Evidence row 67921

Observed 26 Oct 2026, 14:37 UTC, by baseline/1.

Kind: listing
About: source_record x402_bazaar:https://api.orioncmd.com/v1/bulk-threat-check
Recorded: 26 Oct 2026, 14:37 UTC
Previous row: None: the first of its kind about this subject
Body SHA-256: c73149ee8755dcf78ee05fe4fbe2a6d346359b5596a6207c02fc9b73d836c7fa
Leaf: 0xa73828808803e100d41cf56fe7957ef5ad6597e6a5e009a19b2a8fa1f9ab2420

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.orioncmd.com/v1/bulk-threat-check"
    ]
  ],
  "name": "OrionCMD Checks",
  "owner_address": "0x2daf658b01e257206375798a15832e9f547d65dd",
  "raw": {
    "accepts": [
      {
        "amount": "500000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0x2dAF658B01e257206375798a15832E9f547D65dD",
        "scheme": "exact"
      }
    ],
    "description": "OrionCMD Checks: Bulk IOC check: up to 100 domains or IPv4 (domains resolved, IPs matched too). Up to 100 comma- or newline-separated domains, URLs or IPv4 addresses in ?q=. Each domain is resolved (A) and the name, parent domains and resolved IPv4 are matched against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly). No ransomware-claim lookups (use /v1/threat-check). Stale feed answers 503 before payment.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "q": "example.com,203.0.113.7"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "item_count": 2,
              "listed_count": 0,
              "report": "bulk_threat_check",
              "results": [
                {
                  "item": "example.com",
                  "listed": false,
                  "matches": [],
                  "resolved_ipv4": [
                    "93.184.215.14"
                  ],
                  "type": "domain"
                }
              ]
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "q": {
                      "description": "Up to 100 domains/IPv4, comma separated",
                      "type": "string"
                    }
                  },
                  "required": [
                    "q"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-17T16:45:44.018Z",
    "quality": {
      "l30DaysTotalCalls": 1,
      "l30DaysUniquePayers": 1,
      "lastCalledAt": "2026-10-17T16:45:43.459Z"
    },
    "resource": "https://api.orioncmd.com/v1/bulk-threat-check",
    "serviceName": "OrionCMD Checks",
    "tags": [
      "ssl",
      "tls",
      "certificate",
      "dns",
      "domain"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "OrionCMD Checks: Bulk IOC check: up to 100 domains or IPv4 (domains resolved, IPs matched too). Up to 100 comma- or newline-separated domains, URLs or IPv4 addresses in ?q=. Each domain is resolved (A) and the name, parent domains and resolved IPv4 are matched against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly). No ransomware-claim lookups (use /v1/threat-check). Stale feed answers 503 before payment."
}

What the leaf hashes

{"body":"c73149ee8755dcf78ee05fe4fbe2a6d346359b5596a6207c02fc9b73d836c7fa","id":67921,"kind":"listing","method":"baseline/1","observed_us":1793025464943246,"prev":null,"subject":"x402_bazaar:https://api.orioncmd.com/v1/bulk-threat-check","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

0xa737fc73aab5b0e47a6d342901b5d1852b0092bf792ffbbabde433ebddfe8fbc
0x1db6eb17e52190b60980dd8194f8bb9b347ba6a6158053056327050cf45e7864
0x91fa9724c02e784bf179ee38969f72a8ea07673b2efc8a0d786772e58a1f4b9e
0xcdb279677046c910fb16e266903992f278ccff689f151226557fc1aee21f43bc
0x316861db2687ebe8205c39b3d37eff3b85a932a64c37e7cc009af073ecc81f9e
0x143b444b8a347122e325c923f55b9b5a9801863367030882b2a6ca2aeca2e2e9
0x4f55db5b337d114a5d560779fc1b7e790081231adfa2c31d52e5f795b9e8a0bc
0x6cb7ceb6a95200a4b87266e92db738037921d8ac3c18f4dd0fb0aa58a2bfa091
0x8a42d9ca233eeab189f3f26e997112580bb65b31f6fb467e8ac2dfd68ea759fb
0xc6522fc337627b139352697525c95afa35480881a993f2a3b3ab321aa6e7ac50
0xfd7db9a5ff472cfefafacbeb7f7f7dc6fc7e28e7e0d99e3b79d231f0d5f46aee
0x1e464fcb484a1e782f9fe44be5118a9de934eb533c96ba10fc7d20e3a3e4711c
0x292ebdce6b8d3d7ef08ad646a0fd97dee9313ab55c1a350807d9f3013794c37a
0x428106f4ae4ec142f17aebf6fa50935242f8d3f1c211cf95d6351d03d11da2b7
0x62a900133713919f4eed33d8336876b7a6d538233b8a4f3ed03b29aa44f5bad0
0x1ac20d30773e1f4f2f811540e9a99b5cca9177c9e2e029acc0d80cf3f1d11f0f
0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root: 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained: 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published: On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON