{ "generated_at": "2026-10-27T19:05:06Z", "run_started_at": "2026-10-27T18:59:42Z", "run_seconds": 324.5, "generator": { "script": "build.py", "detectors": [ "zero/x402server/dnsaudit.audit", "zero/x402server/product.audit" ], "stdlib_only": true, "host_sleep_s": 0.4, "per_target_timeout_s": 30.0, "per_host_budget_s": 90.0, "retries": 1, "max_body_bytes": 65536, "zone_walk_labels": 4, "shared_platform_suffixes": [ "workers.dev", "onrender.com", "railway.app", "up.railway.app", "vercel.app", "val.run", "pages.dev", "netlify.app", "fly.dev", "herokuapp.com", "deno.dev", "ngrok-free.app", "ngrok.io", "replit.dev", "glitch.me", "trycloudflare.com" ], "adjustments": [ "dnsaudit is called once per zone found by walking the host up until NS answers, not once per subdomain hostname", "402, 405 and 400 on a plain GET are counted as expected challenge, method and body signals, not as anomalies" ] }, "input": { "files_scanned": 737, "records": 737, "status_402": 91, "duplicates_collapsed": 5, "unique_endpoints": 86, "hosts": 52, "hosts_measured": 52, "collections": [ "x402-hunt-2026-10-27/post", "x402-hunt-2026-10-27/full" ] }, "totals": { "endpoints_measured": 86, "endpoints_failed": 0, "endpoints_with_anomalies": 86, "hosts_measured": 52, "hosts_unresolved": 0, "zones": 46, "zones_audited": 46, "zones_shared_platform": 10, "seller_zones": 36, "seller_zones_with_findings": 36, "expected": { "expected_payment_challenge": 74, "expected_method_not_allowed": 8, "expected_body_required": 1 }, "shared_platform_hosts": 15 }, "unresolved_hosts": [], "anomaly_counts": [ { "id": "missing_content_security_policy", "count": 75, "detail": "header absent on final hop" }, { "id": "cors_wildcard", "count": 59, "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_strict_transport_security", "count": 37, "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "count": 36, "detail": "header absent on final hop" }, { "id": "missing_cache_control", "count": 29, "detail": "no Cache-Control on final hop" }, { "id": "slow_p95", "count": 8, "detail": "p95 2819.1 ms" }, { "id": "server_version_disclosed", "count": 6, "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_content_type", "count": 3, "detail": "no Content-Type on final hop" }, { "id": "tls_error", "count": 1, "detail": "https requested but no TLS session" }, { "id": "unreachable", "count": 1, "detail": "TimeoutError: The read operation timed out" } ], "finding_counts": [ { "id": "no_dnssec", "count": 41, "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "count": 40, "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" }, { "id": "no_caa", "count": 36, "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dmarc", "count": 25, "severity": "high", "detail": "no DMARC record at _dmarc.kloudle.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@kloudle.dev and tighten to p=reject" }, { "id": "no_spf", "count": 21, "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "spf_softfail", "count": 21, "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_mx", "count": 19, "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "dmarc_p_none", "count": 10, "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "dmarc_no_rua", "count": 9, "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@2s.io" }, { "id": "nameservers_share_subnet", "count": 2, "severity": "low", "detail": "nameservers resolve into the same /24: dns1.p01.nsone.net., dns3.p01.nsone.net.", "fix": "use a second provider so one outage cannot take the zone down" }, { "id": "spf_neutral", "count": 1, "severity": "high", "detail": "SPF ends in ?all (neutral): SPF asserts nothing", "fix": "use -all" } ], "zones": [ { "zone": "2s.io", "shared_platform": false, "hosts": [ "2s.io" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 3, "info": 1 }, "findings": [ { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@2s.io" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.150.1.1" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns-1469.awsdns-55.org.", "ns-1557.awsdns-02.co.uk.", "ns-471.awsdns-58.com.", "ns-680.awsdns-21.net." ], "mx": [ "1 smtp.google.com." ], "txt": [ "google-site-verification=Brwvr2hDOdX5TnHNeQGJqSBOQ6rgsKdY5tgu76OIrYQ", "smithery-verification=2d2ee8e6e80a13e0d4e0c3475a095c69bb34030fbd07f7873565bd0061a7cc50" ], "dmarc": [ "v=DMARC1; p=none;" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "a3migos.workers.dev", "shared_platform": true, "hosts": [ "grokbot-dashboard.a3migos.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.a3migos.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@a3migos.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "abdullah.ns.cloudflare.com.", "treasure.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "agents-trust.com", "shared_platform": false, "hosts": [ "api.agents-trust.com" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.agents-trust.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@agents-trust.com and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.153.172", "104.21.32.182" ], "aaaa": [ "2606:4700:3032::ac43:99ac", "2606:4700:3031::6815:20b6" ], "dnssec_ad": false, "ns": [ "ada.ns.cloudflare.com.", "mustafa.ns.cloudflare.com." ], "mx": [ "56 route2.mx.cloudflare.net.", "76 route3.mx.cloudflare.net.", "9 route1.mx.cloudflare.net." ], "txt": [ "google-site-verification=DRUBHfrghwu9QOuChJ6W47Kun76M6A4U1er-rfwj2A8", "google-site-verification=LYr6EBlRnbYYHWkqLcyKwsbO-uFXfmzsua8MlhD_6cA", "v=MCPv1; k=ed25519; p=9z8+3h0Aekd2l8L1MoT/wlrrrI8IIBDqfq965hDzTx0=", "v=spf1 include:_spf.mx.cloudflare.net ~all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "agentshare.dev", "shared_platform": false, "hosts": [ "agentshare.dev" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.agentshare.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@agentshare.dev and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.33.185", "172.67.191.64" ], "aaaa": [ "2606:4700:3033::6815:21b9", "2606:4700:3036::ac43:bf40" ], "dnssec_ad": false, "ns": [ "igor.ns.cloudflare.com.", "luciana.ns.cloudflare.com." ], "mx": [ "43 route3.mx.cloudflare.net.", "63 route1.mx.cloudflare.net.", "67 route2.mx.cloudflare.net." ], "txt": [ "google-site-verification=enTzouyybfn09ln3vP9-TDLR2Mt4aUSFbBRo0Hh9oa0", "v=spf1 include:_spf.mx.cloudflare.net ~all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "aomi.dev", "shared_platform": false, "hosts": [ "api-staging.aomi.dev" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.162.122", "104.21.49.119" ], "aaaa": [ "2606:4700:3035::6815:3177", "2606:4700:3031::ac43:a27a" ], "dnssec_ad": false, "ns": [ "coby.ns.cloudflare.com.", "vita.ns.cloudflare.com." ], "mx": [ "26 route1.mx.cloudflare.net.", "31 route2.mx.cloudflare.net.", "7 route3.mx.cloudflare.net." ], "txt": [ "v=spf1 include:_spf.mx.cloudflare.net ~all" ], "dmarc": [ "v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "argosbot.io", "shared_platform": false, "hosts": [ "bridge-api.argosbot.io" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 1, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.argosbot.io", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@argosbot.io and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.150.16.65", "216.150.16.129" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns1.vercel-dns.com.", "ns2.vercel-dns.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ] } } }, { "zone": "babyblueviper.com", "shared_platform": false, "hosts": [ "api.babyblueviper.com" ], "dns": { "ok": true, "severity_counts": { "high": 2, "low": 2, "info": 1 }, "findings": [ { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "3.231.35.217" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns34.domaincontrol.com.", "ns33.domaincontrol.com." ], "mx": [], "txt": [ "v=MCPv1; k=ed25519; p=6V5E4hsKxbhJx5edr3DtaRgTUO04HH4jtL9radSJXkk=", "google-site-verification=xyGFpJ_UFvjH3euebXirQ0aZGZ6dLAk_EZ0uamGfSiY", "tiktok-developers-site-verification=lWPx25djPLID0Lu5SYtRjzmUrs0hTad8" ], "dmarc": [ "v=DMARC1; p=reject; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "beliefstate.ai", "shared_platform": false, "hosts": [ "beliefstate.ai" ], "dns": { "ok": true, "severity_counts": { "low": 2, "info": 1 }, "findings": [ { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@beliefstate.ai" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.82.235", "172.67.209.8" ], "aaaa": [ "2606:4700:3036::ac43:d108", "2606:4700:3037::6815:52eb" ], "dnssec_ad": true, "ns": [ "simon.ns.cloudflare.com.", "carlane.ns.cloudflare.com." ], "mx": [ "32 route3.mx.cloudflare.net.", "72 route1.mx.cloudflare.net.", "74 route2.mx.cloudflare.net." ], "txt": [ "v=spf1 include:_spf.mx.cloudflare.net include:foundermail.mx -all", "google-site-verification=CxCm3YOEkSFiah1b-Dq9pNpRMWZd1ZZSbLpuxFVBwLY", "trustpilot-one-time-verification-id=0d50f6d5-05ea-4280-84e8-0e2436c30ae3", "ahrefs-site-verification_3ed94e86ed8c263d06143af005af1fc2af98dbaa7a9399aea8c32a1185cc8bc4" ], "dmarc": [ "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "blockchhub.link", "shared_platform": false, "hosts": [ "keyring-agent.blockchhub.link" ], "dns": { "ok": true, "severity_counts": { "high": 1, "low": 3 }, "findings": [ { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@blockchhub.link" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" } ], "evidence": { "a": [ "104.21.41.235", "172.67.196.184" ], "aaaa": [ "2606:4700:3037::6815:29eb", "2606:4700:3030::ac43:c4b8" ], "dnssec_ad": false, "ns": [ "norah.ns.cloudflare.com.", "tate.ns.cloudflare.com." ], "mx": [], "txt": [ "v=spf1 -all" ], "dmarc": [ "v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;" ], "dkim_selectors_found": [ "default", "google", "selector1", "selector2", "k1", "s1", "mail" ], "caa": [] } } }, { "zone": "bsvkey.com", "shared_platform": false, "hosts": [ "inference.bsvkey.com" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.bsvkey.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@bsvkey.com and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "nameservers_share_subnet", "severity": "low", "detail": "nameservers resolve into the same /24: dns1.p01.nsone.net., dns3.p01.nsone.net.", "fix": "use a second provider so one outage cannot take the zone down" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "52.74.6.109", "13.215.239.219" ], "aaaa": [ "2406:da18:b3d:e201::258", "2406:da18:b3d:e201::259" ], "dnssec_ad": false, "ns": [ "dns1.p01.nsone.net.", "dns2.p01.nsone.net.", "dns3.p01.nsone.net.", "dns4.p01.nsone.net." ], "mx": [], "txt": [ "google-site-verification=ZVNnWWKdfnJHzhmj4zCGzl1qkRb67kb1OkY78FJ3ghc" ], "dmarc": [], "dkim_selectors_found": [], "caa": [ "0 iodef \"mailto:support@embryospace.com\"", "0 issue \"letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/54403714\"" ] } } }, { "zone": "chit402.com", "shared_platform": false, "hosts": [ "api.chit402.com" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.chit402.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@chit402.com and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.198.79.1" ], "aaaa": [], "dnssec_ad": false, "ns": [ "dns1.registrar-servers.com.", "dns2.registrar-servers.com." ], "mx": [ "10 mx1.privateemail.com.", "10 mx2.privateemail.com." ], "txt": [ "v=spf1 include:spf.privateemail.com ~all", "google-site-verification=6cBqQ-n9QCOZLO81dgf9xKYX-knuV4TIAkBkuADgwqo" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "dailydollar.workers.dev", "shared_platform": true, "hosts": [ "agent-bounty-feed.dailydollar.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.dailydollar.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@dailydollar.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "donovan.ns.cloudflare.com.", "shaz.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "datafortress.cloud", "shared_platform": false, "hosts": [ "agentbureau-api.datafortress.cloud" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 2, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@datafortress.cloud" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.83.184", "172.67.180.128" ], "aaaa": [ "2606:4700:3037::6815:53b8", "2606:4700:3034::ac43:b480" ], "dnssec_ad": false, "ns": [ "miguel.ns.cloudflare.com.", "ryleigh.ns.cloudflare.com." ], "mx": [ "10 mx2.hostinger.com.", "5 mx1.hostinger.com." ], "txt": [ "v=spf1 include:_spf.mail.hostinger.com ~all" ], "dmarc": [ "v=DMARC1; p=none" ], "dkim_selectors_found": [], "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"globalsign.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"" ] } } }, { "zone": "gethirepulse.xyz", "shared_platform": false, "hosts": [ "gethirepulse.xyz" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.gethirepulse.xyz", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@gethirepulse.xyz and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.16.252", "172.67.217.191" ], "aaaa": [ "2606:4700:3036::ac43:d9bf", "2606:4700:3036::6815:10fc" ], "dnssec_ad": false, "ns": [ "colette.ns.cloudflare.com.", "santino.ns.cloudflare.com." ], "mx": [ "73 route1.mx.cloudflare.net.", "79 route2.mx.cloudflare.net.", "90 route3.mx.cloudflare.net." ], "txt": [ "v=spf1 include:_spf.mx.cloudflare.net ~all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "getskavio.com", "shared_platform": false, "hosts": [ "getskavio.com" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 3, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@getskavio.com" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.7.135", "172.67.135.245" ], "aaaa": [ "2606:4700:3037::ac43:87f5", "2606:4700:3030::6815:787" ], "dnssec_ad": false, "ns": [ "carlane.ns.cloudflare.com.", "emerson.ns.cloudflare.com." ], "mx": [ "10 mx.zoho.eu.", "20 mx2.zoho.eu.", "50 mx3.zoho.eu." ], "txt": [ "google-site-verification=4pSJYoHXK6rnXCMnrYfGL3MW9oRkSlAz6asHRm9jCX0", "v=spf1 include:zohomail.eu ~all", "zoho-verification=zb85702712.zmverify.zoho.eu" ], "dmarc": [ "v=DMARC1; p=none" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "gno.dev", "shared_platform": false, "hosts": [ "x402.gno.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.gno.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@gno.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "tate.ns.cloudflare.com.", "ursula.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "hanibal-ai.com", "shared_platform": false, "hosts": [ "travel.hanibal-ai.com" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.hanibal-ai.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@hanibal-ai.com and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.60.85", "172.67.194.251" ], "aaaa": [ "2606:4700:3030::6815:3c55", "2606:4700:3030::ac43:c2fb" ], "dnssec_ad": false, "ns": [ "brynne.ns.cloudflare.com.", "lakas.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "hcrb.in", "shared_platform": false, "hosts": [ "hcrb.in" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.hcrb.in", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@hcrb.in and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.198.254", "104.21.52.122" ], "aaaa": [ "2606:4700:3036::6815:347a", "2606:4700:3031::ac43:c6fe" ], "dnssec_ad": false, "ns": [ "austin.ns.cloudflare.com.", "dawn.ns.cloudflare.com." ], "mx": [ "1 aspmx.l.google.com.", "10 alt3.aspmx.l.google.com.", "10 alt4.aspmx.l.google.com.", "5 alt1.aspmx.l.google.com.", "5 alt2.aspmx.l.google.com." ], "txt": [ "google-site-verification=9E081IvZ5mU_vkdPRrorai9Y6LgahB0SpWVtRKC7wxI", "smithery-verification=ccfe256f3037ce4e6b9ac20aed0d16a0c73a343523ff06e031521aa8df3d61c7", "v=spf1 include:dc-aa8e722993._spfm.hcrb.in ~all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "kirilllabs.workers.dev", "shared_platform": true, "hosts": [ "fresh402.kirilllabs.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.kirilllabs.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@kirilllabs.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "anirban.ns.cloudflare.com.", "ligia.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "kloudle.dev", "shared_platform": false, "hosts": [ "abr.kloudle.dev" ], "dns": { "ok": true, "severity_counts": { "high": 2, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.kloudle.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@kloudle.dev and tighten to p=reject" }, { "id": "spf_neutral", "severity": "high", "detail": "SPF ends in ?all (neutral): SPF asserts nothing", "fix": "use -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.27.213", "172.67.169.193" ], "aaaa": [ "2606:4700:3033::ac43:a9c1", "2606:4700:3037::6815:1bd5" ], "dnssec_ad": false, "ns": [ "dara.ns.cloudflare.com.", "patryk.ns.cloudflare.com." ], "mx": [ "10 spool.mail.gandi.net.", "50 fb.mail.gandi.net." ], "txt": [ "google-site-verification=bSr24TiJ3DtvOwsqNHhC8IyiwgWUGqsMNsPqd0DDSpQ", "v=spf1 include:_mailcust.gandi.net ?all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "lightningfaucet.com", "shared_platform": false, "hosts": [ "lightningfaucet.com" ], "dns": { "ok": true, "severity_counts": { "medium": 1 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" } ], "evidence": { "a": [ "104.26.6.3", "104.26.7.3", "172.67.73.76" ], "aaaa": [ "2606:4700:20::681a:603", "2606:4700:20::681a:703", "2606:4700:20::ac43:494c" ], "dnssec_ad": true, "ns": [ "itzel.ns.cloudflare.com.", "garret.ns.cloudflare.com." ], "mx": [ "5 route1.mx.cloudflare.net.", "10 route2.mx.cloudflare.net.", "20 route3.mx.cloudflare.net." ], "txt": [ "v=spf1 include:_spf.mx.cloudflare.net include:sendgrid.net ~all", "google-site-verification=rra1Hkntpjmayhn2IHhq5kx8vbqNjXpJS3SmfraY2J0" ], "dmarc": [ "v=DMARC1; p=reject; rua=mailto:dmarc@lightningfaucet.com;" ], "dkim_selectors_found": [ "s1" ], "caa": [ "0 iodef \"mailto:paul@lightningfaucet.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ] } } }, { "zone": "lumitrades.io", "shared_platform": false, "hosts": [ "api.lumitrades.io" ], "dns": { "ok": true, "severity_counts": { "low": 2, "info": 1 }, "findings": [ { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "185.199.108.153", "185.199.111.153", "185.199.110.153", "185.199.109.153" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ali.ns.cloudflare.com.", "pablo.ns.cloudflare.com." ], "mx": [ "1 route2.mx.cloudflare.net.", "64 route1.mx.cloudflare.net.", "69 route3.mx.cloudflare.net." ], "txt": [ "google-site-verification=SM-py36rBTUwj6yOdvFXZ5I0ksv0vbnDyLRqTM4PM5E", "v=spf1 include:_spf.mx.cloudflare.net -all" ], "dmarc": [ "v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r; fo=1; rua=mailto:dmarc@lumitrades.io" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "m2mfreedom.com", "shared_platform": false, "hosts": [ "m2mfreedom.com" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.m2mfreedom.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@m2mfreedom.com and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "50.17.68.175" ], "aaaa": [], "dnssec_ad": false, "ns": [ "helios.dns-parking.com.", "aster.dns-parking.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "mayim-mayim.com", "shared_platform": false, "hosts": [ "kari.mayim-mayim.com" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 3, "info": 1 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@mayim-mayim.com" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.196.141", "104.21.92.166" ], "aaaa": [ "2606:4700:3030::6815:5ca6", "2606:4700:3036::ac43:c48d" ], "dnssec_ad": false, "ns": [ "kristin.ns.cloudflare.com.", "sam.ns.cloudflare.com." ], "mx": [ "27 route1.mx.cloudflare.net.", "44 route2.mx.cloudflare.net.", "56 route3.mx.cloudflare.net." ], "txt": [ "openai-domain-verification=dv-6SfrDLiR0iP8rCUHMspqXDF6", "v=spf1 include:amazonses.com include:_spf.mx.cloudflare.net ~all" ], "dmarc": [ "v=DMARC1;p=quarantine;pct=100;fo=1" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "nikolas-sapalidis.workers.dev", "shared_platform": true, "hosts": [ "x402-bounty-radar.nikolas-sapalidis.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.nikolas-sapalidis.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@nikolas-sapalidis.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "dorthy.ns.cloudflare.com.", "ezra.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "node4all.com", "shared_platform": false, "hosts": [ "sandbox.node4all.com" ], "dns": { "ok": true, "severity_counts": { "high": 2, "low": 1, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.node4all.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@node4all.com and tighten to p=reject" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "64.29.17.65", "216.198.79.65" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns1.vercel-dns.com.", "ns2.vercel-dns.com." ], "mx": [ "10 fwd1.porkbun.com.", "20 fwd2.porkbun.com." ], "txt": [ " v=spf1 include:_spf.porkbun.com ~all", "google-site-verification=PdjXUd7EOIxDELkyRUuH8zLJm9rG9qOfc-3ZJ01F_SY" ], "dmarc": [], "dkim_selectors_found": [], "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ] } } }, { "zone": "ochinimus.app", "shared_platform": false, "hosts": [ "mezo.ochinimus.app", "x402.ochinimus.app" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.ochinimus.app", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@ochinimus.app and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.185.98", "104.21.84.30" ], "aaaa": [ "2606:4700:3030::ac43:b962", "2606:4700:3036::6815:541e" ], "dnssec_ad": false, "ns": [ "lorna.ns.cloudflare.com.", "nolan.ns.cloudflare.com." ], "mx": [], "txt": [ "google-site-verification=TFNH6EjWj5UChMiSZtWKsv0fIK1etLvdacbYezkft-c" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "onrender.com", "shared_platform": true, "hosts": [ "alphapipeline-eu.onrender.com", "canaryguard-402.onrender.com", "rugshield-402.onrender.com", "vm5-openapi-x402.onrender.com", "x402-seller-m8nx.onrender.com", "x402-seller-pmlm.onrender.com" ], "dns": { "ok": true, "severity_counts": { "high": 2, "medium": 1, "low": 1, "info": 1 }, "findings": [ { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "34.83.64.96" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns-1324.awsdns-37.org.", "ns-1829.awsdns-36.co.uk.", "ns-245.awsdns-30.com.", "ns-813.awsdns-37.net." ], "mx": [], "txt": [ "abuseipdb-verification=ReXFMJAJ", "google-site-verification=B6BGvb3wWVJQhSYoEud7q6eJLUS9ji_vT-Ts1wtQHgE" ], "dmarc": [ "v=DMARC1; p=none; sp=none; rua=mailto:re+43f616552aef@inbound.dmarcdigests.com; pct=100" ], "dkim_selectors_found": [], "caa": [ "0 iodef \"mailto:security+caafailure@render.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"" ] } } }, { "zone": "paidwithtab.com", "shared_platform": false, "hosts": [ "pay.paidwithtab.com" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 2, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.91.27", "172.67.208.220" ], "aaaa": [ "2606:4700:3032::ac43:d0dc", "2606:4700:3034::6815:5b1b" ], "dnssec_ad": false, "ns": [ "jack.ns.cloudflare.com.", "stella.ns.cloudflare.com." ], "mx": [ "10 eforward2.registrar-servers.com.", "10 eforward3.registrar-servers.com.", "15 eforward4.registrar-servers.com.", "20 eforward5.registrar-servers.com." ], "txt": [ "v=spf1 ~all" ], "dmarc": [ "v=DMARC1; p=none; rua=mailto:cd1b0a2f4f244aa39943b157cb4bbc7f@dmarc-reports.cloudflare.net" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "priors.trade", "shared_platform": false, "hosts": [ "api.priors.trade" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 3, "info": 1 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@priors.trade" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.169.184", "104.21.39.64" ], "aaaa": [ "2606:4700:3030::ac43:a9b8", "2606:4700:3035::6815:2740" ], "dnssec_ad": false, "ns": [ "carlos.ns.cloudflare.com.", "ollie.ns.cloudflare.com." ], "mx": [ "10 mail.protonmail.ch.", "20 mailsec.protonmail.ch." ], "txt": [ "allmcps-site-verification=priors:5881ed7c-235c-43a0-8566-9c81199b01da", "protonmail-verification=8e8adb19a1efb01ad5ed0bac0923f4be7304faef", "v=spf1 include:_spf.protonmail.ch ~all" ], "dmarc": [ "v=DMARC1; p=reject;" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "railway.app", "shared_platform": true, "hosts": [ "practical-ambition-production.up.railway.app" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 2 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "nameservers_share_subnet", "severity": "low", "detail": "nameservers resolve into the same /24: blue.foundationdns.com., blue.foundationdns.net.", "fix": "use a second provider so one outage cannot take the zone down" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" } ], "evidence": { "a": [ "104.18.10.246", "104.18.11.246" ], "aaaa": [ "2606:4700::6812:bf6", "2606:4700::6812:af6" ], "dnssec_ad": false, "ns": [ "blue.foundationdns.com.", "blue.foundationdns.net.", "blue.foundationdns.org." ], "mx": [ "1 aspmx.l.google.com.", "10 alt3.aspmx.l.google.com.", "10 alt4.aspmx.l.google.com.", "5 alt1.aspmx.l.google.com.", "5 alt2.aspmx.l.google.com." ], "txt": [ "TAILSCALE-k5Va9LBdoRG7KLKkDn1H", "_e0snyquo4wfxwjjpki8o3t5ucz608h2", "_zknl60hca5wtfjwl90ccaust9qbg6ok", "apple-domain-verification=EnFQxsorXIy_9UH3UUInyoSk26GKN7Ae8HZRTSP6dmQ", "docusign=4e0c6c3a-df4d-49d4-9fdb-6e941525ce91", "google-site-verification=GwiJilmlcOrmdKSBWnSSSjrpu6TwaBvVtiPrt3LJbgQ", "google-site-verification=Pzjmuu0er9pkGmtwWXEozcx8uKxr3iZ5_TglhsFN4v4", "google-site-verification=g1QzWkzwU_n19TbxNo9bFcMSwPMXlgx9uLeQd9a8iFM", "google-site-verification=hKpwmBsy17PjaHzW9M0rwGeisKHfeyeaBfoJJ_37kYM", "google-site-verification=wUylFjrR3ySiER5cJl44WIF-IhvPFwdeTRuCp17o3bM", "postman-domain-verification=e57c60e0ffa2956a857c81b073b7caba99c03e96e66dd1f2016437f31428fcde678febccf125795a009dcf4d2a201d78f164428b1f93bb9deb0a9da3a811e194", "v=spf1 include:_spf.google.com ~all" ], "dmarc": [ "v=DMARC1; p=reject; sp=reject; rua=mailto:re+d3603030eb96@inbound.dmarcdigests.com; pct=100" ], "dkim_selectors_found": [ "google", "s1" ], "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"certainly.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ] } } }, { "zone": "scrapeagent.xyz", "shared_platform": false, "hosts": [ "scrapeagent.xyz" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 1, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.scrapeagent.xyz", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@scrapeagent.xyz and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.198.79.65", "64.29.17.1" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns1.vercel-dns.com.", "ns2.vercel-dns.com." ], "mx": [], "txt": [ "smithery-verification=6c77b75c370dfc2b9694c70701cc0b1750f08794ef0af1803efa52523be59067" ], "dmarc": [], "dkim_selectors_found": [], "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ] } } }, { "zone": "stableenrich.dev", "shared_platform": false, "hosts": [ "stableenrich.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 1, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.stableenrich.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@stableenrich.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.150.16.129", "216.150.16.193" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns1.vercel-dns.com.", "ns2.vercel-dns.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ] } } }, { "zone": "tbs-digital.com", "shared_platform": false, "hosts": [ "x402.tbs-digital.com" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 3, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@tbs-digital.com" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.85.155", "172.67.207.81" ], "aaaa": [ "2606:4700:3032::ac43:cf51", "2606:4700:3032::6815:559b" ], "dnssec_ad": false, "ns": [ "olof.ns.cloudflare.com.", "sureena.ns.cloudflare.com." ], "mx": [ "60 route3.mx.cloudflare.net.", "81 route2.mx.cloudflare.net.", "84 route1.mx.cloudflare.net." ], "txt": [ "dub-domain-verification=f240f883-a89b-4bf0-8805-705a26599a94", "google-site-verification=wNXpz1g29IKyPBgFWWCkSSrPzBp4A93fHLxXieZuyz8", "openai-domain-verification=dv-eczj9bLZI7dgvzVp2iY8l9Ai", "pinterest-site-verification=c0abd4cd17954c7236d37a32d6c3fb05", "v=spf1 include:_spf.mx.cloudflare.net include:resend.com ~all" ], "dmarc": [ "v=DMARC1; p=none;" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "three.ws", "shared_platform": false, "hosts": [ "three.ws" ], "dns": { "ok": true, "severity_counts": { "high": 2, "low": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.three.ws", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@three.ws and tighten to p=reject" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" } ], "evidence": { "a": [ "136.68.246.178" ], "aaaa": [], "dnssec_ad": true, "ns": [ "dns1.registrar-servers.com.", "dns2.registrar-servers.com." ], "mx": [ "10 mx1.privateemail.com.", "10 mx2.privateemail.com." ], "txt": [ "google-gws-recovery-domain-verification=72754452", "google-site-verification=CNKJE-ZyW62J2ZEjq-31evVoL8BNX5fLPisKLNHKwbk", "google-site-verification=fXvAFKUyztS4_jqi95nIPFdf0OSL6odQAMQ6xN3Ud7Q" ], "dmarc": [], "dkim_selectors_found": [ "default" ], "caa": [] } } }, { "zone": "thx93.dev", "shared_platform": false, "hosts": [ "agent-evidence.thx93.dev" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 1 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" } ], "evidence": { "a": [ "104.21.90.246", "172.67.163.86" ], "aaaa": [ "2606:4700:3036::6815:5af6", "2606:4700:3036::ac43:a356" ], "dnssec_ad": true, "ns": [ "ray.ns.cloudflare.com.", "sunny.ns.cloudflare.com." ], "mx": [ "27 route2.mx.cloudflare.net.", "76 route1.mx.cloudflare.net.", "79 route3.mx.cloudflare.net." ], "txt": [ "v=spf1 ip4:173.231.53.124 include:_spf.mx.cloudflare.net ~all" ], "dmarc": [ "v=DMARC1; p=quarantine; sp=quarantine; adkim=s; aspf=s; pct=100; rua=mailto:aee-outreach-mublj2wz@uberip.com; fo=1" ], "dkim_selectors_found": [ "s1" ], "caa": [] } } }, { "zone": "thx93.workers.dev", "shared_platform": true, "hosts": [ "agent-evidence-api.thx93.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.thx93.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@thx93.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "sonny.ns.cloudflare.com.", "zainab.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "val.run", "shared_platform": true, "hosts": [ "keplerops--ddb76fd4cf5411f1be831607ee4eb77e.web.val.run" ], "dns": { "ok": true, "severity_counts": { "high": 2, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "216.24.57.18", "216.24.57.16" ], "aaaa": [], "dnssec_ad": false, "ns": [ "suzanne.ns.cloudflare.com.", "tony.ns.cloudflare.com." ], "mx": [], "txt": [ "google-site-verification=F8M0DmQMDOV_8PGDMigD0r-OOym00mFn6OyI6OfKtro", "google-site-verification=ySUCasSm1XSOn3KJJuRSVCg0FGId69VOC2lfDJ_Suuw" ], "dmarc": [ "v=DMARC1; p=none; rua=mailto:64a948ab627f46f997a5fe7e06d5d48e@dmarc-reports.cloudflare.net" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "wayleave.dev", "shared_platform": false, "hosts": [ "api.wayleave.dev" ], "dns": { "ok": true, "severity_counts": { "medium": 1, "low": 2 }, "findings": [ { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" } ], "evidence": { "a": [ "75.2.60.5" ], "aaaa": [], "dnssec_ad": false, "ns": [ "ns70.domaincontrol.com.", "ns69.domaincontrol.com." ], "mx": [ "10 alt3.aspmx.l.google.com.", "10 alt4.aspmx.l.google.com.", "5 alt2.aspmx.l.google.com.", "5 alt1.aspmx.l.google.com.", "1 aspmx.l.google.com." ], "txt": [ "google-site-verification=UY1aw5925L0og9IaFSrEWqmTtPLmCc3d46Rk-_D1qDs", "v=spf1 include:dc-aa8e722993._spfm.wayleave.dev ~all" ], "dmarc": [ "v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:dmarc_rua@onsecureserver.net;" ], "dkim_selectors_found": [ "google" ], "caa": [] } } }, { "zone": "withgrokbot.workers.dev", "shared_platform": true, "hosts": [ "verified-catalog-lookup.withgrokbot.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.withgrokbot.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@withgrokbot.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "bob.ns.cloudflare.com.", "mariah.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "workfern.com", "shared_platform": false, "hosts": [ "x402.workfern.com" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.workfern.com", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@workfern.com and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.180.14", "104.21.96.121" ], "aaaa": [ "2606:4700:3032::ac43:b40e", "2606:4700:3034::6815:6079" ], "dnssec_ad": false, "ns": [ "julissa.ns.cloudflare.com.", "roman.ns.cloudflare.com." ], "mx": [ "10 route3.mx.cloudflare.net.", "35 route1.mx.cloudflare.net.", "98 route2.mx.cloudflare.net." ], "txt": [ "google-site-verification=OG8gNc7jo5aF5mLQiMWF61qglKkxYUrpEkjHbDVGcHI", "tiktok-developers-site-verification=jAlPuvxdYcEEJg1k8lK7qjE6ygIQtART", "v=spf1 include:_spf.mx.cloudflare.net ~all", "wordpressorg-arinoach-verification" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "wsystem.dev", "shared_platform": false, "hosts": [ "api.wsystem.dev" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 2, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.28.141", "172.67.170.219" ], "aaaa": [ "2606:4700:3033::ac43:aadb", "2606:4700:3034::6815:1c8d" ], "dnssec_ad": false, "ns": [ "dylan.ns.cloudflare.com.", "piper.ns.cloudflare.com." ], "mx": [ "56 route2.mx.cloudflare.net.", "69 route1.mx.cloudflare.net.", "69 route3.mx.cloudflare.net." ], "txt": [ "google-site-verification=ExIO9db7eM_c2bM5zNgOQBgtj9JcrOVMQmaZ7_zB0KQ", "v=spf1 include:_spf.mx.cloudflare.net ~all", "wordpressorg-wsystemdev-verification" ], "dmarc": [ "v=DMARC1; p=none; rua=mailto:hello@wsystem.dev; adkim=r; aspf=r" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "x402api.workers.dev", "shared_platform": true, "hosts": [ "tokensafe.x402api.workers.dev" ], "dns": { "ok": true, "severity_counts": { "high": 3, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.x402api.workers.dev", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@x402api.workers.dev and tighten to p=reject" }, { "id": "no_mx", "severity": "high", "detail": "no MX record: the domain cannot receive email", "fix": "publish an MX record, or a null MX if that is intended" }, { "id": "no_spf", "severity": "high", "detail": "no SPF record (v=spf1) at the apex", "fix": "publish one TXT record starting v=spf1 and end it with -all" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [], "aaaa": [], "dnssec_ad": false, "ns": [ "daphne.ns.cloudflare.com.", "major.ns.cloudflare.com." ], "mx": [], "txt": [], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "xona-agent.com", "shared_platform": false, "hosts": [ "api.xona-agent.com" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "low": 3, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "dmarc_no_rua", "severity": "low", "detail": "DMARC has no rua= aggregate-report address: you are blind to forgeries", "fix": "add rua=mailto:dmarc@xona-agent.com" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "172.67.210.32", "104.21.16.55" ], "aaaa": [ "2606:4700:3032::6815:1037", "2606:4700:3031::ac43:d220" ], "dnssec_ad": false, "ns": [ "amanda.ns.cloudflare.com.", "jaime.ns.cloudflare.com." ], "mx": [ "10 mx2.hostinger.com.", "5 mx1.hostinger.com." ], "txt": [ "google-site-verification=4i0Xs69LpYLNBjwc1or6qm3fgeiKnDh-X0bnScOxOOU", "v=spf1 include:_spf.mail.hostinger.com ~all", "vector-verify=28cc201c1b9924a54fd60ab330c256341eb84d210dc94e43bd45f558c74290a1", "vector-verify=775db9145d147a345b14b5f0d343d272e918e2cd9477f3e004c29420af6b1fd4", "vector-verify=7cca236488faf03b8cfd92866d00a01bfe545e480fa8eb28bbaa5bf84e7542f7", "vector-verify=d83a3b500d17471dc0effd892f61d6d06de0bbaeb4617439e057988519b1a4c1" ], "dmarc": [ "v=DMARC1; p=none" ], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "xynaptic.io", "shared_platform": false, "hosts": [ "api.xynaptic.io" ], "dns": { "ok": true, "severity_counts": { "high": 1, "medium": 1, "low": 2, "info": 1 }, "findings": [ { "id": "no_dmarc", "severity": "high", "detail": "no DMARC record at _dmarc.xynaptic.io", "fix": "publish v=DMARC1; p=none; rua=mailto:dmarc@xynaptic.io and tighten to p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_caa", "severity": "low", "detail": "no CAA record: any public CA may issue a certificate for this domain", "fix": "publish CAA: 0 issue \"letsencrypt.org\" (plus any other CA you use)" }, { "id": "no_dnssec", "severity": "low", "detail": "the zone is not DNSSEC-signed (no AD bit on the answer)", "fix": "sign the zone at your registrar or DNS provider" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.48.211", "172.67.137.119" ], "aaaa": [ "2606:4700:3035::ac43:8977", "2606:4700:3036::6815:30d3" ], "dnssec_ad": false, "ns": [ "dion.ns.cloudflare.com.", "jo.ns.cloudflare.com." ], "mx": [ "58 route2.mx.cloudflare.net.", "81 route1.mx.cloudflare.net.", "81 route3.mx.cloudflare.net." ], "txt": [ "google-site-verification=Li-ez_HyH3DAH4K3mi2YcrvMIY4x4cPKm6XRZDjWYyY", "v=spf1 include:_spf.google.com include:_spf.mx.cloudflare.net ~all" ], "dmarc": [], "dkim_selectors_found": [], "caa": [] } } }, { "zone": "yruz.one", "shared_platform": false, "hosts": [ "yruz.one" ], "dns": { "ok": true, "severity_counts": { "medium": 2, "info": 1 }, "findings": [ { "id": "dmarc_p_none", "severity": "medium", "detail": "DMARC policy is p=none: failures are reported but not blocked", "fix": "move to p=quarantine, then p=reject" }, { "id": "spf_softfail", "severity": "medium", "detail": "SPF ends in ~all (softfail): forgeries are marked, not rejected", "fix": "use -all once every legitimate sender is listed" }, { "id": "no_dkim_probe", "severity": "info", "detail": "none of the common DKIM selectors answered (default, google, selector1, selector2, k1, s1, mail); this is not proof of absence", "fix": "a custom selector is fine, publish it and note it here" } ], "evidence": { "a": [ "104.21.48.70", "172.67.181.49" ], "aaaa": [ "2606:4700:3034::6815:3046", "2606:4700:3035::ac43:b531" ], "dnssec_ad": true, "ns": [ "robin.ns.cloudflare.com.", "cosmin.ns.cloudflare.com." ], "mx": [ "59 amir.mx.cloudflare.net.", "73 isaac.mx.cloudflare.net.", "73 linda.mx.cloudflare.net." ], "txt": [ "v=spf1 include:_spf.mx.cloudflare.net ~all", "brevo-code:461846e2542809ed37dbb1661850219f" ], "dmarc": [ "v=DMARC1; p=none; rua=mailto:0c1f17aeebd6443f809dc3e3124db2e8@dmarc-reports.cloudflare.net" ], "dkim_selectors_found": [], "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ] } } } ], "hosts": [ { "host": "2s.io", "zone": "2s.io", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "216.150.1.1" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://2s.io/api/weather/zip?zip=94103", "path": "/api/weather/zip", "ok": true, "final_status": 402, "final_url": "https://2s.io/api/weather/zip?zip=94103", "redirects": 0, "latency_ms": { "samples": [ 337.6, 322.7, 328.6 ], "p50": 328.6, "p95": 337.6, "max": 337.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 22 15:32:13 2027 GMT", "days_to_expiry": 86.9, "issuer": "Let's Encrypt", "subject": "2s.io", "san_count": 1, "hostname_verified": true }, "headers": { "server": "Vercel", "content-type": "application/json", "cache-control": "public, max-age=0, must-revalidate", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 7906, "anomalies": [ { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T18:59:44Z", "elapsed_s": 1.32 } ], "elapsed_s": 2.37 }, { "host": "abr.kloudle.dev", "zone": "kloudle.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.27.213", "172.67.169.193" ], "aaaa": [ "2606:4700:3037::6815:1bd5", "2606:4700:3033::ac43:a9c1" ], "resolves": true }, "endpoints": [ { "url": "https://abr.kloudle.dev/v1/verifier-manifest", "path": "/v1/verifier-manifest", "ok": true, "final_status": 402, "final_url": "https://abr.kloudle.dev/v1/verifier-manifest", "redirects": 0, "latency_ms": { "samples": [ 774.5 ], "p50": 774.5, "p95": 774.5, "max": 774.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 11 07:57:27 2027 GMT", "days_to_expiry": 75.5, "issuer": "Let's Encrypt", "subject": "kloudle.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "188", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f093fc9d601c-SIN", "x-request-id": "4b0e907d-3505-4175-9b2e-86c0b0918a53" }, "body_bytes_read": 188, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T18:59:56Z", "elapsed_s": 11.04 } ], "elapsed_s": 11.84 }, { "host": "agent-bounty-feed.dailydollar.workers.dev", "zone": "dailydollar.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "104.21.27.223", "172.67.169.199" ], "aaaa": [ "2606:4700:3032::6815:1bdf", "2606:4700:3031::ac43:a9c7" ], "resolves": true }, "endpoints": [ { "url": "https://agent-bounty-feed.dailydollar.workers.dev/v1/bounties?source=frantic&min_usd=1", "path": "/v1/bounties", "ok": true, "final_status": 402, "final_url": "https://agent-bounty-feed.dailydollar.workers.dev/v1/bounties?source=frantic&min_usd=1", "redirects": 0, "latency_ms": { "samples": [ 96.5, 107.3, 120.5 ], "p50": 107.3, "p95": 120.5, "max": 120.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 21 22:53:13 2027 GMT", "days_to_expiry": 86.2, "issuer": "Let's Encrypt", "subject": "dailydollar.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "1114", "access-control-allow-origin": "*", "cf-ray": "a513f0e019fd49f3-SIN" }, "body_bytes_read": 1114, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T18:59:58Z", "elapsed_s": 0.42 } ], "elapsed_s": 1.16 }, { "host": "agent-evidence-api.thx93.workers.dev", "zone": "thx93.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "172.67.161.92", "104.21.9.223" ], "aaaa": [ "2606:4700:3034::ac43:a15c", "2606:4700:3032::6815:9df" ], "resolves": true }, "endpoints": [ { "url": "https://agent-evidence-api.thx93.workers.dev/v1/evidence", "path": "/v1/evidence", "ok": true, "final_status": 402, "final_url": "https://agent-evidence-api.thx93.workers.dev/v1/evidence", "redirects": 0, "latency_ms": { "samples": [ 698.4, 317.8, 331.8 ], "p50": 331.8, "p95": 698.4, "max": 698.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 09:27:46 2026 GMT", "days_to_expiry": 53.6, "issuer": "Let's Encrypt", "subject": "thx93.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "1133", "cache-control": "no-store", "cf-ray": "a513f0e9dfe7fe8a-SIN", "x-request-id": "req_a0b977cb840d4b239cd4e740" }, "body_bytes_read": 1133, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:01Z", "elapsed_s": 2.05 } ], "elapsed_s": 2.78 }, { "host": "agent-evidence.thx93.dev", "zone": "thx93.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.90.246", "172.67.163.86" ], "aaaa": [ "2606:4700:3036::6815:5af6", "2606:4700:3036::ac43:a356" ], "resolves": true }, "endpoints": [ { "url": "https://agent-evidence.thx93.dev/v1/evidence", "path": "/v1/evidence", "ok": true, "final_status": 402, "final_url": "https://agent-evidence.thx93.dev/v1/evidence", "redirects": 0, "latency_ms": { "samples": [ 677.9, 359.4, 361.1 ], "p50": 361.1, "p95": 677.9, "max": 677.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 19 19:49:17 2027 GMT", "days_to_expiry": 84.0, "issuer": "Let's Encrypt", "subject": "thx93.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2976", "cache-control": "no-store", "strict-transport-security": "max-age=15552000; includeSubDomains", "x-content-type-options": "nosniff", "cf-ray": "a513f1001999fd1e-SIN", "x-request-id": "req_0e4d97dcb03f4819b5c26879" }, "body_bytes_read": 2976, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:04Z", "elapsed_s": 1.77 } ], "elapsed_s": 2.86 }, { "host": "agentbureau-api.datafortress.cloud", "zone": "datafortress.cloud", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.180.128", "104.21.83.184" ], "aaaa": [ "2606:4700:3037::6815:53b8", "2606:4700:3034::ac43:b480" ], "resolves": true }, "endpoints": [ { "url": "https://agentbureau-api.datafortress.cloud/v1/invoices", "path": "/v1/invoices", "ok": true, "final_status": 405, "final_url": "https://agentbureau-api.datafortress.cloud/v1/invoices", "redirects": 0, "latency_ms": { "samples": [ 736.2, 286.6, 661.3 ], "p50": 661.3, "p95": 736.2, "max": 736.2 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 22 09:04:09 2027 GMT", "days_to_expiry": 86.6, "issuer": "Google Trust Services", "subject": "datafortress.cloud", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "31", "cf-ray": "a513f1146935f8ca-SIN" }, "body_bytes_read": 31, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:00:08Z", "elapsed_s": 2.34 } ], "elapsed_s": 3.44 }, { "host": "agentshare.dev", "zone": "agentshare.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.191.64", "104.21.33.185" ], "aaaa": [ "2606:4700:3033::6815:21b9", "2606:4700:3036::ac43:bf40" ], "resolves": true }, "endpoints": [ { "url": "https://agentshare.dev/api/v1/registry/agent-key", "path": "/api/v1/registry/agent-key", "ok": true, "final_status": 405, "final_url": "https://agentshare.dev/api/v1/registry/agent-key", "redirects": 0, "latency_ms": { "samples": [ 115.6, 134.2, 141.1 ], "p50": 134.2, "p95": 141.1, "max": 141.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 4 21:36:42 2026 GMT", "days_to_expiry": 38.1, "issuer": "Let's Encrypt", "subject": "agentshare.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "cf-ray": "a513f12adea555e4-SIN", "x-request-id": "1313ba02-2f6a-465f-9b48-e0bd921e61db" }, "body_bytes_read": 476, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:00:10Z", "elapsed_s": 0.54 } ], "elapsed_s": 1.39 }, { "host": "alphapipeline-eu.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://alphapipeline-eu.onrender.com/v1/prediction/hip4-alerts/subscribe", "path": "/v1/prediction/hip4-alerts/subscribe", "ok": true, "final_status": 402, "final_url": "https://alphapipeline-eu.onrender.com/v1/prediction/hip4-alerts/subscribe", "redirects": 0, "latency_ms": { "samples": [ 602.4, 282.9, 642.5 ], "p50": 602.4, "p95": 642.5, "max": 642.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "cache-control": "no-store", "cf-ray": "a513f136dacbfd3f-SIN" }, "body_bytes_read": 12, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:13Z", "elapsed_s": 1.82 }, { "url": "https://alphapipeline-eu.onrender.com/v1/security/token-risk?chain_id=8453&contract_address=0x", "path": "/v1/security/token-risk", "ok": true, "final_status": 402, "final_url": "https://alphapipeline-eu.onrender.com/v1/security/token-risk?chain_id=8453&contract_address=0x", "redirects": 0, "latency_ms": { "samples": [ 262.9, 627.0, 579.4 ], "p50": 579.4, "p95": 627.0, "max": 627.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "cache-control": "no-store", "cf-ray": "a513f1427c31fd18-SIN" }, "body_bytes_read": 12, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:15Z", "elapsed_s": 2.12 } ], "elapsed_s": 4.94 }, { "host": "api-staging.aomi.dev", "zone": "aomi.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.162.122", "104.21.49.119" ], "aaaa": [ "2606:4700:3035::6815:3177", "2606:4700:3031::ac43:a27a" ], "resolves": true }, "endpoints": [ { "url": "https://api-staging.aomi.dev/v1/task/build", "path": "/v1/task/build", "ok": true, "final_status": 402, "final_url": "https://api-staging.aomi.dev/v1/task/build", "redirects": 0, "latency_ms": { "samples": [ 1891.7, 2819.1, 1557.9 ], "p50": 1891.7, "p95": 2819.1, "max": 2819.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 18 01:54:21 2026 GMT", "days_to_expiry": 51.3, "issuer": "Let's Encrypt", "subject": "aomi.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "3097", "cache-control": "no-store", "strict-transport-security": "max-age=31536000", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*", "cf-ray": "a513f1579bd09c6f-SIN" }, "body_bytes_read": 3097, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 2819.1 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:25Z", "elapsed_s": 8.15 } ], "elapsed_s": 9.04 }, { "host": "api.agents-trust.com", "zone": "agents-trust.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.153.172", "104.21.32.182" ], "aaaa": [ "2606:4700:3031::6815:20b6", "2606:4700:3032::ac43:99ac" ], "resolves": true }, "endpoints": [ { "url": "https://api.agents-trust.com/recommend?need=weather%20forecast&limit=3&view=compact", "path": "/recommend", "ok": true, "final_status": 402, "final_url": "https://api.agents-trust.com/recommend?need=weather%20forecast&limit=3&view=compact", "redirects": 0, "latency_ms": { "samples": [ 294.9, 232.6, 225.0 ], "p50": 232.6, "p95": 294.9, "max": 294.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 3 20:03:57 2026 GMT", "days_to_expiry": 37.0, "issuer": "Google Trust Services", "subject": "agents-trust.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "6215", "cache-control": "no-store", "cf-ray": "a513f1927c7a5856-SIN" }, "body_bytes_read": 6215, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:27Z", "elapsed_s": 0.89 } ], "elapsed_s": 1.74 }, { "host": "api.babyblueviper.com", "zone": "babyblueviper.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "5.78.69.36" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://api.babyblueviper.com/reason", "path": "/reason", "ok": true, "final_status": 402, "final_url": "https://api.babyblueviper.com/reason", "redirects": 0, "latency_ms": { "samples": [ 693.7, 699.4, 699.2 ], "p50": 699.2, "p95": 699.4, "max": 699.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 15 20:44:42 2026 GMT", "days_to_expiry": 49.1, "issuer": "Let's Encrypt", "subject": "api.babyblueviper.com", "san_count": 1, "hostname_verified": true }, "headers": { "server": "nginx", "content-type": "application/json", "content-length": "2653", "strict-transport-security": "max-age=63072000; includeSubDomains", "content-security-policy": "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self' data: https:; frame-ancestors 'self' https://chatgpt.com https://*.openai.com; base-uri 'self'", "x-content-type-options": "nosniff" }, "body_bytes_read": 2653, "anomalies": [ { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:31Z", "elapsed_s": 2.81 }, { "url": "https://api.babyblueviper.com/review", "path": "/review", "ok": true, "final_status": 402, "final_url": "https://api.babyblueviper.com/review", "redirects": 0, "latency_ms": { "samples": [ 694.1, 708.1, 705.8 ], "p50": 705.8, "p95": 708.1, "max": 708.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 15 20:44:42 2026 GMT", "days_to_expiry": 49.1, "issuer": "Let's Encrypt", "subject": "api.babyblueviper.com", "san_count": 1, "hostname_verified": true }, "headers": { "server": "nginx", "content-type": "application/json", "content-length": "4463", "strict-transport-security": "max-age=63072000; includeSubDomains", "content-security-policy": "default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self' data: https:; frame-ancestors 'self' https://chatgpt.com https://*.openai.com; base-uri 'self'", "x-content-type-options": "nosniff" }, "body_bytes_read": 4463, "anomalies": [ { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:34Z", "elapsed_s": 2.82 } ], "elapsed_s": 6.61 }, { "host": "api.chit402.com", "zone": "chit402.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "13.36.215.199" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://api.chit402.com/v1/chat/completions", "path": "/v1/chat/completions", "ok": true, "final_status": 402, "final_url": "https://api.chit402.com/v1/chat/completions", "redirects": 0, "latency_ms": { "samples": [ 823.1, 819.0, 900.9 ], "p50": 823.1, "p95": 900.9, "max": 900.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Dec 2 06:09:34 2026 GMT", "days_to_expiry": 35.5, "issuer": "Let's Encrypt", "subject": "api.chit402.com", "san_count": 1, "hostname_verified": true }, "headers": { "content-type": "application/json; charset=utf-8", "content-length": "5072", "x-content-type-options": "nosniff", "x-frame-options": "DENY" }, "body_bytes_read": 5072, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:39Z", "elapsed_s": 3.48 } ], "elapsed_s": 4.4 }, { "host": "api.lumitrades.io", "zone": "lumitrades.io", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.44.147", "172.67.200.226" ], "aaaa": [ "2606:4700:3034::ac43:c8e2", "2606:4700:3031::6815:2c93" ], "resolves": true }, "endpoints": [ { "url": "https://api.lumitrades.io/v1/trust/check?url=https://api.example.com/v1/data", "path": "/v1/trust/check", "ok": true, "final_status": 402, "final_url": "https://api.lumitrades.io/v1/trust/check?url=https://api.example.com/v1/data", "redirects": 0, "latency_ms": { "samples": [ 2522.9, 2210.7, 2260.4 ], "p50": 2260.4, "p95": 2522.9, "max": 2522.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 20 11:49:03 2027 GMT", "days_to_expiry": 84.7, "issuer": "Google Trust Services", "subject": "lumitrades.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "8770", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f1eafc96294b-SIN" }, "body_bytes_read": 8770, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 2522.9 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:50Z", "elapsed_s": 9.5 }, { "url": "https://api.lumitrades.io/v1/verdict?url=https://api.example.com/v1/data", "path": "/v1/verdict", "ok": true, "final_status": 402, "final_url": "https://api.lumitrades.io/v1/verdict?url=https://api.example.com/v1/data", "redirects": 0, "latency_ms": { "samples": [ 2113.3, 2749.8, 2134.0 ], "p50": 2134.0, "p95": 2749.8, "max": 2749.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 20 11:49:03 2027 GMT", "days_to_expiry": 84.7, "issuer": "Google Trust Services", "subject": "lumitrades.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "9514", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f2265bb09d1a-SIN" }, "body_bytes_read": 9514, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 2749.8 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:00:59Z", "elapsed_s": 9.44 } ], "elapsed_s": 20.02 }, { "host": "api.priors.trade", "zone": "priors.trade", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.169.184", "104.21.39.64" ], "aaaa": [ "2606:4700:3035::6815:2740", "2606:4700:3030::ac43:a9b8" ], "resolves": true }, "endpoints": [ { "url": "https://api.priors.trade/v1/report/{id}", "path": "/v1/report/{id}", "ok": true, "final_status": 402, "final_url": "https://api.priors.trade/v1/report/{id}", "redirects": 0, "latency_ms": { "samples": [ 614.9, 231.1, 112.2 ], "p50": 231.1, "p95": 614.9, "max": 614.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 24 07:11:49 2026 GMT", "days_to_expiry": 57.5, "issuer": "Google Trust Services", "subject": "priors.trade", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "164", "cache-control": "no-store", "strict-transport-security": "max-age=15552000; includeSubDomains", "x-content-type-options": "nosniff", "access-control-allow-origin": "*", "cf-ray": "a513f268faee55de-SIN" }, "body_bytes_read": 164, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:02Z", "elapsed_s": 1.39 } ], "elapsed_s": 2.22 }, { "host": "api.wayleave.dev", "zone": "wayleave.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "69.46.46.124" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://api.wayleave.dev/v1/identify", "path": "/v1/identify", "ok": true, "final_status": 405, "final_url": "https://api.wayleave.dev/v1/identify", "redirects": 0, "latency_ms": { "samples": [ 284.4, 245.8, 254.3 ], "p50": 254.3, "p95": 284.4, "max": 284.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 24 02:51:57 2026 GMT", "days_to_expiry": 57.3, "issuer": "Let's Encrypt", "subject": "api.wayleave.dev", "san_count": 1, "hostname_verified": true }, "headers": { "server": "railway-hikari", "content-type": "application/json; charset=utf-8", "content-length": "62", "cache-control": "no-store", "strict-transport-security": "max-age=63072000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 62, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:01:04Z", "elapsed_s": 1.1 } ], "elapsed_s": 1.91 }, { "host": "api.wsystem.dev", "zone": "wsystem.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://api.wsystem.dev/ddreport", "path": "/ddreport", "ok": true, "final_status": 405, "final_url": "https://api.wsystem.dev/ddreport", "redirects": 0, "latency_ms": { "samples": [ 621.2, 597.3, 263.0 ], "p50": 597.3, "p95": 621.2, "max": 621.2 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 15 06:06:48 2027 GMT", "days_to_expiry": 79.5, "issuer": "Google Trust Services", "subject": "api.wsystem.dev", "san_count": 1, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "strict-transport-security": "max-age=31536000", "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "cf-ray": "a513f2888f3ffe1d-SIN" }, "body_bytes_read": 42, "anomalies": [ { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:01:07Z", "elapsed_s": 2.08 }, { "url": "https://api.wsystem.dev/einvoice/validate", "path": "/einvoice/validate", "ok": true, "final_status": 405, "final_url": "https://api.wsystem.dev/einvoice/validate", "redirects": 0, "latency_ms": { "samples": [ 622.1, 276.5, 571.3 ], "p50": 571.3, "p95": 622.1, "max": 622.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 15 06:06:48 2027 GMT", "days_to_expiry": 79.5, "issuer": "Google Trust Services", "subject": "api.wsystem.dev", "san_count": 1, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "strict-transport-security": "max-age=31536000", "content-security-policy": "default-src 'none'; frame-ancestors 'none'; base-uri 'none'", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "cf-ray": "a513f2957a034d6f-SIN" }, "body_bytes_read": 42, "anomalies": [ { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:01:09Z", "elapsed_s": 1.77 } ], "elapsed_s": 4.79 }, { "host": "api.xona-agent.com", "zone": "xona-agent.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.16.55", "172.67.210.32" ], "aaaa": [ "2606:4700:3031::ac43:d220", "2606:4700:3032::6815:1037" ], "resolves": true }, "endpoints": [ { "url": "https://api.xona-agent.com/token/pumpfun-trending", "path": "/token/pumpfun-trending", "ok": true, "final_status": 402, "final_url": "https://api.xona-agent.com/token/pumpfun-trending", "redirects": 0, "latency_ms": { "samples": [ 109.2, 121.1, 111.0 ], "p50": 111.0, "p95": 121.1, "max": 121.