Evidence row 67929

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://api.orioncmd.com/v1/threat-check"
    ]
  ],
  "name": "OrionCMD Checks",
  "owner_address": "0x2daf658b01e257206375798a15832e9f547d65dd",
  "raw": {
    "accepts": [
      {
        "amount": "20000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 120,
        "network": "eip155:8453",
        "payTo": "0x2dAF658B01e257206375798a15832E9f547D65dD",
        "scheme": "exact"
      }
    ],
    "description": "Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "domain": "example.com"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "dns": {
                "a": [
                  "93.184.215.14"
                ],
                "aaaa": []
              },
              "host": "example.com",
              "ioc": {
                "feed": {
                  "confidence": "high",
                  "indicators_in_feed": 831,
                  "refreshed_at": "2026-10-17T06:07:00.000Z",
                  "window_hours": 720
                },
                "listed": false,
                "matches": []
              },
              "ransomware_claims": {
                "claim_count": 0,
                "claims": [],
                "found": false,
                "label": "unverified claim from a criminal leak site"
              },
              "summary": [
                "Not in ThreatCluster's high-confidence 30-day IOC feed (hostname, parent domains, resolved IPv4).",
                "No ransomware leak-site claim found for example.com in commercially reusable sources."
              ],
              "verdict": "no_known_threat"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "domain": {
                      "description": "Hostname or URL, e.g. example.com",
                      "type": "string"
                    }
                  },
                  "required": [
                    "domain"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-24T15:27:35.07Z",
    "quality": {
      "l30DaysTotalCalls": 4,
      "l30DaysUniquePayers": 3,
      "lastCalledAt": "2026-10-24T15:27:34.337Z"
    },
    "resource": "https://api.orioncmd.com/v1/threat-check",
    "serviceName": "OrionCMD Checks",
    "tags": [
      "threat-check",
      "ioc",
      "malicious-domain",
      "ransomware",
      "domain-reputation"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Is this domain malicious or named by ransomware? Domain threat check. $0.02 USDC on Base per call. Matches the hostname, parent domains and resolved IPv4 against ThreatCluster's high-confidence 30-day IOC feed and looks up ransomware leak-site claims. Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat. Don't use this for many domains; use /v1/bulk-threat-check."
}

What the leaf hashes

{"body":"bb4a06ef7f0f55a9bc3f59e5068dd7abdeb4ac99dfb1be948f88457767549385","id":67929,"kind":"listing","method":"baseline/1","observed_us":1793025465372703,"prev":null,"subject":"x402_bazaar:https://api.orioncmd.com/v1/threat-check","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of 2026-10-26 (296695 rows).

1. 0x7854b8ccbbd7152a9489c3ecb449ca4e3dc19b6c468e187f1154c716d5afe201
2. 0x141c6ffa7d821eb9a647b1cd9833edc37bc7c33217def83bd7ae77e1f1af09d9
3. 0x8386c1f4b14743b825d69b696194b92b2a01e28b3008e0e8873b0881a2a38bf9
4. 0xc777f26623aa20e1370fa46aa8acabb3a948e04c555e78e50df2f32822da8872
5. 0x4d8f3f131ea39173c78e58bf8d48bbf498ffefdaaec2cbe7fadfedacebebcd14
6. 0xf7eaff0276c030568ca337448f722073559340b1c06a5a1cc3cb6c50d360ce42
7. 0xc32c67f9d33d099a16838ff0b8c22a5ac5b77965ac5dbded35c1b123cb1612de
8. 0xf1030f4c436ff2032cdc14d36b348f49af7e42499f7afe110df6e30d9b87eed9
9. 0x9521d37f8b8c8e395603f36112a73daa4080bf6f7267ab8c5b2919f74d02cece
10. 0x82de673d7b0aea740891d4dba7c3425d4070f8237d8c7357e6034c5ccc9ee734
11. 0x15ee99441401ec9e8c72aaf51bd6c821ec4e6b18bc91225370e5c19c4c8e8448
12. 0xdcba35a3346e9c4b9ae1267cc5995998c2c33da9ef658e955eaae1589ebbdcad
13. 0x01c95624b1f2385ef774ee258a9ae58a4df07a1bdaa829de84e1d5201f3f39c2
14. 0x7721d38652b6444b18e1193824e50490ade04851ce6221771f6e374c4527d80f
15. 0x15039087bf60ae9b06b756ec3cbc299760e59923a438bbd91e34d105186db0ed
16. 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
17. 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
18. 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
19. 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a

Day root

0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8

Chained

0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a

Published

On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae