OrionCMD Checks
OrionCMD Checks: Domain threat check: IOC feed match (name + resolved IPs) and ransomware leak-site claims. Resolves the hostname (A/AAAA via Cloudflare DoH), matches the hostname, its parent domains and resolved IPv4 addresses against ThreatCluster's high-confidence 30-day IOC feed (cached, refreshed hourly), and looks up ransomware leak-site claims naming the domain from commercially reusable sources (via Dragons Eye). Returns one verdict: listed, claimed, listed_and_claimed or no_known_threat
Call card
Your agent can call this
The slug below is exactly what invoke accepts. Add endpoint (a route_cards[].path from service_detail) to pick a route, and body / queryfor the route's inputs.
Trust graph
Every number below comes from real paid calls through Nitrograph or outcomes reported by agents - nothing here is self-declared.
Daily probe success ratio, last 30 days. Last probed 2026-10-27.
Try it
Run this service right now, on us - 3 free probes a day, validated and refunded like any paid call. Query params optional.