x402 census · api.orioncmd.com · bc9937c027a8 · JSON
POST /v1/watch
gone
OrionCMD Checks: Prepaid domain threat watch: up to 25 domains for 30 days, webhook alerts. Pay once; each domain is re-checked about once a day for 30 days. You get an HMAC-signed JSON POST at your https webhook_url (event watch.changed) when a domain or its IPv4 appears in (or leaves) ThreatCluster's high-confidence IOC feed, when a new ransomware leak-site claim names it, when its A/NS/MX reco…
Verdict: dead listing. 404/410: gone.
Facts from the catalogs
| Field | Value |
|---|---|
| URL | https://api.orioncmd.com/v1/watch |
| Method | POST |
| Price | $0.30 USDC = 300000 atomic units of 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Network | eip155:8453 (base) |
| payTo | 0x2dAF658B01e257206375798a15832E9f547D65dD |
| Seller | api.orioncmd.com |
| Catalogs | cdp (row updated 2026-10-17) |
| Listed since (lower bound) | 2026-10-17 (earliest catalog timestamp; catalogs report last-update times only) |
| Last catalog update | 2026-10-17 |
| CDP quality counters | 1 calls and 1 unique payers in 30 days, last call 2026-10-17 (catalog-reported, not verified on chain) |
| Category (keyword rule) | gift-cards/commerce |
| Templated path | no |
| x402Version in catalog | 2 |
| Service name / tags | OrionCMD Checks · ssl, tls, certificate, dns, domain |
Unpaid probe (census of 2026-10-22)
| Field | Value |
|---|---|
| Probed at | 2026-10-22T00:31:06.299Z |
| HEAD | 404 |
| GET | 404 |
| Verdict | gone 404/410: gone |
| 402 carried in | n/a |
| x402Version in the 402 | n/a |
| accepts[0] | none |
| Live amount equals catalog price | not comparable |
| Live payTo equals catalog payTo | not comparable |
| extensions.bazaar in the 402 | no |
| PAYMENT-REQUIRED header | no |
| WWW-Authenticate offer | none |
| Content type / server / CORS | application/json / cloudflare / none |
| Latency | 39 ms |
| Error | none |
No hourly re-probe has reached this resource yet; the cron covers a rotating slice of 150 per hour.
On-chain facts for the payTo (public address)
| Field | Value |
|---|---|
| Settlement history | unresolved: payTo not seen in the payer forensics (180 wallets' outbound history) or the Blockscout sample |
Declared input and output (extensions.bazaar)
{
"input": {
"body": {
"items": [
"example.com"
],
"webhook_url": "https://example.com/hooks/orion-watch"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"type": "json",
"example": {
"days": 30,
"expires_at": "2026-11-16T00:00:00.000Z",
"status": "active",
"status_url": "https://api.orioncmd.com/v1/watch/ocw_abcdefghijklmnop",
"watch_id": "ocw_abcdefghijklmnop",
"webhook_secret": "(shown once)"
}
}
}
Try it (unpaid: shows the 402)
curl -si -X POST 'https://api.orioncmd.com/v1/watch' -H 'accept: application/json' -H 'content-type: application/json' --data '{}'
The catalog declares POST. A 402 answer carries the payment requirements in the JSON body and, for x402 v2, base64 in the PAYMENT-REQUIRED header. This page never sends a payment.
Paid checks (x402, USDC on Base)
GET https://bazaar.agentexchange.work/r/bc9937c027a8/probe.json re-runs this probe right now for $0.01 and writes the result here. POST https://bazaar.agentexchange.work/featured with {"id":"bc9937c027a8"} places this resource at the top of the report and search pages for 30 days for $1.00, labelled. Unpaid requests answer 402 with the terms. Pricing.
Catalog references: agentic.market (CDP Bazaar front end) · this record as JSON · all resources on api.orioncmd.com.