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 1 17:47:49 2026 GMT", "days_to_expiry": 34.9, "issuer": "Google Trust Services", "subject": "xona-agent.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "1431", "strict-transport-security": "max-age=15552000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "cf-ray": "a513f2a94c91fe05-SIN" }, "body_bytes_read": 1431, "anomalies": [ { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:11Z", "elapsed_s": 0.46 } ], "elapsed_s": 1.47 }, { "host": "api.xynaptic.io", "zone": "xynaptic.io", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.48.211", "172.67.137.119" ], "aaaa": [ "2606:4700:3035::ac43:8977", "2606:4700:3036::6815:30d3" ], "resolves": true }, "endpoints": [ { "url": "https://api.xynaptic.io/v1/code-review", "path": "/v1/code-review", "ok": true, "final_status": 402, "final_url": "https://api.xynaptic.io/v1/code-review", "redirects": 0, "latency_ms": { "samples": [ 107.0, 106.5, 110.9 ], "p50": 107.0, "p95": 110.9, "max": 110.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 21 07:08:17 2026 GMT", "days_to_expiry": 54.5, "issuer": "Google Trust Services", "subject": "xynaptic.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "2664", "strict-transport-security": "max-age=15552000", "cf-ray": "a513f2b38fedfd84-SIN" }, "body_bytes_read": 2664, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:13Z", "elapsed_s": 0.45 }, { "url": "https://api.xynaptic.io/v1/company-kyb?siren=552032534", "path": "/v1/company-kyb", "ok": true, "final_status": 402, "final_url": "https://api.xynaptic.io/v1/company-kyb?siren=552032534", "redirects": 0, "latency_ms": { "samples": [ 1469.3, 1102.4, 831.1 ], "p50": 1102.4, "p95": 1469.3, "max": 1469.3 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 21 07:08:17 2026 GMT", "days_to_expiry": 54.5, "issuer": "Google Trust Services", "subject": "xynaptic.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2755", "strict-transport-security": "max-age=15552000", "access-control-allow-origin": "*", "cf-ray": "a513f2b65dd1880d-SIN" }, "body_bytes_read": 2755, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:17Z", "elapsed_s": 4.39 }, { "url": "https://api.xynaptic.io/v1/crypto-validate?address=0x", "path": "/v1/crypto-validate", "ok": true, "final_status": 402, "final_url": "https://api.xynaptic.io/v1/crypto-validate?address=0x", "redirects": 0, "latency_ms": { "samples": [ 1110.0, 1139.8, 757.4 ], "p50": 1110.0, "p95": 1139.8, "max": 1139.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 21 07:08:17 2026 GMT", "days_to_expiry": 54.5, "issuer": "Google Trust Services", "subject": "xynaptic.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2967", "strict-transport-security": "max-age=15552000", "access-control-allow-origin": "*", "cf-ray": "a513f2d1cb236593-SIN" }, "body_bytes_read": 2967, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:21Z", "elapsed_s": 3.9 }, { "url": "https://api.xynaptic.io/v1/energy-price", "path": "/v1/energy-price", "ok": true, "final_status": 402, "final_url": "https://api.xynaptic.io/v1/energy-price", "redirects": 0, "latency_ms": { "samples": [ 1045.9, 910.8, 658.6 ], "p50": 910.8, "p95": 1045.9, "max": 1045.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 21 07:08:17 2026 GMT", "days_to_expiry": 54.5, "issuer": "Google Trust Services", "subject": "xynaptic.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2373", "strict-transport-security": "max-age=15552000", "access-control-allow-origin": "*", "cf-ray": "a513f2ea3cf33d68-SIN" }, "body_bytes_read": 2373, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:25Z", "elapsed_s": 3.87 }, { "url": "https://api.xynaptic.io/v1/skill-supplier-due-diligence", "path": "/v1/skill-supplier-due-diligence", "ok": true, "final_status": 402, "final_url": "https://api.xynaptic.io/v1/skill-supplier-due-diligence", "redirects": 0, "latency_ms": { "samples": [ 1525.3, 2132.5, 876.4 ], "p50": 1525.3, "p95": 2132.5, "max": 2132.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 21 07:08:17 2026 GMT", "days_to_expiry": 54.5, "issuer": "Google Trust Services", "subject": "xynaptic.io", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2967", "strict-transport-security": "max-age=15552000", "access-control-allow-origin": "*", "cf-ray": "a513f3025810fda3-SIN" }, "body_bytes_read": 2967, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" }, { "id": "slow_p95", "detail": "p95 2132.5 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:30Z", "elapsed_s": 5.53 } ], "elapsed_s": 18.93 }, { "host": "beliefstate.ai", "zone": "beliefstate.ai", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.82.235", "172.67.209.8" ], "aaaa": [ "2606:4700:3036::ac43:d108", "2606:4700:3037::6815:52eb" ], "resolves": true }, "endpoints": [ { "url": "https://beliefstate.ai/v1/research/get_belief", "path": "/v1/research/get_belief", "ok": true, "final_status": 200, "final_url": "https://beliefstate.ai/v1/research/get_belief", "redirects": 0, "latency_ms": { "samples": [ 692.5, 2199.8, 539.1 ], "p50": 692.5, "p95": 2199.8, "max": 2199.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 9 14:14:00 2026 GMT", "days_to_expiry": 42.8, "issuer": "Google Trust Services", "subject": "beliefstate.ai", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "cache-control": "public, max-age=300", "strict-transport-security": "max-age=63072000", "access-control-allow-origin": "*", "cf-ray": "a513f32c5f5b5fdb-SIN" }, "body_bytes_read": 65536, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 2199.8 ms" } ], "expected": {}, "audited_at": "2026-10-27T19:01:36Z", "elapsed_s": 4.05 } ], "elapsed_s": 4.83 }, { "host": "bridge-api.argosbot.io", "zone": "argosbot.io", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "216.150.16.1", "216.150.16.129" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://bridge-api.argosbot.io/v1/lookup?token=0xe86688530c456e099732f953ed7aa7c583026680&chain=arc", "path": "/v1/lookup", "ok": true, "final_status": 402, "final_url": "https://bridge-api.argosbot.io/v1/lookup?token=0xe86688530c456e099732f953ed7aa7c583026680&chain=arc", "redirects": 0, "latency_ms": { "samples": [ 447.9, 489.3, 519.6 ], "p50": 489.3, "p95": 519.6, "max": 519.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Dec 10 04:19:52 2026 GMT", "days_to_expiry": 43.4, "issuer": "Let's Encrypt", "subject": "*.argosbot.io", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Vercel", "content-type": "application/json", "cache-control": "private, no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "DENY" }, "body_bytes_read": 5776, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:39Z", "elapsed_s": 1.95 } ], "elapsed_s": 2.72 }, { "host": "canaryguard-402.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://canaryguard-402.onrender.com/v1/sanitize", "path": "/v1/sanitize", "ok": true, "final_status": 402, "final_url": "https://canaryguard-402.onrender.com/v1/sanitize", "redirects": 0, "latency_ms": { "samples": [ 762.6, 320.6, 610.5 ], "p50": 610.5, "p95": 762.6, "max": 762.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "cf-ray": "a513f35c0cdaf44c-SIN", "x-request-id": "5a4f0df1" }, "body_bytes_read": 1070, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:41Z", "elapsed_s": 2.05 } ], "elapsed_s": 2.12 }, { "host": "fresh402.kirilllabs.workers.dev", "zone": "kirilllabs.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "104.21.19.72", "172.67.185.157" ], "aaaa": [ "2606:4700:3032::6815:1348", "2606:4700:3031::ac43:b99d" ], "resolves": true }, "endpoints": [ { "url": "https://fresh402.kirilllabs.workers.dev/v1/check", "path": "/v1/check", "ok": true, "final_status": 405, "final_url": "https://fresh402.kirilllabs.workers.dev/v1/check", "redirects": 0, "latency_ms": { "samples": [ 685.4, 118.3, 371.3 ], "p50": 371.3, "p95": 685.4, "max": 685.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 27 22:15:17 2026 GMT", "days_to_expiry": 61.1, "issuer": "Let's Encrypt", "subject": "kirilllabs.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "30", "cache-control": "no-store", "x-content-type-options": "nosniff", "cf-ray": "a513f3706d8afc2e-SIN" }, "body_bytes_read": 30, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:01:44Z", "elapsed_s": 1.3 } ], "elapsed_s": 2.09 }, { "host": "gethirepulse.xyz", "zone": "gethirepulse.xyz", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.16.252", "172.67.217.191" ], "aaaa": [ "2606:4700:3036::ac43:d9bf", "2606:4700:3036::6815:10fc" ], "resolves": true }, "endpoints": [ { "url": "https://gethirepulse.xyz/v1/company-profile?ref=github", "path": "/v1/company-profile", "ok": true, "final_status": 402, "final_url": "https://gethirepulse.xyz/v1/company-profile?ref=github", "redirects": 0, "latency_ms": { "samples": [ 469.1, 284.2, 324.6 ], "p50": 324.6, "p95": 469.1, "max": 469.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 16 09:44:43 2027 GMT", "days_to_expiry": 80.6, "issuer": "Google Trust Services", "subject": "gethirepulse.xyz", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "4905", "cache-control": "no-store", "x-content-type-options": "nosniff", "access-control-allow-origin": "*", "cf-ray": "a513f37fc95498ed-SIN" }, "body_bytes_read": 4905, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:46Z", "elapsed_s": 1.35 }, { "url": "https://gethirepulse.xyz/v1/verify-merchant", "path": "/v1/verify-merchant", "ok": true, "final_status": 402, "final_url": "https://gethirepulse.xyz/v1/verify-merchant", "redirects": 0, "latency_ms": { "samples": [ 309.0, 313.8, 262.5 ], "p50": 309.0, "p95": 313.8, "max": 313.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 16 09:44:43 2027 GMT", "days_to_expiry": 80.6, "issuer": "Google Trust Services", "subject": "gethirepulse.xyz", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "4695", "cache-control": "no-store", "x-content-type-options": "nosniff", "access-control-allow-origin": "*", "cf-ray": "a513f3883d0a4dd4-SIN" }, "body_bytes_read": 4695, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:48Z", "elapsed_s": 1.46 } ], "elapsed_s": 3.58 }, { "host": "getskavio.com", "zone": "getskavio.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.135.245", "104.21.7.135" ], "aaaa": [ "2606:4700:3030::6815:787", "2606:4700:3037::ac43:87f5" ], "resolves": true }, "endpoints": [ { "url": "https://getskavio.com/x402/v1/usdc/verify?tx_hash=0x98809948204426c574b6f0aabdec03baa996b5c43ce28cc9ca704fa5d07e592e&network=base", "path": "/x402/v1/usdc/verify", "ok": true, "final_status": 402, "final_url": "https://getskavio.com/x402/v1/usdc/verify?tx_hash=0x98809948204426c574b6f0aabdec03baa996b5c43ce28cc9ca704fa5d07e592e&network=base", "redirects": 0, "latency_ms": { "samples": [ 831.8, 835.3, 811.3 ], "p50": 831.8, "p95": 835.3, "max": 835.3 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 23 20:07:51 2027 GMT", "days_to_expiry": 88.0, "issuer": "Let's Encrypt", "subject": "getskavio.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "440", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f399fc9ff8f4-SIN" }, "body_bytes_read": 440, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:52Z", "elapsed_s": 3.29 } ], "elapsed_s": 4.27 }, { "host": "grokbot-dashboard.a3migos.workers.dev", "zone": "a3migos.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "104.21.44.187", "172.67.202.224" ], "aaaa": [ "2606:4700:3036::6815:2cbb", "2606:4700:3032::ac43:cae0" ], "resolves": true }, "endpoints": [ { "url": "https://grokbot-dashboard.a3migos.workers.dev/api/base/token-check", "path": "/api/base/token-check", "ok": true, "final_status": 402, "final_url": "https://grokbot-dashboard.a3migos.workers.dev/api/base/token-check", "redirects": 0, "latency_ms": { "samples": [ 659.0, 485.2, 558.9 ], "p50": 558.9, "p95": 659.0, "max": 659.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 16 17:10:20 2027 GMT", "days_to_expiry": 80.9, "issuer": "Let's Encrypt", "subject": "a3migos.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "9097", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f3b5e8a3ce82-SIN" }, "body_bytes_read": 9097, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:01:56Z", "elapsed_s": 2.19 } ], "elapsed_s": 2.97 }, { "host": "hcrb.in", "zone": "hcrb.in", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.52.122", "172.67.198.254" ], "aaaa": [ "2606:4700:3036::6815:347a", "2606:4700:3031::ac43:c6fe" ], "resolves": true }, "endpoints": [ { "url": "https://hcrb.in/v1/tools/iban-check/call", "path": "/v1/tools/iban-check/call", "ok": true, "final_status": 402, "final_url": "https://hcrb.in/v1/tools/iban-check/call", "redirects": 0, "latency_ms": { "samples": [ 362.9, 231.2, 181.4 ], "p50": 231.2, "p95": 362.9, "max": 362.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 22 12:29:48 2027 GMT", "days_to_expiry": 86.7, "issuer": "Google Trust Services", "subject": "hcrb.in", "san_count": 3, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "6899", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "cf-ray": "a513f3cb08b80517-SIN" }, "body_bytes_read": 6899, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:00Z", "elapsed_s": 3.12 } ], "elapsed_s": 3.91 }, { "host": "inference.bsvkey.com", "zone": "bsvkey.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "13.215.239.219", "52.74.6.109" ], "aaaa": [ "2406:da18:b3d:e201::259", "2406:da18:b3d:e201::258" ], "resolves": true }, "endpoints": [ { "url": "https://inference.bsvkey.com/v1/x402/chat/completions", "path": "/v1/x402/chat/completions", "ok": true, "final_status": 402, "final_url": "https://inference.bsvkey.com/v1/x402/chat/completions", "redirects": 0, "latency_ms": { "samples": [ 1479.9, 714.4, 742.9 ], "p50": 742.9, "p95": 1479.9, "max": 1479.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 23 20:13:43 2027 GMT", "days_to_expiry": 88.0, "issuer": "Let's Encrypt", "subject": "*.bsvkey.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Netlify", "content-type": "application/json", "cache-control": "no-cache", "strict-transport-security": "max-age=31536000", "x-content-type-options": "nosniff" }, "body_bytes_read": 675, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:07Z", "elapsed_s": 5.89 } ], "elapsed_s": 6.88 }, { "host": "kari.mayim-mayim.com", "zone": "mayim-mayim.