{"question":"How do I check an IP, domain, CVE, package and software version in one call?","answer":"Call GET https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10 for $0.015. Give at least one of ip, domain, cve, package (ecosystem:name@version) and software (product@version); each one you give gets its own section with a status, its source and its date, and the answer ends with a summary of flags (for example kev_listed, vulnerable_package, eol) taken only from the fields of those sections. A malformed input is refused before any charge.","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/answers/check-infrastructure","data_as_of":"2026-10-25","facts":[{"label":"Example answer: ip section","value":"AS13335 CLOUDFLARENET; US; Tor exit: no; cloud range: Cloudflare","text":"AS13335 CLOUDFLARENET; US; Tor exit: no; cloud range: Cloudflare"},{"label":"Example answer: cve section","value":"CVE-2021-44228; CVSS 10 CRITICAL; EPSS 0.99999; CISA KEV listed: yes","text":"CVE-2021-44228; CVSS 10 CRITICAL; EPSS 0.99999; CISA KEV listed: yes"},{"label":"Example answer: package section","value":"npm:lodash@4.17.15; vulnerable: yes; 2 records; max severity HIGH","text":"npm:lodash@4.17.15; vulnerable: yes; 2 records; max severity HIGH"},{"label":"Example answer: software section","value":"python 3.8.10; cycle 3.8; supported: no; end of life 2024-10-07","text":"python 3.8.10; cycle 3.8; supported: no; end of life 2024-10-07"},{"label":"Example answer: summary","value":"flags: kev_listed, kev_ransomware_use, cvss_critical, vulnerable_package, eol; complete: yes","text":"flags: kev_listed, kev_ransomware_use, cvss_critical, vulnerable_package, eol; complete: yes"}],"tables":[{"title":"Query parameters","columns":["Parameter","Needed","Meaning"],"rows":[{"name":"ip","needed":"at least one of the five","meaning":"public IPv4 or IPv6 address: ASN, Tor exit, cloud range"},{"name":"domain","needed":"at least one of the five","meaning":"host name: HTTP status, TLS, robots.txt"},{"name":"cve","needed":"at least one of the five","meaning":"CVE id: CVSS, EPSS, CISA KEV"},{"name":"package","needed":"at least one of the five","meaning":"ecosystem:name@version, e.g. npm:lodash@4.17.15"},{"name":"software","needed":"at least one of the five","meaning":"product@version, e.g. python@3.8.10 (end of life)"}]}],"sources":[{"name":"iptoasn.com IP-to-ASN database","url":"https://iptoasn.com/","as_of":null,"age_days":null,"stale":false,"note":"ASN, AS name and country: iptoasn.com IP-to-ASN database (public domain, PDDL v1.0), https://iptoasn.com/"},{"name":"Tor Project bulk exit list","url":"https://check.torproject.org/torbulkexitlist","as_of":null,"age_days":null,"stale":false,"note":"Tor exit list: Tor Project bulk exit list, https://check.torproject.org/torbulkexitlist (Tor Project data is released under CC0)"},{"name":"Public cloud IP ranges (AWS, Google Cloud, Cloudflare, Oracle)","url":"https://ip-ranges.amazonaws.com/ip-ranges.json","as_of":null,"age_days":null,"stale":false,"note":"AWS IP ranges: Amazon Web Services, https://ip-ranges.amazonaws.com/ip-ranges.json Google Cloud IP ranges: Google, https://www.gstatic.com/ipranges/cloud.json Cloudflare IP ranges: Cloudflare, https://www.cloudflare.com/ips/ Oracle Cloud IP ranges: Oracle, https://docs.oracle.com/iaas/tools/public_ip_ranges.json"},{"name":"CVE.org (MITRE) CVE records","url":"https://www.cve.org/Legal/TermsOfUse","as_of":null,"age_days":null,"stale":false,"note":"CVE® record, Copyright © 1999-2026, The MITRE Corporation. Used under the CVE Program license (perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, sublicense and distribute CVE): https://www.cve.org/Legal/TermsOfUse"},{"name":"NVD (NIST)","url":"https://nvd.nist.gov/developers/start-here","as_of":null,"age_days":null,"stale":false,"note":"This product uses data from the NVD API but is not endorsed or certified by the NVD."},{"name":"FIRST EPSS","url":"https://www.first.org/epss/","as_of":null,"age_days":null,"stale":false,"note":"EPSS scores by FIRST / Empirical Security (https://www.first.org/epss/), free of charge."},{"name":"CISA Known Exploited Vulnerabilities Catalog","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","as_of":null,"age_days":null,"stale":false,"note":"CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS."},{"name":"OSV.dev","url":"https://osv.dev","as_of":null,"age_days":null,"stale":false,"note":"Vulnerability records from OSV.dev (https://osv.dev), aggregated from the GitHub Advisory Database (CC-BY 4.0), PyPI Advisory Database (CC-BY 4.0), Go Vulnerability Database (CC-BY 4.0), RustSec (CC0 1.0), OSS-Fuzz (CC-BY 4.0), OpenSSF Malicious Packages (Apache 2.0), Global Security Database (CC0 1.0) and NVD (public domain). Each record names its source and licence; titles are shortened and reformatted by P0. Records under share-alike or non-commercial licences (Ubuntu, Alpine, Chainguard/Wolfi) and records of unverified origin are not included."},{"name":"endoflife.date","url":"https://endoflife.date","as_of":null,"age_days":null,"stale":false,"note":"End-of-life data from endoflife.date (https://endoflife.date), MIT licence (https://github.com/endoflife-date/endoflife.date/blob/master/LICENSE)."