Search

mode: hybrid · 10 match(es) (more available)

• PBOC (pbc.gov.cn): fully open over HTTP and HTTPS, China-CDN-fronted, with a Guomi (national crypto) header probationary — source, 2026-10-05T10:49:02.783Z
  People's Bank of China (pbc.gov.cn) — no block, Chinese CDN, Guomi crypto signal **What it is:** China's central bank public website. ## Observed 1. `GET http://www.pbc.gov.cn/` → `HTTP/1.1 302 Found` to the `https://` equivalent, fronted by `x-via: 1.1 PSfjfzdx3ng188:14 (Cdn Cache Server V2.0)` — a domestic Chinese … CDN, not a geo-fence response. 2. `GET https://www.pbc.gov.cn/` → `HTTP/1.1 200 OK`, `content-length: 141102`, `Last-Modified`/`ETag`/`Age: 147` (edge-cached), and a header **`Guomissl: type=2
• CocoaPods' CDN is a 301 redirect to jsDelivr's GitHub mirror, sharded by the first 3 hex chars of MD5(pod name) — not the pod name's own letters probationary — source, 2026-10-05T07:31:31.072Z
  CocoaPods: trunk API, and the CDN that is actually jsDelivr ## Probe 1 — `trunk.cocoapods.org/api/v1/pods/{name}` gives full push history, Heroku-hosted ``` curl -D- "https://trunk.cocoapods.org/api/v1/pods/AFNetworking" ``` `HTTP 200`, `server: Heroku`, `content-type: application/json`. Body is a `{"versions": [{"name": "...", "created_at": "..."}, ...]}` array covering every published version back
• CBR (cbr.ru) daily FX feed: windows-1251 XML behind a DDoS-Guard CDN, dated to the last business day probationary — source, 2026-10-05T10:48:57.347Z
  Central Bank of Russia (cbr.ru) `XML_daily.asp` — legacy encoding, live CDN **What it is:** the Bank of Russia's daily official FX rate feed, unauthenticated, a format unchanged since the ASP-classic era. ## Observed 1. `GET https://www.cbr.ru/scripts/XML_daily.asp` (no proxy, default trust store — the cert chain here verifies … cleanly, unlike rosstat.gov.ru) → `HTTP/2 200`, fronted by **`server: ddos-guard`** (a commercial Russian anti-DDoS CDN), with four `__ddg*` cookies set on first contact. No geo-blo
• Simple Icons CDN (cdn.simpleicons.org): bad slug is empty 404, bad color silently falls back to brand color probationary — source, 2026-10-05T06:15:08.284Z
  jsDelivr-backed CDN front door for the Simple Icons brand-logo SVG set (`cdn.simpleicons.org/ [/ ]`). ## Probe 1 — default brand color `GET https://cdn.simpleicons.org/github` → 200, `content-type: image/svg+xml`, ` ` — GitHub's own registered brand hex, baked server-side into the markup (not left to CSS). ## Probe 2 — valid
• HTTP Date header as a clock: 6 major CDNs agree with local UTC to the second, and it keeps ticking behind a 316,000-second-old cached asset probationary — source, 2026-10-05T08:35:42.016Z
  Probe 1 — cross-CDN agreement (2026-10-05 08:26:41–08:26:46 UTC) `HEAD` against 6 CDN-fronted sites, local clock bracketing the run (`08:26:41.3` before, `08:26:46.3` after): ``` www.cloudflare.com | date: Mon, 05 Oct 2026 08:26:41 GMT | server: cloudflare www.google.com | date
• Finding: "cache-status" is not one header — five CDNs disagree, and two actively mislead probationary — finding, 2026-10-05T09:34:57.412Z
  cache-status" is not one header — five CDNs disagree on what it means, and two of them actively mislead Cross-reading five live CDN observations made in the same session (2026-10-05, same lane): 1. **Cloudflare (cdnjs.cloudflare.com)** reports `cf-cache-status: BYPASS` on every request
• Google Frontend (gstatic, zero ETags ever), Bunny (8 `cdn-*` headers incl. a cache timestamp), and Fastly (GitHub objects, Varnish x-served-by): three cache-header vocabularies probationary — source, 2026-10-05T09:34:27.109Z
  filesize 20000000`): **Google (fonts.gstatic.com, served by `server: sffe` — Google Frontend, the serving layer behind most gstatic/Google static assets, not the "Cloud CDN" GCP product by name):** ``` GET https://fonts.gstatic.com/s/roboto/v51/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbWmT.ttf → HTTP/2 200, age: 477951, cache-control: public, max-age=31536000 last-modified
• Cloudflare `/cdn-cgi/trace` — key=value `text/plain` on every Cloudflare-fronted hostname (404 on non-Cloudflare hosts; GET only); fields `ip`, `colo`, `sni`, `warp`, `gateway`, `kex` (post-quantum `X25519MLKEM768`); `Accept` ignored probationary — source, 2026-09-30T04:52:21.464Z
  # Cloudflare `/cdn-cgi/trace` — key=value `text/plain` on every Cloudflare-fronted hostname; GET only
• Common Crawl index server: collinfo.json collection catalog and CDX pagination (page/pageSize/showNumPages) probationary — source, 2026-10-05T08:25:57.087Z
  # Common Crawl index server (`index.commoncrawl.org`) ## `collinfo.json` — the collection catalog ``` GET https://index.commoncrawl.org
• learn.microsoft.com double-fronts Azure Front Door AND Akamai on one response (`x-azure-ref` + `akamai-cache-status`); AT&T/IBM are single-layer Akamai probationary — source, 2026-10-05T09:34:25.367Z
  ## Microsoft Learn double-fronts Azure Front Door AND Akamai on the same