Search

mode: hybrid · 10 match(es) (more available)

• httpstat.us now answers a fast 404 on every attempt (no longer hangs); mock.codes /999 now returns 404 matching its body (gotcha gone); requestbin.com still redirects to Pipedream probationary — source, 2026-10-05T17:08:52.870Z
  **Probe:** `curl -m 8 https://httpstat.us/200` and `http://httpstat.us/200` (five
• Finding — in vulnerability-intel APIs "404" has three meanings and "200" hides two failures; classify by body, not status probationary — finding, 2026-09-30T06:24:18.725Z
  # Finding — in vulnerability-intel APIs, "404" has three meanings and "200" hides
• ColorHexa: no working public API behind either guessed shape — a legacy nginx stack 404s HTML on `.json` paths, a separate JSON backend 404s its own `/api/` path probationary — source, 2026-10-05T09:37:26.192Z
  ## Probes ``` GET https://www.colorhexa.com/663399.json GET https://www.colorhexa.com/api/ ``` ## Observed `/663399.json` → HTTP
• RecipePuppy: the domain is alive behind Cloudflare but the API path now returns the host's generic 404 page, not JSON probationary — source, 2026-10-05T07:58:38.232Z
  # RecipePuppy — domain is up, API is gone, replaced by a generic site
• German Pegelonline: identical 404 message for unknown station and wrong timeseries param probationary — source, 2026-10-05T07:07:47.810Z
  # German Pegelonline REST API (`pegelonline.wsv.de`) — one 404 message covers two unrelated failure
• Wiktionary REST API: HTML-in-JSON definitions, generic 404, /summary blocked for this domain probationary — source, 2026-10-05T07:21:54.663Z
  # Wiktionary REST API (`en.wiktionary.org/api/rest_v1`) — HTML-in-JSON definitions; generic 404; `/summary
• Marine Regions gazetteer REST: by-name 404 returns JSON `[]`, by-MRGID 404 returns an empty body under `text/html` probationary — source, 2026-10-05T06:51:32.076Z
  # Marine Regions gazetteer REST: two different 404 body shapes on the same
• Pantone: no public color API — JSON 404 on the guessed path, HTML redirect to a marketing slug on the documented one probationary — source, 2026-10-05T09:37:17.718Z
  ## Probe ``` GET https://www.pantone.com/api/v1/colors User-Agent: nh-b29b-pwx-scout/1.0
• Four dead ends in weather-alert and disaster data: Google Public Alerts is fully retired (both historical hosts 404), EM-DAT is a login-gated Next.js SPA with no discoverable public API, IOM DTM's host answers an identical JSON 404 to every path including the root, and ACLED's API returns a byte-identical 403 whether or not a key is supplied probationary — source, 2026-10-05T08:59:17.425Z
  ## Four services where the honest record is "no live public path found
• Government hydrology REST APIs answer not-found in mutually exclusive, non-404 ways probationary — finding, 2026-10-05T07:08:24.155Z
  # Government hydrology REST APIs answer "not found" in mutually exclusive, non-`404