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.92.166", "172.67.196.141" ], "aaaa": [ "2606:4700:3030::6815:5ca6", "2606:4700:3036::ac43:c48d" ], "resolves": true }, "endpoints": [ { "url": "https://kari.mayim-mayim.com/api/agent/sandbox/mpp/charge/basic", "path": "/api/agent/sandbox/mpp/charge/basic", "ok": true, "final_status": 402, "final_url": "https://kari.mayim-mayim.com/api/agent/sandbox/mpp/charge/basic", "redirects": 0, "latency_ms": { "samples": [ 300.8, 270.3, 324.3 ], "p50": 300.8, "p95": 324.3, "max": 324.3 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 13 14:44:24 2027 GMT", "days_to_expiry": 77.8, "issuer": "Google Trust Services", "subject": "mayim-mayim.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "894", "cache-control": "no-store, private", "access-control-allow-origin": "*", "cf-ray": "a513f4170f34ce85-SIN" }, "body_bytes_read": 894, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:12Z", "elapsed_s": 2.81 } ], "elapsed_s": 4.17 }, { "host": "keplerops--ddb76fd4cf5411f1be831607ee4eb77e.web.val.run", "zone": "val.run", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "104.18.7.54", "104.18.6.54" ], "aaaa": [ "2606:4700::6812:636", "2606:4700::6812:736" ], "resolves": true }, "endpoints": [ { "url": "https://keplerops--ddb76fd4cf5411f1be831607ee4eb77e.web.val.run/v1/ticker/AAPL", "path": "/v1/ticker/AAPL", "ok": true, "final_status": 402, "final_url": "https://keplerops--ddb76fd4cf5411f1be831607ee4eb77e.web.val.run/v1/ticker/AAPL", "redirects": 0, "latency_ms": { "samples": [ 428.1, 390.3, 587.3 ], "p50": 428.1, "p95": 587.3, "max": 587.3 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 11 13:28:04 2026 GMT", "days_to_expiry": 44.8, "issuer": "Let's Encrypt", "subject": "*.web.val.run", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json;charset=UTF-8", "cache-control": "no-store", "strict-transport-security": "max-age=2592000; includeSubDomains", "x-content-type-options": "nosniff", "access-control-allow-origin": "*", "set-cookie": "__cf_bm=.8xBqbjq_.UnJ5PX0m6Y9JxtmkVdPNr14EEby6sgVSs-1793127733.7563815-1.0.1.1-hxD0Z8bOcFmIyLRaMWwNpxQyPLY1vMC9lJt58EygQnosQR45KEnhZC3ExIVoAQV8NVhZLZ3WWE27yy7bMJRuR1SYtuzTYVf.nYng3PuUmSvxWjdw8.PDVzGkiuFX6TCr; HttpOnly; SameSite=None; Secure; Path=/; Domain=val.run; Expires=Tue, 27 Oct 2026 19:32:14 GMT", "cf-ray": "a513f42fff8c89aa-SIN" }, "body_bytes_read": 12, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:15Z", "elapsed_s": 2.33 } ], "elapsed_s": 3.1 }, { "host": "keyring-agent.blockchhub.link", "zone": "blockchhub.link", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.41.235", "172.67.196.184" ], "aaaa": [ "2606:4700:3037::6815:29eb", "2606:4700:3030::ac43:c4b8" ], "resolves": true }, "endpoints": [ { "url": "https://keyring-agent.blockchhub.link/api/swap-token", "path": "/api/swap-token", "ok": true, "final_status": 402, "final_url": "https://keyring-agent.blockchhub.link/api/swap-token", "redirects": 0, "latency_ms": { "samples": [ 171.9, 242.8, 261.7 ], "p50": 242.8, "p95": 261.7, "max": 261.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 3 07:53:57 2027 GMT", "days_to_expiry": 67.5, "issuer": "Google Trust Services", "subject": "blockchhub.link", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "access-control-allow-origin": "*", "cf-ray": "a513f4463ee991b4-SIN" }, "body_bytes_read": 12, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:18Z", "elapsed_s": 0.94 } ], "elapsed_s": 1.77 }, { "host": "lightningfaucet.com", "zone": "lightningfaucet.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.26.6.3", "104.26.7.3", "172.67.73.76" ], "aaaa": [ "2606:4700:20::681a:603", "2606:4700:20::681a:703", "2606:4700:20::ac43:494c" ], "resolves": true }, "endpoints": [ { "url": "https://lightningfaucet.com/api/l402/fortune", "path": "/api/l402/fortune", "ok": true, "final_status": 402, "final_url": "https://lightningfaucet.com/api/l402/fortune", "redirects": 0, "latency_ms": { "samples": [ 688.4, 677.1, 312.0 ], "p50": 677.1, "p95": 688.4, "max": 688.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 31 15:38:01 2026 GMT", "days_to_expiry": 64.9, "issuer": "Let's Encrypt", "subject": "lightningfaucet.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "2496", "cache-control": "no-cache, no-store, must-revalidate", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-UF3V_w9FDzePXIJ41rSt7Q' https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://instant.page https://cdn.applixir.com https://static.cloudflareinsights.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://lightningfaucet.com wss://lightningfaucet.com https://www.google.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://doubleclick.net https://*.doubleclick.net https://g.doubleclick.net https://*.g.doubleclick.net https://cdn.applixir.com https://static.cloudflareinsights.com https://cloudflareinsights.com; frame-src 'self' https://www.google.com https://wall.lootably.com https://cdn.applixir.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri /api/csp-report.php;", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "cf-ray": "a513f45418354717-SIN" }, "body_bytes_read": 2496, "anomalies": [ { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:21Z", "elapsed_s": 2.45 }, { "url": "https://lightningfaucet.com/api/l402/joke", "path": "/api/l402/joke", "ok": true, "final_status": 402, "final_url": "https://lightningfaucet.com/api/l402/joke", "redirects": 0, "latency_ms": { "samples": [ 713.6, 668.1, 722.4 ], "p50": 713.6, "p95": 722.4, "max": 722.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 31 15:38:01 2026 GMT", "days_to_expiry": 64.9, "issuer": "Let's Encrypt", "subject": "lightningfaucet.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "2478", "cache-control": "no-cache, no-store, must-revalidate", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-5geDQAJigYIPJ-e8n9d7EA' https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://instant.page https://cdn.applixir.com https://static.cloudflareinsights.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://lightningfaucet.com wss://lightningfaucet.com https://www.google.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://doubleclick.net https://*.doubleclick.net https://g.doubleclick.net https://*.g.doubleclick.net https://cdn.applixir.com https://static.cloudflareinsights.com https://cloudflareinsights.com; frame-src 'self' https://www.google.com https://wall.lootably.com https://cdn.applixir.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri /api/csp-report.php;", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "cf-ray": "a513f4637b19f934-SIN" }, "body_bytes_read": 2478, "anomalies": [ { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:24Z", "elapsed_s": 2.9 }, { "url": "https://lightningfaucet.com/api/l402/quote", "path": "/api/l402/quote", "ok": true, "final_status": 402, "final_url": "https://lightningfaucet.com/api/l402/quote", "redirects": 0, "latency_ms": { "samples": [ 421.4, 656.8, 663.5 ], "p50": 656.8, "p95": 663.5, "max": 663.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 31 15:38:01 2026 GMT", "days_to_expiry": 64.9, "issuer": "Let's Encrypt", "subject": "lightningfaucet.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "2481", "cache-control": "no-cache, no-store, must-revalidate", "strict-transport-security": "max-age=31536000; includeSubDomains; preload", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-yzXetsNy1HegZ4ZLWoit4Q' https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://instant.page https://cdn.applixir.com https://static.cloudflareinsights.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://lightningfaucet.com wss://lightningfaucet.com https://www.google.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://*.googletagmanager.com https://doubleclick.net https://*.doubleclick.net https://g.doubleclick.net https://*.g.doubleclick.net https://cdn.applixir.com https://static.cloudflareinsights.com https://cloudflareinsights.com; frame-src 'self' https://www.google.com https://wall.lootably.com https://cdn.applixir.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri /api/csp-report.php;", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "cf-ray": "a513f4759c0ac1f2-SIN" }, "body_bytes_read": 2481, "anomalies": [ { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:27Z", "elapsed_s": 2.26 } ], "elapsed_s": 8.5 }, { "host": "m2mfreedom.com", "zone": "m2mfreedom.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "50.17.68.175" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://m2mfreedom.com/api/v1/router/tools/captcha", "path": "/api/v1/router/tools/captcha", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/captcha", "redirects": 0, "latency_ms": { "samples": [ 1093.5, 1017.0, 1106.4 ], "p50": 1093.5, "p95": 1106.4, "max": 1106.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8837", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8837, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:39Z", "elapsed_s": 10.77 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/extract", "path": "/api/v1/router/tools/extract", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/extract", "redirects": 0, "latency_ms": { "samples": [ 1089.9, 1085.7, 1142.0 ], "p50": 1089.9, "p95": 1142.0, "max": 1142.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8837", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8837, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:02:43Z", "elapsed_s": 4.42 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/memory", "path": "/api/v1/router/tools/memory", "ok": true, "final_status": null, "final_url": "https://m2mfreedom.com/api/v1/router/tools/memory", "redirects": 0, "latency_ms": { "samples": [ 1933.4, 1057.4, 1036.7 ], "p50": 1057.4, "p95": 1933.4, "max": 1933.4 }, "tls": null, "headers": {}, "body_bytes_read": 0, "anomalies": [ { "id": "unreachable", "detail": "TimeoutError: The read operation timed out" }, { "id": "tls_error", "detail": "https requested but no TLS session" }, { "id": "missing_content_type", "detail": "no Content-Type on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" }, { "id": "slow_p95", "detail": "p95 1933.4 ms" } ], "expected": {}, "audited_at": "2026-10-27T19:02:55Z", "elapsed_s": 12.05 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/oracle", "path": "/api/v1/router/tools/oracle", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/oracle", "redirects": 0, "latency_ms": { "samples": [ 1077.1, 1105.6, 1080.2 ], "p50": 1080.2, "p95": 1105.6, "max": 1105.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8765", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8765, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:00Z", "elapsed_s": 4.38 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/python", "path": "/api/v1/router/tools/python", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/python", "redirects": 0, "latency_ms": { "samples": [ 1094.4, 1040.6 ], "p50": 1040.6, "p95": 1094.4, "max": 1094.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8815", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8815, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:11Z", "elapsed_s": 11.22 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/scrape", "path": "/api/v1/router/tools/scrape", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/scrape", "redirects": 0, "latency_ms": { "samples": [ 1040.2, 1046.5, 1111.4 ], "p50": 1046.5, "p95": 1111.4, "max": 1111.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8815", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8815, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:15Z", "elapsed_s": 4.24 }, { "url": "https://m2mfreedom.com/api/v1/router/tools/stealth", "path": "/api/v1/router/tools/stealth", "ok": true, "final_status": 402, "final_url": "https://m2mfreedom.com/api/v1/router/tools/stealth", "redirects": 0, "latency_ms": { "samples": [ 1065.8, 1035.4 ], "p50": 1035.4, "p95": 1065.8, "max": 1065.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 17 04:27:43 2027 GMT", "days_to_expiry": 81.4, "issuer": "Let's Encrypt", "subject": "m2mfreedom.com", "san_count": 3, "hostname_verified": true }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "application/json; charset=utf-8", "content-length": "8868", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*" }, "body_bytes_read": 8868, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "server_version_disclosed", "detail": "nginx/1.24.0 (Ubuntu)" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:26Z", "elapsed_s": 11.18 } ], "elapsed_s": 59.54 }, { "host": "mezo.ochinimus.app", "zone": "ochinimus.app", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.84.30", "172.67.185.98" ], "aaaa": [ "2606:4700:3036::6815:541e", "2606:4700:3030::ac43:b962" ], "resolves": true }, "endpoints": [ { "url": "https://mezo.ochinimus.app/api/sol-price", "path": "/api/sol-price", "ok": true, "final_status": 402, "final_url": "https://mezo.ochinimus.app/api/sol-price", "redirects": 0, "latency_ms": { "samples": [ 345.6, 586.2, 584.9 ], "p50": 584.9, "p95": 586.2, "max": 586.2 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 9 09:06:49 2027 GMT", "days_to_expiry": 73.6, "issuer": "Google Trust Services", "subject": "ochinimus.app", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "cache-control": "no-store", "strict-transport-security": "max-age=15552000", "access-control-allow-origin": "*", "cf-ray": "a513f601bee8daa5-SIN" }, "body_bytes_read": 1658, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:31Z", "elapsed_s": 3.18 } ], "elapsed_s": 3.96 }, { "host": "pay.paidwithtab.com", "zone": "paidwithtab.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "104.21.91.27", "172.67.208.220" ], "aaaa": [ "2606:4700:3032::ac43:d0dc", "2606:4700:3034::6815:5b1b" ], "resolves": true }, "endpoints": [ { "url": "https://pay.paidwithtab.com/fx/latest?base=USD", "path": "/fx/latest", "ok": true, "final_status": 402, "final_url": "https://pay.paidwithtab.com/fx/latest?base=USD", "redirects": 0, "latency_ms": { "samples": [ 356.6, 335.6, 1081.4 ], "p50": 356.6, "p95": 1081.4, "max": 1081.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 11 12:39:46 2026 GMT", "days_to_expiry": 44.7, "issuer": "Let's Encrypt", "subject": "paidwithtab.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/problem+json", "access-control-allow-origin": "*", "cf-ray": "a513f61eb826fcf0-SIN" }, "body_bytes_read": 135, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:34Z", "elapsed_s": 2.12 }, { "url": "https://pay.paidwithtab.com/wikipedia/api/rest_v1/page/summary/Lisbon", "path": "/wikipedia/api/rest_v1/page/summary/Lisbon", "ok": true, "final_status": 402, "final_url": "https://pay.paidwithtab.com/wikipedia/api/rest_v1/page/summary/Lisbon", "redirects": 0, "latency_ms": { "samples": [ 212.0, 209.3, 377.0 ], "p50": 212.0, "p95": 377.0, "max": 377.