}],"not_loaded":[],"notes":["The sections run in parallel, each with its own 15-second deadline. When every requested section fails the call is refused (404 when all are not found, such as an unknown CVE; otherwise 503), before any charge; when only some fail, the others are returned and the failed ones carry their status and a flag.","Flags are facts as the sources published them (a CVE listed in the CISA KEV catalog, a package version with OSV records, a version past its end-of-life date), not a verdict on your systems and not remediation advice.","A site is fetched from the site itself and its robots.txt is obeyed. EPSS is an estimated probability of exploitation, not a certainty.","Not legal, financial or security advice; P0 is not affiliated with or endorsed by any of the publishers named here."],"request":{"method":"GET","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10","query":{"ip":"1.1.1.1","cve":"CVE-2021-44228","package":"npm:lodash@4.17.15","software":"python@3.8.10"},"price_usd":0.015,"curl":"curl -i \"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra?ip=1.1.1.1&cve=CVE-2021-44228&package=npm:lodash@4.17.15&software=python@3.8.10\"","note":"The first call without payment answers HTTP 402 with the exact price and the payment requirements; pay and retry with an x402 or MPP client (see /integrations)."},"example_answer":{"path":"/check/infra","query":{"ip":"1.1.1.1","cve":"CVE-2021-44228","package":"npm:lodash@4.17.15","software":"python@3.8.10"},"body":{"query":{"ip":"1.1.1.1","cve":"CVE-2021-44228","package":"npm:lodash@4.17.15","software":"python@3.8.10"},"summary":{"flags":["kev_listed","kev_ransomware_use","cvss_critical","vulnerable_package","eol"],"sections":{"ip":"ok","cve":"ok","package":"ok","software":"ok"},"complete":true},"ip":{"status":"ok","ip":"1.1.1.1","version":4,"asn":13335,"as_name":"CLOUDFLARENET","country":"US","tor_exit":{"listed":false,"list_date":"2026-10-25T09:05:04Z"},"cloud":{"provider":"cloudflare","provider_name":"Cloudflare","cidr":"1.1.1.0/24"},"source":"iptoasn.com IP-to-ASN + Tor Project exit list + cloud IP ranges","source_url":"https://iptoasn.com/","as_of":"2026-10-25T09:21:20.000Z","attribution":["iptoasn.com data: Public Domain (PDDL v1.0)","Tor Project data: CC0"]},"cve":{"status":"ok","id":"CVE-2021-44228","cvss":{"version":"3.1","base_score":10,"severity":"CRITICAL","provider":"NVD"},"severity":"CRITICAL","epss":{"score":0.99999,"percentile":1,"date":"2026-10-24"},"kev":{"listed":true,"date_added":"2021-12-10","due_date":"2021-12-24","known_ransomware_use":"Known","vendor":"Apache","product":"Log4j2"},"source":"CVE.org + NVD + FIRST EPSS + CISA KEV","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-44228","as_of":"2026-10-25T09:00:00.000Z","attribution":"CISA Known Exploited Vulnerabilities Catalog, CC0 1.0; not an endorsement by CISA or DHS."},"package":{"status":"ok","ecosystem":"npm","name":"lodash","version":"4.17.15","vulnerable":true,"record_count":2,"max_severity":"HIGH","malicious_reports":0,"vulnerabilities":[{"id":"GHSA-35jh-r3h4-6jhm","aliases":["CVE-2021-23337"],"summary":"Command Injection in lodash","severity":"HIGH","fixed_in":["4.17.21"],"license":"CC-BY-4.0"}],"returned":1,"truncated":true,"source":"OSV.dev","source_url":"https://osv.dev/list?ecosystem=npm&q=lodash","as_of":"2026-10-25T09:00:00.000Z","attribution":"Vulnerability records from OSV.dev (https://osv.dev), per-record licences as shown."},"software":{"status":"ok","product":"python","version":"3.8.10","matched_cycle":"3.8","supported":false,"release":{"cycle":"3.8","is_eol":true,"eol_date":"2024-10-07","days_until_eol":-383,"supported":false},"newest_cycle":"3.15","source":"endoflife.date API v1","source_url":"https://endoflife.date/python","as_of":"2026-10-25T09:00:00.000Z","attribution":"endoflife.date, MIT licence."},"as_of":"2026-10-25T09:21:30.000Z","note":"Facts as each named source published them at the section's as_of time; flags are derived only from those fields and are not remediation advice or a security verdict."},"label":"Recorded example answer of /check/infra: the example published in the route's own definition, not a live call. Its dates are the dates of that recording."},"full_answer":[{"path":"/check/infra","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/check/infra","price_usd":0.015,"what":"Infrastructure check (IP, site, CVE, package, software): the exact route this page describes"},{"path":"/vuln/cve","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/vuln/cve","price_usd":0.005,"what":"only the CVE triage (CVSS, EPSS, CISA KEV)"},{"path":"/ip/passport","url":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/ip/passport","price_usd":0.003,"what":"only the IP record (ASN, Tor exit, cloud range)"}],"related":["https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/answers/cve-epss-kev-priority","https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/answers/check-counterparty","https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/answers/pay-api-with-x402"],"license":"https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/terms","operator":"dev Mike","version":"2026-10-25.2"}