{"slug":"api-orioncmd-com-v1-threat-check-a0d845","title":"OrionCMD Checks","host":"api.orioncmd.com","method":"GET","resource":"https://api.orioncmd.com/v1/threat-check","category":"other","description":"OrionCMD Checks: Domain threat check: IOC feed match (name + resolved IPs) and ransomware leak-site claims. Resolves the hostname (A/AAAA via Cloudflare DoH), matches the hostname, its parent domains and resolved IPv4 addresses against ThreatCluster's high-confidence 30-day IOC feed (cached, refresh","price_listed":0.02,"price_asked":0.02,"state":"answering","state_label":"Answering","checks_7d":1,"answered_7d":1,"latency_ms_median":758,"reported_calls_30d":1,"reported_payers_30d":1,"networks":["eip155:8453"],"badge":"unverified","paid_checks_7d":0,"paid_ok_7d":0,"example_input":{"method":"GET","queryParams":{"domain":"example.com"},"type":"http"},"output_schema":{"$schema":"https://json-schema.org/draft/2020-12/schema","properties":{"input":{"additionalProperties":false,"properties":{"method":{"enum":["GET"],"type":"string"},"queryParams":{"properties":{"domain":{"description":"Hostname or URL, e.g. example.com","type":"string"}},"required":["domain"],"type":"object"},"type":{"const":"http","type":"string"}},"required":["type","method"],"type":"object"},"output":{"properties":{"example":{"type":"object"},"type":{"type":"string"}},"required":["type"],"type":"object"}},"required":["input"],"type":"object"},"history":[{"day":"2026-10-18","reachable":true,"status":402,"valid_402":true,"asked_usdc":0.02,"price_match":true,"latency_ms":758,"error":null}],"description_full":"OrionCMD Checks: Domain threat check: IOC feed match (name + resolved IPs) and ransomware leak-site claims. Resolves the hostname (A/AAAA via Cloudflare DoH), matches the hostname, its parent domains and resolved IPv4 addresses against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly), and looks up ransomware leak-site claims naming the domain from commercially reusable sources (via Dragons Eye). Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat","last_updated":"2026-10-18T16:15:42.863Z","schemes":["exact"]}