{ "schemaVersion": "1.1", "target": { "id": "target_www.example.com", "hostname": "www.example.com", "unicodeHostname": "www.example.com", "canonicalUrl": "https://www.example.com/" }, "rollups": [ { "window": "24h", "since": "2026-10-14T14:30:12.232Z", "observations": 24, "counts": { "up": 24, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "availability": 1 }, { "window": "7d", "since": "2026-10-08T14:30:12.232Z", "observations": 24, "counts": { "up": 24, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "availability": 1 }, { "window": "30d", "since": "2026-09-15T14:30:12.232Z", "observations": 24, "counts": { "up": 24, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "availability": 1 } ], "checks": [ { "checkId": "chk_0mv9jd5ou69d31c4bd2", "observedAt": "2026-10-15T12:49:44.718Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 292 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9jd5ou6501edba62", "observedAt": "2026-10-15T12:49:44.718Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 6, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 292, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 292, "location": null } ], "error": null }, "headers": { "response": { "age": "4081", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aef2104dfed20e-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:49:45 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9jbt0c364162e673", "observedAt": "2026-10-15T12:48:41.628Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 292 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9jbt0caac8574927", "observedAt": "2026-10-15T12:48:41.628Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 292, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 292, "location": null } ], "error": null }, "headers": { "response": { "age": "4018", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aef085f950e7b6-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:48:41 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9jaoly3d7932b882", "observedAt": "2026-10-15T12:47:49.270Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 314 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9jaoly453c8d7bd5", "observedAt": "2026-10-15T12:47:49.270Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 314, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 314, "location": null } ], "error": null }, "headers": { "response": { "age": "3965", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aeef3edfede7b8-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:47:49 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j97iqb92f4943b4", "observedAt": "2026-10-15T12:46:40.466Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 305 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j97iq945e5fa1a4", "observedAt": "2026-10-15T12:46:40.466Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 5, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 305, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 305, "location": null } ], "error": null }, "headers": { "response": { "age": "2049", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aeed90c8e7d7e7-CDG", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:46:40 GMT", "last-modified": "Tue, 13 Oct 2026 22:05:48 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 22:05:48 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j7zn734d64d77c2", "observedAt": "2026-10-15T12:45:43.603Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 311 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j7zn7e68c751174", "observedAt": "2026-10-15T12:45:43.603Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 5, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 311, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 311, "location": null } ], "error": null }, "headers": { "response": { "age": "1992", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aeec2d5f2200c6-CDG", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:45:43 GMT", "last-modified": "Tue, 13 Oct 2026 22:05:48 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 22:05:48 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j70t01b99b546c9", "observedAt": "2026-10-15T12:44:58.452Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 309 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j70t0f68440d77b", "observedAt": "2026-10-15T12:44:58.452Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 2, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 309, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 309, "location": null } ], "error": null }, "headers": { "response": { "age": "1947", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aeeb132d416f66-CDG", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:44:58 GMT", "last-modified": "Tue, 13 Oct 2026 22:05:48 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 22:05:48 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j64xo5aca8ded3b", "observedAt": "2026-10-15T12:44:17.148Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 309 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j64xo08fd26d066", "observedAt": "2026-10-15T12:44:17.148Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 8, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 309, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 309, "location": null } ], "error": null }, "headers": { "response": { "age": "1906", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aeea111dc0b6e3-CDG", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:44:17 GMT", "last-modified": "Tue, 13 Oct 2026 22:05:48 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 22:05:48 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j5ajw333bc9307f", "observedAt": "2026-10-15T12:43:37.772Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 283 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j5ajw4c3cc5789f", "observedAt": "2026-10-15T12:43:37.772Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 1, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 283, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 283, "location": null } ], "error": null }, "headers": { "response": { "age": "3714", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee91acbd26512-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:43:38 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j4mld0bb0e2f829", "observedAt": "2026-10-15T12:43:06.721Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 295 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j4mld94f5ddae5f", "observedAt": "2026-10-15T12:43:06.721Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 295, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 295, "location": null } ], "error": null }, "headers": { "response": { "age": "3683", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee858bd5865b2-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:43:07 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j3z56731e888fcf", "observedAt": "2026-10-15T12:42:36.330Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 294 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j3z56f1fe412586", "observedAt": "2026-10-15T12:42:36.330Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 294, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 294, "location": null } ], "error": null }, "headers": { "response": { "age": "3652", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee79ade22d2bf-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:42:36 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j2wrqac82665706", "observedAt": "2026-10-15T12:41:46.598Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 297 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j2wrqa207a5c9dd", "observedAt": "2026-10-15T12:41:46.598Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 297, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 297, "location": null } ], "error": null }, "headers": { "response": { "age": "3603", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee663f8373830-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:41:46 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j241dc31fd45cdc", "observedAt": "2026-10-15T12:41:09.361Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 284 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j241dff7ec96e57", "observedAt": "2026-10-15T12:41:09.361Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 1, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 284, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 284, "location": null } ], "error": null }, "headers": { "response": { "age": "3565", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee57b3b01d3b9-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:41:09 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j1duhba2e31a3f6", "observedAt": "2026-10-15T12:40:35.417Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 283 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j1duhe28360ffab", "observedAt": "2026-10-15T12:40:35.417Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 2, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 283, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 283, "location": null } ], "error": null }, "headers": { "response": { "age": "3531", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee4a718daafea-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:40:35 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9j0mvi935aaf5745", "observedAt": "2026-10-15T12:40:00.462Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 291 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9j0mvi5ec5e5a3b1", "observedAt": "2026-10-15T12:40:00.462Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 15, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 291, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 291, "location": null } ], "error": null }, "headers": { "response": { "age": "3497", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee3ccc9a837bd-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:40:00 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9izy41a2a2aaebd0", "observedAt": "2026-10-15T12:39:28.369Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 296 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9izy41d5511caa55", "observedAt": "2026-10-15T12:39:28.369Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 3, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 296, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 296, "location": null } ], "error": null }, "headers": { "response": { "age": "3464", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee3042ac7a388-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:39:28 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9iyr0oe7749e9ffc", "observedAt": "2026-10-15T12:38:32.520Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 291 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9iyr0o041ecef8bf", "observedAt": "2026-10-15T12:38:32.520Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 5, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 291, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 291, "location": null } ], "error": null }, "headers": { "response": { "age": "3409", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee1a70ef0bc85-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:38:32 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9ixrjm1b2a2a810d", "observedAt": "2026-10-15T12:37:46.546Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 292 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9ixrjmb7f47a1663", "observedAt": "2026-10-15T12:37:46.546Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 2, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 292, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 