← The evidence ledger
Evidence row 70126
Observed , by baseline/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://api.webintel-api.workers.dev/api/security/cors-misconfig
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 70537d9054708792ba6b066cb5e15222035f60ce4788e96ded6e2edeacbf345e
- Leaf
- 0x823c7934dafe672c2de4916179c4b2374c617ad12f5a064196d678f2e62fbf90
What was observed
{
"endpoints": [
[
"x402",
"https://api.webintel-api.workers.dev/api/security/cors-misconfig"
]
],
"name": "SiteCheck Web Intel",
"owner_address": "0xb8491f953e6860d3b5840b73c60883ff099ceafa",
"raw": {
"accepts": [
{
"amount": "2000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
"extra": {
"feePayer": "D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM"
},
"maxTimeoutSeconds": 300,
"network": "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp",
"payTo": "J8vnmBx4pS1X7UUBTfz1yWBKiw69Dj2yRGRHDaXBRdhR",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0x3600000000000000000000000000000000000000",
"extra": {
"name": "USDC",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:5042",
"payTo": "0xa4751fCAa83c9669cfe507bb6807507729839be3",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:137",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:42161",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0x754704Bc059F8C67012fEd69BC8A327a5aafb603",
"extra": {
"name": "USDC",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:143",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0x79A02482A880bCE3F13e09Da970dC34db4CD24d1",
"extra": {
"name": "USDC",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:480",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0x0b2C639c533813f4Aa9D7837CAf62653d097Ff85",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:10",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "2000",
"asset": "0xcebA9300f2b948710d2653dD7B07f33A8B32118C",
"extra": {
"name": "USDC",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:42220",
"payTo": "0xb8491F953e6860D3b5840b73c60883Ff099ceAfA",
"scheme": "exact"
},
{
"amount": "20000",
"asset": "CCW67TSZV3SSS2HXMBQ5JFGCKJNXKZM7UQUWUZPUTHXSTZLEO7SJMI75",
"extra": {
"areFeesSponsored": true
},
"maxTimeoutSeconds": 300,
"network": "stellar:pubnet",
"payTo": "GBIX2M7HNL2G2VYU5KZ446OSN55ZWHS3WBEUP4JTLS6R34VXIGTDOAFI",
"scheme": "exact"
},
{
"amount": "0.002",
"asset": "524C555344000000000000000000000000000000",
"extra": {
"areFeesSponsored": false,
"invoiceId": "98d9f2f5-f675-40fd-bdec-09f8bf2da637",
"issuer": "rMxCKbEDwqr76QuheSUMdEGf4B9xJ8m5De",
"sourceTag": 804681468
},
"maxTimeoutSeconds": 300,
"network": "xrpl:0",
"payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
"scheme": "exact"
},
{
"amount": "1552",
"asset": "XRP",
"extra": {
"areFeesSponsored": false,
"invoiceId": "9e142a98-b812-4d4b-ace1-35766d372e65",
"sourceTag": 804681468
},
"maxTimeoutSeconds": 300,
"network": "xrpl:0",
"payTo": "rDxNZCDfLxUzeMWGGwsY3sjQT8eoZCf8UJ",
"scheme": "exact"
}
],
"description": "Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin.",
"extensions": {
"bazaar": {
"info": {
"input": {
"method": "GET",
"queryParams": {
"domain": "httpbin.org"
},
"type": "http"
},
"output": {
"example": {
"allowCredentials": true,
"allowOrigin": "https://sitecheck-probe.invalid",
"checkedAt": "2026-10-23T09:38:35.575Z",
"domain": "httpbin.org",
"finalUrl": "https://httpbin.org/",
"httpStatus": 200,
"probeOrigin": "https://sitecheck-probe.invalid",
"source": "https://httpbin.org/",
"verdict": "reflects-origin-with-credentials"
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"method": {
"enum": [
"GET"
],
"type": "string"
},
"queryParams": {
"properties": {
"domain": {
"description": "Domain name such as httpbin.org (required)",
"type": "string"
}
},
"required": [
"domain"
],
"type": "object"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
}
},
"lastUpdated": "2026-10-24T01:47:32.264Z",
"quality": {
"l30DaysTotalCalls": 2,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-24T01:47:32.138Z"
},
"resource": "https://api.webintel-api.workers.dev/api/security/cors-misconfig",
"serviceName": "SiteCheck Web Intel",
"tags": [
"security",
"cors",
"misconfig"
],
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Checks how a site's home page answers a cross-origin request from a made-up origin: whether it echoes that origin back, sends a wildcard (*), and whether credentials are allowed with it. Echoing an arbitrary origin together with credentials is the risky case. One GET of the home page; it does not test API routes or the null origin."
}What the leaf hashes
{"body":"70537d9054708792ba6b066cb5e15222035f60ce4788e96ded6e2edeacbf345e","id":70126,"kind":"listing","method":"baseline/1","observed_us":1793025479880134,"prev":null,"subject":"x402_bazaar:https://api.webintel-api.workers.dev/api/security/cors-misconfig","subject_kind":"source_record"}Proof
Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.