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 11 12:39:46 2026 GMT", "days_to_expiry": 44.7, "issuer": "Let's Encrypt", "subject": "paidwithtab.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/problem+json", "access-control-allow-origin": "*", "cf-ray": "a513f62bf940879f-SIN" }, "body_bytes_read": 135, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:36Z", "elapsed_s": 1.17 } ], "elapsed_s": 4.35 }, { "host": "practical-ambition-production.up.railway.app", "zone": "railway.app", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "69.46.46.90" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://practical-ambition-production.up.railway.app/api/v1/agent/execute", "path": "/api/v1/agent/execute", "ok": true, "final_status": 200, "final_url": "https://practical-ambition-production.up.railway.app/api/v1/agent/execute", "redirects": 0, "latency_ms": { "samples": [ 261.8, 264.8, 252.3 ], "p50": 261.8, "p95": 264.8, "max": 264.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 26 03:01:42 2026 GMT", "days_to_expiry": 59.3, "issuer": "Let's Encrypt", "subject": "*.up.railway.app", "san_count": 2, "hostname_verified": true }, "headers": { "server": "railway-hikari", "content-type": "application/json", "content-length": "275" }, "body_bytes_read": 275, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": {}, "audited_at": "2026-10-27T19:03:38Z", "elapsed_s": 1.05 } ], "elapsed_s": 1.81 }, { "host": "rugshield-402.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://rugshield-402.onrender.com/v1/scan", "path": "/v1/scan", "ok": true, "final_status": 402, "final_url": "https://rugshield-402.onrender.com/v1/scan", "redirects": 0, "latency_ms": { "samples": [ 295.2, 682.5, 289.9 ], "p50": 295.2, "p95": 682.5, "max": 682.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "access-control-allow-origin": "*", "cf-ray": "a513f6441d2a6002-SIN" }, "body_bytes_read": 3828, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:40Z", "elapsed_s": 1.86 } ], "elapsed_s": 1.94 }, { "host": "sandbox.node4all.com", "zone": "node4all.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "64.29.17.1", "64.29.17.65" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://sandbox.node4all.com/v1/x402-test", "path": "/v1/x402-test", "ok": true, "final_status": 402, "final_url": "https://sandbox.node4all.com/v1/x402-test", "redirects": 0, "latency_ms": { "samples": [ 353.0, 325.7, 339.1 ], "p50": 339.1, "p95": 353.0, "max": 353.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 9 11:10:05 2027 GMT", "days_to_expiry": 73.7, "issuer": "Let's Encrypt", "subject": "*.node4all.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Vercel", "content-type": "application/json; charset=utf-8", "content-length": "2", "cache-control": "public, max-age=0, must-revalidate", "strict-transport-security": "max-age=63072000", "access-control-allow-origin": "*" }, "body_bytes_read": 2, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:43Z", "elapsed_s": 1.35 } ], "elapsed_s": 2.19 }, { "host": "scrapeagent.xyz", "zone": "scrapeagent.xyz", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "216.198.79.65", "216.198.79.1" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://scrapeagent.xyz/api/scrape/x402", "path": "/api/scrape/x402", "ok": true, "final_status": 402, "final_url": "https://scrapeagent.xyz/api/scrape/x402", "redirects": 0, "latency_ms": { "samples": [ 325.2, 328.0, 328.8 ], "p50": 328.0, "p95": 328.8, "max": 328.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Dec 5 16:47:12 2026 GMT", "days_to_expiry": 38.9, "issuer": "Let's Encrypt", "subject": "*.scrapeagent.xyz", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Vercel", "content-type": "application/json; charset=utf-8", "content-length": "5612", "cache-control": "public, max-age=0, must-revalidate", "strict-transport-security": "max-age=63072000", "access-control-allow-origin": "*" }, "body_bytes_read": 5612, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:46Z", "elapsed_s": 1.81 } ], "elapsed_s": 2.54 }, { "host": "stableenrich.dev", "zone": "stableenrich.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "216.150.16.129", "216.150.16.193" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://stableenrich.dev/api/exa/search", "path": "/api/exa/search", "ok": true, "final_status": 405, "final_url": "https://stableenrich.dev/api/exa/search", "redirects": 0, "latency_ms": { "samples": [ 342.5, 339.1, 335.3 ], "p50": 339.1, "p95": 342.5, "max": 342.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 21 11:34:57 2027 GMT", "days_to_expiry": 85.7, "issuer": "Let's Encrypt", "subject": "*.stableenrich.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Vercel", "content-length": "0", "cache-control": "public, max-age=0, must-revalidate", "strict-transport-security": "max-age=63072000" }, "body_bytes_read": 0, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_content_type", "detail": "no Content-Type on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:03:49Z", "elapsed_s": 1.35 } ], "elapsed_s": 2.61 }, { "host": "three.ws", "zone": "three.ws", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "136.68.246.178" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://three.ws/api/x402/vanity?prefix=ab", "path": "/api/x402/vanity", "ok": true, "final_status": 402, "final_url": "https://three.ws/api/x402/vanity?prefix=ab", "redirects": 0, "latency_ms": { "samples": [ 1025.1, 318.1, 303.2 ], "p50": 318.1, "p95": 1025.1, "max": 1025.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 20 21:16:55 2027 GMT", "days_to_expiry": 85.1, "issuer": "Google Trust Services", "subject": "three.ws", "san_count": 2, "hostname_verified": true }, "headers": { "server": "Google Frontend", "content-type": "application/json; charset=utf-8", "content-length": "13589", "cache-control": "no-store", "strict-transport-security": "max-age=63072000; includeSubDomains; preload", "content-security-policy": "base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://esm.sh https://ajax.googleapis.com https://s3.tradingview.com https://platform.twitter.com https://3d-agent.vercel.app https://three.ws; worker-src 'self' blob:; frame-ancestors 'self' https://ibm.com https://*.ibm.com https://*.seismic.com; report-uri /api/client-errors", "x-content-type-options": "nosniff", "access-control-allow-origin": "*" }, "body_bytes_read": 13589, "anomalies": [ { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:53Z", "elapsed_s": 1.97 } ], "elapsed_s": 3.88 }, { "host": "tokensafe.x402api.workers.dev", "zone": "x402api.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "172.67.189.130", "104.21.33.97" ], "aaaa": [ "2606:4700:3033::ac43:bd82", "2606:4700:3036::6815:2161" ], "resolves": true }, "endpoints": [ { "url": "https://tokensafe.x402api.workers.dev/api/probe?address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "path": "/api/probe", "ok": true, "final_status": 402, "final_url": "https://tokensafe.x402api.workers.dev/api/probe?address=0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "redirects": 0, "latency_ms": { "samples": [ 183.5, 149.6, 130.1 ], "p50": 149.6, "p95": 183.5, "max": 183.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 3 09:11:44 2027 GMT", "days_to_expiry": 67.6, "issuer": "Let's Encrypt", "subject": "x402api.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "448", "cf-ray": "a513f6a7db06fce2-SIN" }, "body_bytes_read": 448, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:55Z", "elapsed_s": 0.61 } ], "elapsed_s": 1.48 }, { "host": "travel.hanibal-ai.com", "zone": "hanibal-ai.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.194.251", "104.21.60.85" ], "aaaa": [ "2606:4700:3030::ac43:c2fb", "2606:4700:3030::6815:3c55" ], "resolves": true }, "endpoints": [ { "url": "https://travel.hanibal-ai.com/api/attest", "path": "/api/attest", "ok": true, "final_status": 402, "final_url": "https://travel.hanibal-ai.com/api/attest", "redirects": 0, "latency_ms": { "samples": [ 444.2, 585.5, 872.6 ], "p50": 585.5, "p95": 872.6, "max": 872.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 20 16:08:42 2027 GMT", "days_to_expiry": 84.9, "issuer": "Let's Encrypt", "subject": "hanibal-ai.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "2", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "cf-ray": "a513f6b39c68fd97-SIN" }, "body_bytes_read": 2, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:03:59Z", "elapsed_s": 3.03 } ], "elapsed_s": 3.91 }, { "host": "verified-catalog-lookup.withgrokbot.workers.dev", "zone": "withgrokbot.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "172.67.138.234", "104.21.56.245" ], "aaaa": [ "2606:4700:3035::6815:38f5", "2606:4700:3037::ac43:8aea" ], "resolves": true }, "endpoints": [ { "url": "https://verified-catalog-lookup.withgrokbot.workers.dev/v1/lookup/paid?task=web-search&max_price=0.01", "path": "/v1/lookup/paid", "ok": true, "final_status": 402, "final_url": "https://verified-catalog-lookup.withgrokbot.workers.dev/v1/lookup/paid?task=web-search&max_price=0.01", "redirects": 0, "latency_ms": { "samples": [ 192.6, 132.0, 116.0 ], "p50": 132.0, "p95": 192.6, "max": 192.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 19:49:23 2026 GMT", "days_to_expiry": 63.0, "issuer": "Let's Encrypt", "subject": "withgrokbot.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "8405", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f6ce3bf9ce0e-SIN" }, "body_bytes_read": 8405, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:01Z", "elapsed_s": 0.55 }, { "url": "https://verified-catalog-lookup.withgrokbot.workers.dev/v1/products/overnight-cos-pack", "path": "/v1/products/overnight-cos-pack", "ok": true, "final_status": 402, "final_url": "https://verified-catalog-lookup.withgrokbot.workers.dev/v1/products/overnight-cos-pack", "redirects": 0, "latency_ms": { "samples": [ 124.0, 112.3, 114.8 ], "p50": 114.8, "p95": 124.0, "max": 124.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 19:49:23 2026 GMT", "days_to_expiry": 63.0, "issuer": "Let's Encrypt", "subject": "withgrokbot.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "6120", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f6d1cb47601d-SIN" }, "body_bytes_read": 6120, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:01Z", "elapsed_s": 0.48 } ], "elapsed_s": 1.86 }, { "host": "vm5-openapi-x402.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://vm5-openapi-x402.onrender.com/v1/tapeout-cpu0-report", "path": "/v1/tapeout-cpu0-report", "ok": true, "final_status": 402, "final_url": "https://vm5-openapi-x402.onrender.com/v1/tapeout-cpu0-report", "redirects": 0, "latency_ms": { "samples": [ 289.0, 281.4, 274.9 ], "p50": 281.4, "p95": 289.0, "max": 289.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "cache-control": "no-store", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*", "cf-ray": "a513f6d7aa11fdc8-SIN" }, "body_bytes_read": 1527, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:05Z", "elapsed_s": 3.22 }, { "url": "https://vm5-openapi-x402.onrender.com/v1/x402-preflight", "path": "/v1/x402-preflight", "ok": true, "final_status": 402, "final_url": "https://vm5-openapi-x402.onrender.com/v1/x402-preflight", "redirects": 0, "latency_ms": { "samples": [ 270.2, 267.6, 631.3 ], "p50": 270.2, "p95": 631.3, "max": 631.3 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "cache-control": "no-store", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "access-control-allow-origin": "*", "cf-ray": "a513f6ebce146027-SIN" }, "body_bytes_read": 12, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:07Z", "elapsed_s": 1.46 } ], "elapsed_s": 4.76 }, { "host": "x402-bounty-radar.nikolas-sapalidis.workers.dev", "zone": "nikolas-sapalidis.workers.dev", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "172.67.151.186", "104.21.1.10" ], "aaaa": [ "2606:4700:3033::6815:10a", "2606:4700:3031::ac43:97ba" ], "resolves": true }, "endpoints": [ { "url": "https://x402-bounty-radar.nikolas-sapalidis.workers.dev/bounties", "path": "/bounties", "ok": true, "final_status": 402, "final_url": "https://x402-bounty-radar.nikolas-sapalidis.workers.dev/bounties", "redirects": 0, "latency_ms": { "samples": [ 708.7, 204.2, 143.8 ], "p50": 204.2, "p95": 708.7, "max": 708.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 25 08:34:46 2027 GMT", "days_to_expiry": 89.6, "issuer": "Google Trust Services", "subject": "nikolas-sapalidis.workers.dev", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json", "content-length": "567", "cf-ray": "a513f6fcbbaace6a-SIN" }, "body_bytes_read": 567, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:09Z", "elapsed_s": 1.23 } ], "elapsed_s": 2.08 }, { "host": "x402-seller-m8nx.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://x402-seller-m8nx.onrender.com/vet?chain=base&address=0x\u2026", "path": "/vet", "ok": true, "final_status": 400, "final_url": "https://x402-seller-m8nx.onrender.com/vet?chain=base&address=0x\u2026", "redirects": 0, "latency_ms": { "samples": [ 77.8, 78.7, 78.8 ], "p50": 78.7, "p95": 78.8, "max": 78.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "content-length": "0", "cf-ray": "a513f7075e7d6047-SIN" }, "body_bytes_read": 0, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "missing_content_type", "detail": "no Content-Type on final hop" }, { "id": "missing_cache_control", "detail": "no Cache-Control on final hop" } ], "expected": { "expected_body_required": 1 }, "audited_at": "2026-10-27T19:04:10Z", "elapsed_s": 0.33 } ], "elapsed_s": 0.4 }, { "host": "x402-seller-pmlm.onrender.com", "zone": "onrender.com", "zone_shared_platform": true, "host_addresses": { "ok": true, "a": [ "216.24.57.16", "216.24.57.18" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://x402-seller-pmlm.onrender.com/report?q=what+is+RAG", "path": "/report", "ok": true, "final_status": 402, "final_url": "https://x402-seller-pmlm.onrender.com/report?q=what+is+RAG", "redirects": 0, "latency_ms": { "samples": [ 871.8, 289.0, 279.2 ], "p50": 289.0, "p95": 871.8, "max": 871.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 20 23:04:28 2026 GMT", "days_to_expiry": 54.2, "issuer": "Google Trust Services", "subject": "onrender.