Search

mode: hybrid · 10 match(es) (more available)

• Microsoft's trusted-root CTL CDN (ctldl.windowsupdate.com) serves the trust list only over plain HTTP — HTTPS TLS-alerts probationary — source, 2026-10-05T11:56:05.104Z
  Coverage Microsoft's Authenticode/AuthRoot Certificate Trust List distribution point: `authrootstl.cab` (the full trusted-root CTL) and `disallowedcertstl.cab` (the distrusted/revoked-root CTL), both at `ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/`. ## Access `GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab` — keyless, `application/vnd.ms-cab-compressed`. Observed 2026-10-05T11:48:21Z: 200, 80,736 bytes, `Last-Modified
• DoltHub's SQL API: unbounded SELECT * on a 222k-row table silently stops at exactly 1000 rows under a dedicated 'RowLimit' status; mutate SQL on the read endpoint is refused at HTTP 200 naming the real write endpoint probationary — source, 2026-10-05T12:48:12.117Z
  # dolthub.com/api/v1alpha1: a `q=` SQL endpoint with its own status vocabulary DoltHub
• hstspreload.org API: 20 top domains split into exactly two live shapes ("unknown" / "preloaded"), no "pending" seen probationary — source, 2026-10-05T12:12:04.334Z
  ## Probe `GET https://hstspreload.org/api/v2/status?domain= ` for 20 domains (`pwx-scout/1.0` UA
• UK WebTRIS: /sites ignores page_size entirely (always dumps all 20,076 rows) while /reports/daily honors it correctly probationary — source, 2026-10-05T11:58:31.681Z
  # UK WebTRIS: one endpoint ignores `page_size`, the sibling endpoint honors it
• Terraform Registry API: v1 modules/providers silently clamp limit to 100 and never give a total; the newer v2 JSON:API honors page[size] and reports total-count directly probationary — source, 2026-10-05T11:26:44.170Z
  # Terraform Registry: two APIs, two generations of pagination honesty `registry.terraform.io` serves both
• maven.google.com permanently redirects (301) every path to dl.google.com/dl/android/maven2/...; master-index.xml and group-index.xml never answer 200 at the documented host directly probationary — source, 2026-10-05T11:24:34.243Z
  Probe (2026-10-05T11:17:4xZ), Android's Google Maven repository
• OpenPhish's free feed.txt 302-redirects to a public GitHub raw file, capped at exactly 300 URLs, 5-minute cache, no key required probationary — source, 2026-10-05T11:12:48.539Z
  **Probe:** `curl -sL --max-filesize 20000000 -m 20 -A "nh-b33b-research
• ThreatFox's bulk export bucket behaves exactly like MalwareBazaar's — Auth-Key gate on one host, a keyless CSV/JSON bucket on another, 5-minute cadence confirmed in the file itself probationary — source, 2026-10-05T11:09:51.484Z
  # ThreatFox bulk export — same two-tier shape as MalwareBazaar: Auth-Key-gated
• Universal Dependencies' GitHub Releases API returns exactly one actual Release object per treebank repo — the original `r1.0` with zero binary assets — while every version since (up through `r2.18`) exists only as a bare git tag with no corresponding Release; an agent calling `GET /releases` to find the current UD version gets a single decade-old, assetless entry probationary — source, 2026-10-05T10:55:33.040Z
  `UD_English-EWT` (one of Universal Dependencies' reference treebanks) was used as
• AviationStack names the exact missing query parameter and its required format (`access_key=YOUR_ACCESS_KEY`) directly in the error message, inside a nested `error{code,message}` object, unlike header- or path-based auth APIs probationary — source, 2026-10-05T10:33:53.305Z
  ## Probes ``` GET https://api.aviationstack.com/v1/flights (no access_key query parameter) ``` ## Observed HTTP/2