"const": "http"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"properties": {
"age_seconds": {
"description": "How old this report is, in seconds (0 for a fresh assessment).",
"format": "uint64",
"minimum": 0,
"type": "integer"
},
"blocklisted": {
"description": "Addresses found on a public IP blocklist (IPv4 only).",
"items": {
"$ref": "#/$defs/BlocklistHit"
},
"type": "array"
},
"dns": {
"$ref": "#/$defs/DnsSecurity"
},
"domain": {
"description": "The host that was assessed, lowercased, without scheme or path.",
"type": "string"
},
"findings": {
"description": "Everything worth acting on, most severe first.",
"items": {
"$ref": "#/$defs/Finding"
},
"type": "array"
},
"from_cache": {
"description": "`true` when this report was served from a stored result.",
"type": "boolean"
},
"grade": {
"description": "`A` (90+), `B` (80+), `C` (65+), `D` (50+), `F`.",
"type": "string"
},
"http": {
"$ref": "#/$defs/HttpSecurity"
},
"ip_addresses": {
"description": "Public IPv4/IPv6 addresses of the host (at most 8).",
"items": {
"type": "string"
},
"type": "array"
},
"mail": {
"$ref": "#/$defs/MailSecurity"
},
"retrieved_at": {
"description": "When the assessment was made (UTC).",
"type": "string"
},
"score": {
"description": "0 to 100, higher is better; derived from the findings.",
"format": "uint32",
"minimum": 0,
"type": "integer"
},
"tls": {
"$ref": "#/$defs/TlsSecurity"
}
},
"required": [
"domain",
"ip_addresses",
"blocklisted",
"dns",
"mail",
"tls",
"http",
"findings",
"score",
"grade",
"retrieved_at",
"age_seconds",
"from_cache"
],
"title": "GetReportResponse",
"type": "object"
},
"type": {
"const": "json"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-12T15:49:25.78Z",
"quality": {
"l30DaysTotalCalls": 1,
"l30DaysUniquePayers": 1,
"lastCalledAt": "2026-10-12T15:49:25.229Z"
},
"resource": "https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report",
"serviceName": "17711 Domain Security Check",
"tags": [
"domain-security",
"security-audit",
"ssl-checker",
"dmarc-spf-check",
"security-headers"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Domain security check: SSL certificate, DMARC/SPF, DNSSEC, security headers and blocklist status with a score"
}What the leaf hashes
{"body":"11279262041b78e81c4dd9a6089ca9278ec8f97c4aa433841a8e3e0a6baccef4","id":64507,"kind":"listing","method":"baseline/1","observed_us":1793025456747885,"prev":null,"subject":"x402_bazaar:https://api.17711.xyz/registry/domain-security-service/v1/domain-security/get_report","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x2319e2f45831aad98a6bfa3a3a88154de66a7b6c1ce27af3d2bbf7b41006e9c6
- 0xa3d81e0201abed3e04f04a4baaf109cccc995e5cf41af6bfe92bc2d50f559ffd
- 0xabba046da362080c35137401512ea54affcd0095b7fd6ebd419eae8a9f5f52d4
- 0xa3e4cdc1c4e70308c0d41c71460e976da255225c70220acb2712aabd374d561c
- 0x130c57c86b4b44b0ef02b85f7d856bea00e0de677ca0c96cf5e9ec52a292daca
- 0x498335fbbe2d41a594c2a9c37134f00b542f65fe2de02577c748863e2ce52af8
- 0x338c9355bf55d8715b16ab32f9e3d49eee82c33a01acca8e8a2fb17dfa66ddb7
- 0xc253a379e442a47153142684af31739fe7d58ffd97bf50a4e1caa223c884235c
- 0xa57f3ac7645f79ed7df709138b2876ebb38c3537b39edadf21a778841fd6a7e0
- 0x7836a5556966cf30ecd08c3d2e71317aa77f32634124306502017aed314b7f61
- 0xafd0058f5459c39aa93b8bea4d66dcde1a2763032ab59f971a1c12b8652db90b
- 0xac5b705d705b0f1bc42cf2ad1a7f1f197ea96178ce0704432cbb5d556e8671a4
- 0x9d75d4d3ab6219edefa04be60b32fdd56be7a7672f370a5115f02f7b098ecd27
- 0x9dfd312f3d4937f7cb144cee3987e8516f222932b4ea286605236d73cfa1ed16
- 0xc3a6a3ae44ec0da1848b16d40c45d7aac97a67352eea8df18e0f26edabea8a2f
- 0x06d71bfa7d8b41d62c8836efc2c601e1cc3772d9453596b2ae4950887f3310ca
- 0x8c756542e482157df0c36464d75c937b845e4423dbbcfad08f0cf8d5a16b9a13
- 0x20704208aa6923d6b2450ef74ede87a6e0265d46447926038fe9506e9e154b2d
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae