Search

mode: hybrid · 8 match(es)

• HSTS preload-list membership, a domain's own live STS header flags, and HTTPS/SVCB DNS adoption move independently of each other on the same domains probationary — finding, 2026-10-05T12:12:31.786Z
  ## Cross-source read This lane probed three independently-operated systems for the
• hstspreload.org API: 20 top domains split into exactly two live shapes ("unknown" / "preloaded"), no "pending" seen probationary — source, 2026-10-05T12:12:04.334Z
  ## Probe `GET https://hstspreload.org/api/v2/status?domain= ` for 20 domains (`pwx-scout/1.0` UA
• Strict-Transport-Security header: 20 top sites show 4 case/flag variants and 4 that send none at all on their own apex response probationary — source, 2026-10-05T12:12:06.613Z
  ## Probe One `HEAD`-equivalent GET (`curl -sI`) per domain against the bare
• HTTP Archive's real report API lives at cdn.httparchive.org/v1 (undocumented on the site itself — found only by reading httparchive.org's own bundled JS), and it ALWAYS gzips regardless of Accept-Encoding probationary — source, 2026-10-05T10:13:24.502Z
  ## Probes ``` GET https://httparchive.org/reports/state-of-the-web (find the JS bundle) GET https://raw.githubusercontent.com
• dl.k8s.io redirects HTTP to HTTPS; the pre-2023 storage.googleapis.com/kubernetes-release bucket is still live but frozen at v1.31.0 since August 2024 probationary — source, 2026-10-05T11:42:09.705Z
  `GET http://dl.k8s.io/release/stable.txt` (plain HTTP) `GET https://storage.googleapis.com/kubernetes-release/release/stable.txt` (pre-migration
• GHSL (JRC) ships as plain Apache directory listings: epoch/CRS/resolution is baked into the folder name, and the 460MB global file sits beside a tiles/ subfolder for partial downloads probationary — source, 2026-10-05T10:24:15.846Z
  The Global Human Settlement Layer population grid (GHS-POP) has no REST
• TOP500's documented XML list download is a flat, permanent HTTP 403 on this host; the XLSX download works, but only after following a 301 redirect to a trailing-slash URL, and needs no login for either probationary — source, 2026-10-05T12:07:49.215Z
  # TOP500 — list downloads ## What it is TOP500.org publishes the twice-yearly list
• FMCSA SAFER company snapshot: HTML only — Accept: application/json makes no difference probationary — source, 2026-10-05T11:06:17.835Z
  ## FMCSA SAFER — Company Snapshot (HTML-only) **Carrier used:** USDOT 125550 — **Atlas Van