{
  "schemaVersion": "1.1",
  "target": {
    "id": "target_www.example.com",
    "hostname": "www.example.com",
    "unicodeHostname": "www.example.com",
    "canonicalUrl": "https://www.example.com/"
  },
  "checkId": "chk_0mv9jd5ou69d31c4bd2",
  "consensus": {
    "regionsConfigured": 1,
    "regionsReporting": 1,
    "unavailableRegions": [],
    "counts": {
      "up": 1,
      "reachable_restricted": 0,
      "degraded": 0,
      "down": 0,
      "inconclusive": 0
    },
    "regions": [
      {
        "region": "eu-central",
        "classification": "up",
        "reason": "http_success",
        "httpStatus": 200,
        "durationMs": 292
      }
    ],
    "classification": "up",
    "reachability": "reachable",
    "reason": "single_region",
    "summary": "www.example.com is up: it answered our probe normally (HTTP 200)."
  },
  "observation": {
    "id": "obs_0mv9jd5ou6501edba62",
    "observedAt": "2026-10-15T12:49:44.718Z",
    "vantage": {
      "region": "eu-central",
      "scope": "single-server-probe"
    },
    "reachability": "reachable",
    "classification": "up",
    "reason": "http_success",
    "summary": "www.example.com is up: it answered our probe normally (HTTP 200).",
    "dns": {
      "resolved": true,
      "durationMs": 6,
      "addresses": [
        "2606:4700:10::ac42:93f3",
        "2606:4700:10::6814:179a",
        "104.20.23.154",
        "172.66.147.243"
      ],
      "error": null
    },
    "tls": {
      "attempted": true,
      "valid": true,
      "protocol": "TLSv1.3",
      "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3",
      "validTo": "2026-12-25T22:56:35.000Z",
      "daysRemaining": 71,
      "error": null
    },
    "http": {
      "method": "GET",
      "status": 200,
      "durationMs": 292,
      "redirectCount": 0,
      "finalUrl": "https://www.example.com/",
      "access": "normal",
      "httpVersion": "1.1",
      "hops": [
        {
          "url": "https://www.example.com/",
          "status": 200,
          "durationMs": 292,
          "location": null
        }
      ],
      "error": null
    },
    "headers": {
      "response": {
        "age": "4081",
        "allow": "GET, HEAD",
        "alt-svc": "h3=\":443\"; ma=86400",
        "cf-cache-status": "HIT",
        "cf-ray": "a4aef2104dfed20e-FRA",
        "connection": "close",
        "content-encoding": "br",
        "content-type": "text/html; charset=utf-8",
        "date": "Thu, 15 Oct 2026 12:49:45 GMT",
        "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT",
        "server": "cloudflare",
        "transfer-encoding": "chunked"
      },
      "findings": [
        {
          "id": "hsts",
          "header": "Strict-Transport-Security",
          "present": false,
          "value": null,
          "severity": "warning",
          "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS."
        },
        {
          "id": "csp",
          "header": "Content-Security-Policy",
          "present": false,
          "value": null,
          "severity": "warning",
          "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting."
        },
        {
          "id": "xcto",
          "header": "X-Content-Type-Options",
          "present": false,
          "value": null,
          "severity": "warning",
          "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses."
        },
        {
          "id": "framing",
          "header": "X-Frame-Options",
          "present": false,
          "value": null,
          "severity": "info",
          "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)."
        },
        {
          "id": "referrer",
          "header": "Referrer-Policy",
          "present": false,
          "value": null,
          "severity": "info",
          "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable."
        },
        {
          "id": "permissions",
          "header": "Permissions-Policy",
          "present": false,
          "value": null,
          "severity": "info",
          "summary": "Not set; browser features follow defaults. Optional hardening."
        },
        {
          "id": "cache",
          "header": "Cache-Control",
          "present": false,
          "value": null,
          "severity": "info",
          "summary": "Not set; caches will use heuristics based on Last-Modified/Expires."
        },
        {
          "id": "validators",
          "header": "ETag",
          "present": true,
          "value": "Tue, 13 Oct 2026 20:08:28 GMT",
          "severity": "good",
          "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body."
        },
        {
          "id": "vary",
          "header": "Vary",
          "present": false,
          "value": null,
          "severity": "info",
          "summary": "No Vary header; caches treat all requests for this URL the same."
        },
        {
          "id": "compression",
          "header": "Content-Encoding",
          "present": true,
          "value": "br",
          "severity": "good",
          "summary": "Response is compressed (br)."
