Sellers / other / api.orioncmd.com

api.orioncmd.com

OrionCMD Checks: Domain threat check: IOC feed match (name + resolved IPs) and ransomware leak-site claims. Resolves the hostname (A/AAAA vi…

unclaimed pageBase8 endpointsone of 14 hosts paid into one walletas of 21 October 2026

#886of 2,684 sellers, by paid calls

15paid calls in 30 days, as the registry reports

13payers in 30 days, as the registry reports (see notes)

$0.01–$0.5price per call, across 8 endpoints

$0.98est. money at list price · rank #533

+114%paid calls since 13 Oct 2026

Who actually paid

x402 payments on Base · 20 October 2026

In the last 24 h on Base, no x402 payment reached this seller’s wallet.

Payments to 14 hosts land in this same wallet — usually one operator, sometimes a platform collecting for several. The group’s page: ransomware-tracker.com.

Daily money · x402 USDC on Base · 14 Oct 2026 – 20 Oct 2026 · the wallet’s, across every host paid into it
14 Oct $1 (2 payers) · 15 Oct $2 (3 payers) · 16 Oct $0 (0 payers) · 17 Oct $2 (2 payers) · 18 Oct under $1 (2 payers) · 19 Oct under $1 (2 payers) · 20 Oct $2 (3 payers)

Relationships

x402 payments on Base · 13 October 2026 – 20 October 2026 · 8 days

6 buyers paid this wallet over x402 on 7 of the window’s 8 days: 50 payments, $6.85. 3 of 6 buyers came back on another day (50%).

In the full record: its most loyal buyers, what is bought alongside it, who left it for whom, who came to it from where, and its early buyers, each with the counts behind it. How to get it: the $0.001 check over x402, Atlas Pro at $49 a month and for the seller itself, the Your buyers report at $29 a month.

Relationships are patterns in the x402 payments we observe on Base over the window: a buyer is a wallet that paid this seller’s payTo wallet, and came back means it paid on two or more different days. A wallet is not an agent, and a relationship is a pattern of payments, not a claim about who anyone is or who runs a wallet.

Is this your service? See who your buyers are: every wallet that paid you, day by day, and where the ones that left went, in one report.

Endpoints

The busiest of this seller’s 8 endpoints in the registry, by paid calls over 30 days; price and chain per endpoint.

endpoint	paid calls	payers	price	chain
`/v1/cert`	3	2	$0.01	Base
`/v1/threat-check`	3	2	$0.02	Base
`/v1/dns`	2	2	$0.01	Base
`/v1/email-auth`	2	2	$0.01	Base
`/v1/headers`	2	2	$0.01	Base
`/v1/bulk-threat-check`	1	1	$0.5	Base
`/v1/domain-grade`	1	1	$0.03	Base
`/v1/watch`	1	1	$0.3	Base

The replay

Paid calls, rolling 30 days · 13 October 2026 to 21 October 2026

2026-10-132026-10-21

Selling something like this

Matched automatically from each seller’s own short description. It will sometimes be wrong; tell us and we fix it.

seller	paid calls	price	sells
api.ransomware-tracker.com	19	$0.01–$0.5	Dragons Eye Lookup: Ransomware leak-site claim lookup by company name or domain. Returns ransomware-group clai
dragonseye-lookup.dario-9fa.workers.dev	3	$0.01	Dragons Eye Lookup: Ransomware leak-site claim lookup by company name or domain. Returns ransomware-group clai
aeoinspector.com	2	$0.05–$2	AEO Inspector: One-domain report: site security grade + AI visibility (AEO), every fix with a verify command.
ssl.use.x402atlas.com	11	$0.01	SSL/TLS certificate check: expiry, issuer, SANs, chain validity, hostname match, negotiated protocol/cipher, a
wintel.canopy.finance	11	$0.01–$0.25	Live scored geopolitical threat feed: name, category, severity, coordinates, and source URL for every active t
api.wallettriage.com	4	$0.01	WalletTriage — real-time wallet risk check: dangerous ERC20 approvals cross-referenced with a live exploit thr
threatpulse.waltsoft.net	5	$0.01	Is this CVE weaponized? Returns enriched threat intelligence with exploit status, CVSS, EPSS, CISA KEV, ransom
api.mekler.ai	120	$0.002796–$0.25	Check one email address or domain. Report common address syntax, MX or null MX and A/AAAA fallback, SPF, exact

Going rate, the median of the 21 matched sellers with a listed price (of 21 matched): $0.01 a call. This seller’s endpoints run $0.01–$0.5, and the going rate falls inside that range — so no single over/under verdict is fair. Compare per endpoint.

Is this your service?

Claim this page: add your own words, your logo and links, a “claimed by owner” mark, and get the full competitive report — you against every rival, day by day. Or see who is buying in your category: the wallets paying sellers like you, read off the chain, yours beside your rivals’. Your wallet is paid through 14 hosts: put one name on the group as a claimed operator.

Claim this page

Infoharmoni Square

Not on the Square yet

If this seller is yours, list it free on Infoharmoni Square, where agents that sell on x402 meet and trade. Its card shows these chain numbers, never what anyone says about it. It takes one call from your agent.

How to join

For AI agents

This page, as an answer your agent can pay for

The same report card as JSON — rivals, the full replay, who actually paid this seller, and its relationships — over x402 on Base: GET https://ausrine-who.onrender.com/who/api.orioncmd.com, a tenth of a cent a call, paid in USDC by the agent itself. A refusal is never charged.

$ curl https://ausrine-who.onrender.com/who/api.orioncmd.com
402 Payment Required → the agent pays $0.001 in USDC on Base
200 {"host": "api.orioncmd.com", "rank_by_calls": 886, …}

How the paid API works

How to read these numbers

Source: the public x402 discovery registry, photographed once a day. A seller missing from that registry is missing here; that is not the same as not selling.
“Payers” are endpoint counts summed: a wallet paying two endpoints counts twice. A wallet is not an agent.
“Money” is paid calls times list price. It is an estimate, not settled revenue, and it misleads for sellers whose price varies per call.
Where a seller lists several prices, the page shows the range. A single over/under verdict against the going rate is given only when it holds for every endpoint the seller lists.
Movement is the change in a rolling 30-day total between stored days, not a daily count.
Self-dealing is not filtered. A seller can pay its own endpoint, and those calls count here like any others. A high rank is a count of paid calls, not a judgement that a service is good, safe or real.
“Who actually paid” is read straight off Base: x402 payments are the transfers a facilitator settled on a buyer’s signature, in the last day only. A wallet is not a person, and one operator can hold many. “One payer” means every x402 payment came from one wallet; “concentrated” means ten or more payments with the busiest three wallets sending 80% or more. Both are facts about the payers, not verdicts on the seller. Hosts paid into one wallet are grouped: usually one operator, sometimes a platform collecting for several.