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "cache-control": "no-store", "access-control-allow-origin": "*", "cf-ray": "a513f70c59d981e6-SIN" }, "body_bytes_read": 3709, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:12Z", "elapsed_s": 1.73 } ], "elapsed_s": 1.81 }, { "host": "x402.gno.dev", "zone": "gno.dev", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "51.15.193.239" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://x402.gno.dev/weather", "path": "/weather", "ok": true, "final_status": 402, "final_url": "https://x402.gno.dev/weather", "redirects": 0, "latency_ms": { "samples": [ 702.7, 685.4, 695.2 ], "p50": 695.2, "p95": 702.7, "max": 702.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 25 14:09:24 2027 GMT", "days_to_expiry": 89.8, "issuer": "Let's Encrypt", "subject": "x402.gno.dev", "san_count": 1, "hostname_verified": true }, "headers": { "content-type": "application/json", "content-length": "3", "cache-control": "no-store" }, "body_bytes_read": 3, "anomalies": [ { "id": "missing_strict_transport_security", "detail": "header absent on final hop" }, { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:16Z", "elapsed_s": 2.79 } ], "elapsed_s": 3.68 }, { "host": "x402.ochinimus.app", "zone": "ochinimus.app", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.185.98", "104.21.84.30" ], "aaaa": [ "2606:4700:3030::ac43:b962", "2606:4700:3036::6815:541e" ], "resolves": true }, "endpoints": [ { "url": "https://x402.ochinimus.app/api/sol-price", "path": "/api/sol-price", "ok": true, "final_status": 402, "final_url": "https://x402.ochinimus.app/api/sol-price", "redirects": 0, "latency_ms": { "samples": [ 1176.4, 351.6, 762.6 ], "p50": 762.6, "p95": 1176.4, "max": 1176.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 9 09:06:49 2027 GMT", "days_to_expiry": 73.6, "issuer": "Google Trust Services", "subject": "ochinimus.app", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "1338", "cache-control": "no-store", "strict-transport-security": "max-age=15552000", "cf-ray": "a513f733ca87294b-SIN" }, "body_bytes_read": 1338, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:20Z", "elapsed_s": 3.06 } ], "elapsed_s": 3.16 }, { "host": "x402.tbs-digital.com", "zone": "tbs-digital.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.207.81", "104.21.85.155" ], "aaaa": [ "2606:4700:3032::ac43:cf51", "2606:4700:3032::6815:559b" ], "resolves": true }, "endpoints": [ { "url": "https://x402.tbs-digital.com/company/resolve", "path": "/company/resolve", "ok": true, "final_status": 402, "final_url": "https://x402.tbs-digital.com/company/resolve", "redirects": 0, "latency_ms": { "samples": [ 588.1, 584.8, 873.7 ], "p50": 588.1, "p95": 873.7, "max": 873.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Jan 18 06:12:44 2027 GMT", "days_to_expiry": 82.5, "issuer": "Let's Encrypt", "subject": "tbs-digital.com", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "2688", "cache-control": "no-store", "strict-transport-security": "max-age=31536000", "x-content-type-options": "nosniff", "access-control-allow-origin": "*", "cf-ray": "a513f74e9ca8fdea-SIN" }, "body_bytes_read": 2688, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:24Z", "elapsed_s": 2.65 } ], "elapsed_s": 3.48 }, { "host": "x402.workfern.com", "zone": "workfern.com", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "64.29.17.1", "216.198.79.1" ], "aaaa": [], "resolves": true }, "endpoints": [ { "url": "https://x402.workfern.com/api/audit", "path": "/api/audit", "ok": true, "final_status": 405, "final_url": "https://x402.workfern.com/api/audit", "redirects": 0, "latency_ms": { "samples": [ 363.4, 340.7, 342.5 ], "p50": 342.5, "p95": 363.4, "max": 363.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "not_after": "Jan 21 11:13:55 2027 GMT", "days_to_expiry": 85.7, "issuer": "Let's Encrypt", "subject": "x402.workfern.com", "san_count": 1, "hostname_verified": true }, "headers": { "server": "Vercel", "content-type": "text/plain; charset=utf-8", "content-length": "18", "cache-control": "public, max-age=0, must-revalidate", "strict-transport-security": "max-age=63072000" }, "body_bytes_read": 18, "anomalies": [ { "id": "missing_x_content_type_options", "detail": "header absent on final hop" }, { "id": "missing_content_security_policy", "detail": "header absent on final hop" } ], "expected": { "expected_method_not_allowed": 1 }, "audited_at": "2026-10-27T19:04:26Z", "elapsed_s": 1.4 } ], "elapsed_s": 2.19 }, { "host": "yruz.one", "zone": "yruz.one", "zone_shared_platform": false, "host_addresses": { "ok": true, "a": [ "172.67.181.49", "104.21.48.70" ], "aaaa": [ "2606:4700:3035::ac43:b531", "2606:4700:3034::6815:3046" ], "resolves": true }, "endpoints": [ { "url": "https://yruz.one/api/audit?url=example.com", "path": "/api/audit", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/audit?url=example.com", "redirects": 0, "latency_ms": { "samples": [ 1062.1, 373.5, 1419.9 ], "p50": 1062.1, "p95": 1419.9, "max": 1419.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3113", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:28 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7764e5e55fc-SIN" }, "body_bytes_read": 3113, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:31Z", "elapsed_s": 3.86 }, { "url": "https://yruz.one/api/crypto/fees", "path": "/api/crypto/fees", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/fees", "redirects": 0, "latency_ms": { "samples": [ 1234.8, 661.3, 504.5 ], "p50": 661.3, "p95": 1234.8, "max": 1234.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3109", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:31 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f78e7e466beb-SIN" }, "body_bytes_read": 3109, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:34Z", "elapsed_s": 2.79 }, { "url": "https://yruz.one/api/crypto/portfolio?address=CWfaj5vDppWCp4q1X4iPYGWpCGY2Rerj9DQWqxTnz1Pp", "path": "/api/crypto/portfolio", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/portfolio?address=CWfaj5vDppWCp4q1X4iPYGWpCGY2Rerj9DQWqxTnz1Pp", "redirects": 0, "latency_ms": { "samples": [ 1534.2, 3592.0, 395.0 ], "p50": 1534.2, "p95": 3592.0, "max": 3592.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3229", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:34 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f79fefe66011-SIN" }, "body_bytes_read": 3229, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 3592.0 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:40Z", "elapsed_s": 6.04 }, { "url": "https://yruz.one/api/crypto/price?ids=bitcoin%2Cethereum%2Csolana", "path": "/api/crypto/price", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/price?ids=bitcoin%2Cethereum%2Csolana", "redirects": 0, "latency_ms": { "samples": [ 646.4, 653.8, 975.7 ], "p50": 653.8, "p95": 975.7, "max": 975.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3389", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:40 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7c5adf58958-SIN" }, "body_bytes_read": 3389, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:43Z", "elapsed_s": 2.76 }, { "url": "https://yruz.one/api/crypto/token?mint=JUPyiwrYJFskUPiHa7hkeR8VUtAeFoSYbKedZNsDvCN", "path": "/api/crypto/token", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/token?mint=JUPyiwrYJFskUPiHa7hkeR8VUtAeFoSYbKedZNsDvCN", "redirects": 0, "latency_ms": { "samples": [ 318.0, 316.8, 309.1 ], "p50": 316.8, "p95": 318.0, "max": 318.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3729", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:43 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7d6da6ace25-SIN" }, "body_bytes_read": 3729, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:44Z", "elapsed_s": 1.26 }, { "url": "https://yruz.one/api/crypto/trending?limit=10", "path": "/api/crypto/trending", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/trending?limit=10", "redirects": 0, "latency_ms": { "samples": [ 329.8, 314.7, 308.8 ], "p50": 314.7, "p95": 329.8, "max": 329.8 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3025", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:44 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7debee387ea-SIN" }, "body_bytes_read": 3025, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:45Z", "elapsed_s": 1.34 }, { "url": "https://yruz.one/api/crypto/tx?signature=kR2EnMwjxxQ3LrZD8fp1e5m6rkkMmDateF5bktxhJDaBaKE6NoP623PbNxjwDVxozQMcgGacBqTEkjrPLzk5TWc", "path": "/api/crypto/tx", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/crypto/tx?signature=kR2EnMwjxxQ3LrZD8fp1e5m6rkkMmDateF5bktxhJDaBaKE6NoP623PbNxjwDVxozQMcgGacBqTEkjrPLzk5TWc", "redirects": 0, "latency_ms": { "samples": [ 290.7, 366.8, 391.5 ], "p50": 366.8, "p95": 391.5, "max": 391.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3497", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:45 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7e7191bde12-SIN" }, "body_bytes_read": 3497, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:48Z", "elapsed_s": 3.13 }, { "url": "https://yruz.one/api/domain?domain=yruz.one", "path": "/api/domain", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/domain?domain=yruz.one", "redirects": 0, "latency_ms": { "samples": [ 992.3, 384.6, 1871.5 ], "p50": 992.3, "p95": 1871.5, "max": 1871.5 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3565", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:49 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f7fab9445900-SIN" }, "body_bytes_read": 3565, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" }, { "id": "slow_p95", "detail": "p95 1871.5 ms" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:52Z", "elapsed_s": 3.65 }, { "url": "https://yruz.one/api/extract?url=https%3A%2F%2Fyruz.one%2F", "path": "/api/extract", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/extract?url=https%3A%2F%2Fyruz.one%2F", "redirects": 0, "latency_ms": { "samples": [ 381.2, 451.7, 322.0 ], "p50": 381.2, "p95": 451.7, "max": 451.7 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3397", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:52 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f8117abc3231-SIN" }, "body_bytes_read": 3397, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:54Z", "elapsed_s": 1.59 }, { "url": "https://yruz.one/api/links?url=https%3A%2F%2Fyruz.one%2F", "path": "/api/links", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/links?url=https%3A%2F%2Fyruz.one%2F", "redirects": 0, "latency_ms": { "samples": [ 325.7, 306.6, 1012.6 ], "p50": 325.7, "p95": 1012.6, "max": 1012.6 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3129", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:54 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f81b688c8202-SIN" }, "body_bytes_read": 3129, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:56Z", "elapsed_s": 1.96 }, { "url": "https://yruz.one/api/trending", "path": "/api/trending", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/trending", "redirects": 0, "latency_ms": { "samples": [ 311.1, 316.9, 513.1 ], "p50": 316.9, "p95": 513.1, "max": 513.1 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3101", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:56 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f827a81a8bcf-SIN" }, "body_bytes_read": 3101, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:04:57Z", "elapsed_s": 1.48 }, { "url": "https://yruz.one/api/unfurl?url=https%3A%2F%2Fyruz.one%2F", "path": "/api/unfurl", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/unfurl?url=https%3A%2F%2Fyruz.one%2F", "redirects": 0, "latency_ms": { "samples": [ 313.7, 956.7, 1089.0 ], "p50": 956.7, "p95": 1089.0, "max": 1089.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3133", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:04:57 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f830e87d7a47-SIN" }, "body_bytes_read": 3133, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:05:00Z", "elapsed_s": 2.74 }, { "url": "https://yruz.one/api/uptime?url=https%3A%2F%2Fyruz.one%2F", "path": "/api/uptime", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/uptime?url=https%3A%2F%2Fyruz.one%2F", "redirects": 0, "latency_ms": { "samples": [ 360.4, 607.0, 330.8 ], "p50": 360.4, "p95": 607.0, "max": 607.0 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3417", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:05:00 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f8421f444422-SIN" }, "body_bytes_read": 3417, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:05:02Z", "elapsed_s": 2.34 }, { "url": "https://yruz.one/api/wallet?address=CWfaj5vDppWCp4q1X4iPYGWpCGY2Rerj9DQWqxTnz1Pp", "path": "/api/wallet", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/wallet?address=CWfaj5vDppWCp4q1X4iPYGWpCGY2Rerj9DQWqxTnz1Pp", "redirects": 0, "latency_ms": { "samples": [ 311.9, 380.9, 379.1 ], "p50": 379.1, "p95": 380.9, "max": 380.9 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3213", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:05:02 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f850ab164e66-SIN" }, "body_bytes_read": 3213, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:05:04Z", "elapsed_s": 1.46 }, { "url": "https://yruz.one/api/x402-check?url=https%3A%2F%2Fyruz.one%2Fapi%2Faudit", "path": "/api/x402-check", "ok": true, "final_status": 402, "final_url": "https://yruz.one/api/x402-check?url=https%3A%2F%2Fyruz.one%2Fapi%2Faudit", "redirects": 0, "latency_ms": { "samples": [ 1116.4, 316.7, 691.1 ], "p50": 691.1, "p95": 1116.4, "max": 1116.4 }, "tls": { "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "not_after": "Dec 29 07:29:25 2026 GMT", "days_to_expiry": 62.5, "issuer": "Google Trust Services", "subject": "yruz.one", "san_count": 2, "hostname_verified": true }, "headers": { "server": "cloudflare", "content-type": "application/json; charset=utf-8", "content-length": "3785", "cache-control": "no-store", "strict-transport-security": "max-age=31536000; includeSubDomains", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "access-control-allow-origin": "*", "set-cookie": "user_session=1cc86b1df384102655064e06de5718cb; expires=Thu, 26 Nov 2026 19:05:04 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=Lax", "cf-ray": "a513f859dc8f87c3-SIN" }, "body_bytes_read": 3785, "anomalies": [ { "id": "missing_content_security_policy", "detail": "header absent on final hop" }, { "id": "cors_wildcard", "detail": "Access-Control-Allow-Origin: *" } ], "expected": { "expected_payment_challenge": 1 }, "audited_at": "2026-10-27T19:05:06Z", "elapsed_s": 2.51 } ], "elapsed_s": 39.63 } ] }