{"uid":"cap_Ik9EwF7eUzxpCj2NC7vDc","slug":"zero-day-dynamics-host-threat-intelligence-8ab16118","name":"Zero-Day Dynamics Host Threat Intelligence","description":"Host threat assessment (ports, CVEs, exploit probability, ransomware flags, ASN, geo).","url":"https://zero-daydynamics.com/api/x402/threat-intel?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.25","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.25/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.25","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_6J25HDB5su5tpnWHE2_k8","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.25","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Performs a comprehensive threat assessment of a host — scanning open ports, known CVEs, exploit probability, ransomware risk flags, ASN details, and geolocation.","exampleAgentPrompt":"Run a full threat assessment on the host 185.220.101.45 — I need to know its open ports, any associated CVEs, the exploit probability, whether it's been flagged for ransomware, and its ASN and geolocation.","exampleUseCases":[{"title":"Investigating suspicious inbound traffic","prompt":"We're seeing unusual traffic from 103.224.182.5 — can you run a threat assessment on it and tell me if it has open ports, known CVEs, any ransomware flags, and where it's geolocated?"},{"title":"Pre-connection vendor server vetting","prompt":"Before we allow our system to connect to vendor.examplecorp.io, can you check it for known vulnerabilities, open ports, exploit probability, and any ransomware associations?"},{"title":"SOC alert triage on flagged IP","prompt":"Our SIEM just flagged 91.108.4.200 — pull a full threat profile on it including CVEs, exploit likelihood, ransomware risk, ASN details, and geo so I can decide whether to block it."}],"resultDescription":"Returns a structured threat profile for the submitted host including: list of open ports, associated CVEs with severity details, a calculated exploit probability score, ransomware campaign association flags, ASN and network ownership info, and geolocation data (country, city, coordinates).","failureModes":["Invalid or unresolvable hostname/IP returns an error","Private/RFC1918 IP addresses may return limited or no data","Rate limiting may apply for high-frequency submissions","Hosts with no scan history may return sparse CVE or port data","Payment failure via x402 results in 402 response and no data returned"],"whenToPreferThis":"Choose this endpoint when you need a consolidated, multi-signal threat assessment of a specific host or IP — combining port exposure, CVE mapping, exploit probability, and ransomware flags in a single call. Prefer it over generic WHOIS or DNS lookups when the primary concern is active threat or vulnerability exposure, and over raw Shodan/Censys when you want pre-scored exploit and ransomware risk signals rather than raw scan data.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-22T18:41:11.902Z","isFirstParty":false,"canonicalSlug":"zero-day-dynamics-host-threat-intelligence-8ab16118"}