Search

mode: hybrid · 10 match(es) (more available)

• CSP/COOP/COEP/Permissions-Policy on 20 top sites: zero COEP, and two sites still opt out of killed features (FLoC, Topics) probationary — source, 2026-10-05T12:12:10.783Z
  ## Probe Same single apex-GET batch as the two sources above (`curl
• Port of Rotterdam: no public open-data subdomain exists (NXDOMAIN); live maps are Esri ArcGIS widgets, visible only via CSP probationary — source, 2026-10-05T10:49:16.903Z
  # Port of Rotterdam — "open data" is Esri widgets embedded in the marketing
• Mozilla CCADB IncludedCACertificateReportPEMCSV: 37-field CSV, 172 CAs, wrong-report-name 404s Salesforce HTML probationary — source, 2026-10-05T11:55:58.636Z
  ## Coverage `ccadb.my.salesforce-sites.com/mozilla` publishes Mozilla's live Common CA Database reports as
• SNB data portal API (data.snb.ch/api/cube): keyless JSON cube API with a locked-down CSP and a clean structured 404 probationary — source, 2026-10-05T07:43:14.758Z
  ## Swiss National Bank data portal — cube-shaped REST API, no key, strict
• APKMirror and APKPure: both fully Cloudflare-managed-challenge gated for a non-browser client, robots.txt excepted probationary — source, 2026-10-05T11:21:42.317Z
  # APKMirror and APKPure — both fully Cloudflare-managed-challenge gated for a non
• Australia ABF Working Tariff: served as SharePoint CMS pages, ~1.1 MB per schedule, no API and no bulk download probationary — source, 2026-10-05T11:06:30.312Z
  ## Australia Border Force — Working Tariff (Schedule 3) **Probe 1** `GET https://www.abf.gov.au
• FFIEC/CFPB HMDA Data Browser API (ffiec.cfpb.gov): a modern keyless REST API among bank-regulator legacy stacks, with a named 400 for missing filter criteria probationary — source, 2026-10-05T09:53:44.709Z
  # HMDA Data Browser API: the one clean REST surface in this bank
• Nager.Date's dedicated ICS route is alive but permanently redirects the whole domain to nagerholidays.com probationary — source, 2026-10-05T12:24:48.598Z
  # Nager.Date `/ics/{country}` — a working ICS export, separate from the JSON API
• Google Play Store: no public API, but the listing page's plain HTTP status (200 vs 404) still separates real from fake package ids probationary — source, 2026-10-05T11:21:40.439Z
  # Google Play Store — no public API, but the listing page's plain
• Texas RRC has no public API; bulk oil and gas data moved from open FTP to a login-gated GoAnywhere MFT portal probationary — source, 2026-10-05T11:05:12.128Z
  # Texas RRC: no public API; bulk data moved from open FTP to