292, "location": null } ], "error": null }, "headers": { "response": { "age": "3363", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aee087ab26bb44-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:37:46 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9iw52l8e01ad2b56", "observedAt": "2026-10-15T12:36:30.765Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 295 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9iw52lcc11007176", "observedAt": "2026-10-15T12:36:30.765Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 2, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 295, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 295, "location": null } ], "error": null }, "headers": { "response": { "age": "3287", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aedeae0ac61d92-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:36:31 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9iuv1a8d7657e851", "observedAt": "2026-10-15T12:35:31.102Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 314 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9iuv1ae73703f197", "observedAt": "2026-10-15T12:35:31.102Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 16, "addresses": [ "2606:4700:10::6814:179a", "2606:4700:10::ac42:93f3", "104.20.23.154", "172.66.147.243" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 314, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 314, "location": null } ], "error": null }, "headers": { "response": { "age": "3227", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aedd393d478bfb-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:35:31 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] }, { "checkId": "chk_0mv9itk0z472a27e275", "observedAt": "2026-10-15T12:34:30.179Z", "consensus": { "regionsConfigured": 1, "regionsReporting": 1, "unavailableRegions": [], "counts": { "up": 1, "reachable_restricted": 0, "degraded": 0, "down": 0, "inconclusive": 0 }, "regions": [ { "region": "eu-central", "classification": "up", "reason": "http_success", "httpStatus": 200, "durationMs": 295 } ], "classification": "up", "reachability": "reachable", "reason": "single_region", "summary": "www.example.com is up: it answered our probe normally (HTTP 200)." }, "regions": [ { "id": "obs_0mv9itk0zf330f87713", "observedAt": "2026-10-15T12:34:30.179Z", "vantage": { "region": "eu-central", "scope": "single-server-probe" }, "reachability": "reachable", "classification": "up", "reason": "http_success", "summary": "www.example.com is up: it answered our probe normally (HTTP 200).", "dns": { "resolved": true, "durationMs": 6, "addresses": [ "2606:4700:10::ac42:93f3", "2606:4700:10::6814:179a", "172.66.147.243", "104.20.23.154" ], "error": null }, "tls": { "attempted": true, "valid": true, "protocol": "TLSv1.3", "issuer": "SSL Corporation / Cloudflare TLS Issuing ECC CA 3", "validTo": "2026-12-25T22:56:35.000Z", "daysRemaining": 71, "error": null }, "http": { "method": "GET", "status": 200, "durationMs": 295, "redirectCount": 0, "finalUrl": "https://www.example.com/", "access": "normal", "httpVersion": "1.1", "hops": [ { "url": "https://www.example.com/", "status": 200, "durationMs": 295, "location": null } ], "error": null }, "headers": { "response": { "age": "3166", "allow": "GET, HEAD", "alt-svc": "h3=\":443\"; ma=86400", "cf-cache-status": "HIT", "cf-ray": "a4aedbbc684aaa00-FRA", "connection": "close", "content-encoding": "br", "content-type": "text/html; charset=utf-8", "date": "Thu, 15 Oct 2026 12:34:30 GMT", "last-modified": "Tue, 13 Oct 2026 20:08:28 GMT", "server": "cloudflare", "transfer-encoding": "chunked" }, "findings": [ { "id": "hsts", "header": "Strict-Transport-Security", "present": false, "value": null, "severity": "warning", "summary": "Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS." }, { "id": "csp", "header": "Content-Security-Policy", "present": false, "value": null, "severity": "warning", "summary": "Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting." }, { "id": "xcto", "header": "X-Content-Type-Options", "present": false, "value": null, "severity": "warning", "summary": "Missing or not \"nosniff\". Browsers may MIME-sniff responses." }, { "id": "framing", "header": "X-Frame-Options", "present": false, "value": null, "severity": "info", "summary": "No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk)." }, { "id": "referrer", "header": "Referrer-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browsers default to strict-origin-when-cross-origin, which is reasonable." }, { "id": "permissions", "header": "Permissions-Policy", "present": false, "value": null, "severity": "info", "summary": "Not set; browser features follow defaults. Optional hardening." }, { "id": "cache", "header": "Cache-Control", "present": false, "value": null, "severity": "info", "summary": "Not set; caches will use heuristics based on Last-Modified/Expires." }, { "id": "validators", "header": "ETag", "present": true, "value": "Tue, 13 Oct 2026 20:08:28 GMT", "severity": "good", "summary": "Revalidation is possible via Last-Modified, so unchanged pages can return 304 instead of the full body." }, { "id": "vary", "header": "Vary", "present": false, "value": null, "severity": "info", "summary": "No Vary header; caches treat all requests for this URL the same." }, { "id": "compression", "header": "Content-Encoding", "present": true, "value": "br", "severity": "good", "summary": "Response is compressed (br)." }, { "id": "server", "header": "Server", "present": true, "value": "cloudflare", "severity": "good", "summary": "No software version numbers disclosed." } ] } } ] } ], "links": { "self": "https://headerlens.usefulweb.site/api/v1/status/www.example.com/history?limit=20", "human": "https://headerlens.usefulweb.site/status/www.example.com", "next": "https://headerlens.usefulweb.site/api/v1/status/www.example.com/history?limit=20&before=2026-10-15T12%3A34%3A30.179Z" } }