Is bxss.me up?
Up
bxss.me is up: it answered our probe normally (HTTP 200).
Observed from 1 region (eu-central) · consensus single_region · what this means
Results by region
1 of 1 configured probe regions reported. Consensus rule: single_region.
| Region | Result | HTTP | Time | TLS | Reason |
|---|---|---|---|---|---|
| eu-central | Up | 200 | 714 ms | valid | http_success |
Up for us but not for you? Try another network or DNS resolver; the block may be local to your ISP or country.
Evidence from eu-central (primary region)
| DNS | Resolved in 3 ms → 2600:1f14:da0:f001:14c9:2f95:b0e2:3e3c, 54.214.14.19 |
|---|---|
| TLS | Valid · TLSv1.2 · issuer Gandi SAS / GandiCert · expires in 49 days |
| HTTP | 200 via HTTP/1.1 · 714 ms total · 0 redirect(s) |
| Access | normal |
| Final URL | https://bxss.me/ |
| Vantage | eu-central (single server probe) |
Security & caching headers explained
| Header | Assessment | What it means |
|---|---|---|
Strict-Transport-Security |
⚠ Improve | Missing. Browsers may still try plain HTTP first; HSTS tells them to always use HTTPS. |
Content-Security-Policy |
⚠ Improve | Missing. A CSP limits which scripts can run and is a strong defence against cross-site scripting. |
X-Content-Type-Options |
⚠ Improve | Missing or not "nosniff". Browsers may MIME-sniff responses. |
X-Frame-Options |
ℹ Note | No X-Frame-Options or CSP frame-ancestors: other sites may embed this page in a frame (clickjacking risk). |
Referrer-Policy |
ℹ Note | Not set; browsers default to strict-origin-when-cross-origin, which is reasonable. |
Permissions-Policy |
ℹ Note | Not set; browser features follow defaults. Optional hardening. |
Cache-Control |
ℹ Note | Not set; caches will use heuristics based on Last-Modified/Expires. |
ETag |
ℹ Note | No ETag or Last-Modified: browsers cannot cheaply revalidate cached copies. |
Vary |
ℹ Note | No Vary header; caches treat all requests for this URL the same. |
Content-Encodinggzip |
✓ Good | Response is compressed (gzip). |
Servernginx |
✓ Good | No software version numbers disclosed. |
All response headers (6)
| Name | Value |
|---|---|
connection | close |
content-encoding | gzip |
content-type | text/html |
date | Thu, 15 Oct 2026 12:36:34 GMT |
server | nginx |
transfer-encoding | chunked |
Recent history
24h: 100.0% responsive (2 checks) · 7d: 100.0% responsive (2 checks) · 30d: 100.0% responsive (2 checks)
| Observed | Result (all regions) | Regions reporting | Per region |
|---|---|---|---|
| Up | 1/1 | eu-central: Up (200) | |
| Up | 1/1 | eu-central: Up (200) |
For scripts and AI agents
- This observation as JSON:
/api/v1/status/bxss.me - History:
/api/v1/status/bxss.me/history - Interface description: OpenAPI 3.1 · semantics: methodology JSON
Observation obs_0mv9iw7fx7fcf1ced3e · checker 2026.10.0 · methodology 1.0