        },
        {
          "id": "server",
          "header": "Server",
          "present": true,
          "value": "cloudflare",
          "severity": "good",
          "summary": "No software version numbers disclosed."
        }
      ]
    }
  },
  "regions": [
    {
      "id": "obs_0mv9jd5ou6501edba62",
      "observedAt": "2026-10-15T12:49:44.718Z",
      "vantage": {
        "region": "eu-central",
        "scope": "single-server-probe"
      },
      "reachability": "reachable",
      "classification": "up",
      "reason": "http_success",
      "summary": "www.example.com is up: it answered our probe normally (HTTP 200).",
      "dns": {
        "resolved": true,
        "durationMs": 6,
        "addresses": [
          "2606:4700:10::ac42:93f3",
          "2606:4700:10::6814:179a",
          "104.20.23.154",
          "172.66.147.243"
        ],
        "error": null
      },
      "tls": {
        "attempted": true,
        "valid": true,
        "protocol": "TLSv1.3",
        "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3",
        "validTo": "2026-12-25T22:56:35.000Z",
        "daysRemaining": 71,
        "error": null
      },
      "http": {
        "method": "GET",
        "status": 200,
        "durationMs": 292,
        "redirectCount": 0,
        "finalUrl": "https://www.example.com/",
        "access": "normal",
        "httpVersion": "1.1",
        "hops": [
          {
            "url": "https://www.example.com/",
            "status": 200,
            "durationMs": 292,
            "location": null
          }
        ],
        "error": null
      },
      "headers": {
        "response": {
          "age": "4081",
          "allow": "GET, HEAD",
          "alt-svc": "h3=\":443\"; ma=86400",
          "cf-cache-status": "HIT",
          "cf-ray": "a4aef2104dfed20e-FRA",
          "connection": "close",
          "content-encoding": "br",
          "content-type": "text/html; charset=utf-8",
          "date": "Thu, 15 Oct 2026 12:49:45 GMT",
          "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT",
          "server": "cloudflare",
          "transfer-encoding": "chunked"
        },
        "findings": [
          {
            "id": "hsts",
            "header": "Strict-Transport-Security",
            "present": false,
            "value": null,
            "severity": "warning",
            "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS."
          },
          {
            "id": "csp",
            "header": "Content-Security-Policy",
            "present": false,
            "value": null,
            "severity": "warning",
            "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting."
          },
          {
            "id": "xcto",
            "header": "X-Content-Type-Options",
            "present": false,
            "value": null,
            "severity": "warning",
            "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses."
          },
          {
            "id": "framing",
            "header": "X-Frame-Options",
            "present": false,
            "value": null,
            "severity": "info",
            "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)."
          },
          {
            "id": "referrer",
            "header": "Referrer-Policy",
            "present": false,
            "value": null,
            "severity": "info",
            "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable."
          },
          {
            "id": "permissions",
            "header": "Permissions-Policy",
            "present": false,
            "value": null,
            "severity": "info",
            "summary": "Not set; browser features follow defaults. Optional hardening."
          },
          {
            "id": "cache",
            "header": "Cache-Control",
            "present": false,
            "value": null,
            "severity": "info",
            "summary": "Not set; caches will use heuristics based on Last-Modified/Expires."
          },
          {
            "id": "validators",
            "header": "ETag",
            "present": true,
            "value": "Tue, 13 Oct 2026 20:08:28 GMT",
            "severity": "good",
            "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body."
          },
          {
            "id": "vary",
            "header": "Vary",
            "present": false,
            "value": null,
            "severity": "info",
            "summary": "No Vary header; caches treat all requests for this URL the same."
          },
          {
            "id": "compression",
            "header": "Content-Encoding",
            "present": true,
            "value": "br",
            "severity": "good",
            "summary": "Response is compressed (br)."
          },
          {
            "id": "server",
            "header": "Server",
            "present": true,
            "value": "cloudflare",
            "severity": "good",
            "summary": "No software version numbers disclosed."
          }
        ]
      }
    }
  ],
  "provenance": {
    "checkerVersion": "2026.10.0",
    "methodologyVersion": "1.0",
    "methodology": "https://headerlens.usefulweb.site/methodology"
  },
  "links": {
    "self": "https://headerlens.usefulweb.site/api/v1/status/www.example.com",
    "human": "https://headerlens.usefulweb.site/status/www.example.com",
    "history": "https://headerlens.usefulweb.site/api/v1/status/www.example.com/history",
    "methodology": "https://headerlens.usefulweb.site/api/v1/methodology"
  }
}