addrbookFor publishers
← The evidence ledger

Evidence row 408437

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://bess-x402.onrender.com/v1/web/headers
Recorded
Previous row
#71629
Body SHA-256
fff7b54c5ce82dece594d4d1f4960a73f6992e7b75de2217c87c0b5904284ab3
Leaf
0xbcedc09618aba8ea6954643474cb5303e5cf06c63c3a5ad8f11242a48825967a

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://bess-x402.onrender.com/v1/web/headers"
    ]
  ],
  "name": "HTTP Headers & Security Grade",
  "owner_address": "0x1129a6bb9c6165ff07fdc509c107b522ca0e1871",
  "raw": {
    "accepts": [
      {
        "amount": "3000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:137",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      },
      {
        "amount": "3000",
        "asset": "0xaf88d065e77c8cC2239327C5EDb3A432268e5831",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:42161",
        "payTo": "0x1129A6BB9C6165FF07fdC509c107B522CA0e1871",
        "scheme": "exact"
      }
    ],
    "description": "Fetch a URL's HTTP response headers with the full redirect chain, status, server, caching and a security grade (A-F) based on HSTS, CSP, X-Frame-Options and other headers, listing what is missing. Use for security reviews, redirect debugging or SEO checks.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "method": "GET",
            "queryParams": {
              "url": "https://stripe.com"
            },
            "type": "http"
          },
          "output": {
            "example": {
              "cache_control": null,
              "content_type": "text/html; charset=utf-8",
              "final_url": "https://stripe.com",
              "headers": {
                "connection": "keep-alive",
                "content-encoding": "gzip",
                "content-security-policy": "base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...",
                "content-type": "text/html; charset=utf-8",
                "cross-origin-opener-policy": "same-origin-allow-popups; report-to=\"wsp_coop\"",
                "cross-origin-opener-policy-report-only": "same-origin-allow-popups; report-to=\"wsp_coop\"",
                "date": "Thu, 22 Oct 2026 06:45:11 GMT",
                "referrer-policy": "no-referrer-when-downgrade",
                "report-to": "{\"group\":\"coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report\"}],\"include_subdomains\":true}, {\"group\":\"wsp_coop\",\"max_age\":8640,\"endpoints\":[{\"url\":\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\"}],\"include_subdomains\":true...",
                "reporting-endpoints": "coop=\"https://q.stripe.com/coop-report\", wsp_coop=\"https://q.stripe.com/coop-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", wsp_coep=\"https://q.stripe.com/coep-report?s=ih8r_9xD8reTq2GImEhevMTnJjBJVudcguWTmqWFe-Ec_YZGKLS0EqxyfHoU4sY=\", csp=\"https://q.stripe.com/csp-repor...",
                "server": "nginx",
                "set-cookie": "cid=407dcab3-4cf7-3e75-862d-15bf5d72f327; Path=/; Domain=stripe.com; Max-Age=7776000; Secure; SameSite=Lax",
                "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                "transfer-encoding": "chunked",
                "x-content-type-options": "nosniff",
                "x-frame-options": "SAMEORIGIN",
                "x-mkt-cache": "HIT",
                "x-stripe-proxy-response": "upstream",
                "x-stripe-server-rpc-duration-micros": "65156",
                "x-wc": "3ff"
              },
              "https": true,
              "powered_by": null,
              "redirects": [],
              "security": {
                "grade": "A",
                "insecure_cookies": 1,
                "missing": [
                  "permissions-policy"
                ],
                "present": {
                  "content-security-policy": "base-uri 'none'; child-src 'none'; connect-src https://c.increment.com https://c.stripe.dev https://c.stripe.global https://c.stripe.partners blob: https://b.stripecdn.com https://errors.stripe.com https://ext.stripe.com https://r.stripe.com https://stripe-images.s3.us-west-1.amazonaws.com https://s...",
                  "cross-origin-opener-policy": "same-origin-allow-popups; report-to=\"wsp_coop\"",
                  "referrer-policy": "no-referrer-when-downgrade",
                  "strict-transport-security": "max-age=63072000; includeSubDomains; preload",
                  "x-content-type-options": "nosniff",
                  "x-frame-options": "SAMEORIGIN"
                },
                "score": 90
              },
              "server": "nginx",
              "status": 200,
              "url": "https://stripe.com"
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "method": {
                  "enum": [
                    "GET",
                    "HEAD",
                    "DELETE"
                  ],
                  "type": "string"
                },
                "queryParams": {
                  "properties": {
                    "url": {
                      "description": "URL or domain",
                      "type": "string"
                    }
                  },
                  "required": [
                    "url"
                  ],
                  "type": "object"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      }
    },
    "lastUpdated": "2026-10-27T05:08:31.666Z",
    "quality": {
      "l30DaysTotalCalls": 2,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-23T13:36:34.832Z"
    },
    "resource": "https://bess-x402.onrender.com/v1/web/headers",
    "serviceName": "HTTP Headers & Security Grade",
    "tags": [
      "security",
      "http",
      "headers",
      "redirects",
      "seo"
    ],
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Fetch a URL's HTTP response headers with the full redirect chain, status, server, caching and a security grade (A-F) based on HSTS, CSP, X-Frame-Options and other headers, listing what is missing. Use for security reviews, redirect debugging or SEO checks."
}

What the leaf hashes

{"body":"fff7b54c5ce82dece594d4d1f4960a73f6992e7b75de2217c87c0b5904284ab3","id":408437,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793080303420474,"prev":71629,"subject":"x402_bazaar:https://bess-x402.onrender.com/v1/web/headers","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (273461 rows).

  1. 0xbcedbded2a1c8da6372e39a943904ff881519fe6a0eaad85a058c3c9a2e21772
  2. 0x1d50f574e11a33852d211b8a5b2ce627dc4333719b0e620d15ad55e7934d9c3f
  3. 0x24151a9e89c1abe7774cbcaecd4457d5dfd96d13c5e47fbd3d1ae2f95ca62005
  4. 0xb756f4bc0ae6ad8bb1c0b3ec6838f16d44e4b4366d0dbd018091a3b9bf01f913
  5. 0xae6f2ddab37a3a4cb1484bf2e6fb34327a18d92eec4f1bca68cd434ae7b254ee
  6. 0x06ebbb4cd2588d8ff6749f157c6dfb1997974534d50f6771a4d0886aeeedd036
  7. 0x8819fccbd774c25578808802ea9c38b0f42fb4909ef6c31f30781b975450764b
  8. 0xa7cf24d58c2aac712161048370061e1e59c373a587fa55d774689794d68a93f9
  9. 0x11863cf7e757a1d12fbcfa78e5d9b653afacc5d0c003d14c0dbc347522d43227
  10. 0xe37bb054ee8eabeb3574167bc5f618198cf3f58380eeae8ee81407fce4747d2d
  11. 0x0b996890ad9f7a45291a56249c03de765fb331d173fb8d8e01ab2ec842ac8316
  12. 0x92804c1cd4f73221d350049c90c3d17d86ce815c332f3b67c5894d2919efebf2
  13. 0xb4800af1fe2ae822adba5c087faf1dc0bc2d7c9de2e3e602a2b65aefc1d53c94
  14. 0xa453d1738637a5c663802d07ce095aa340c80d53a4288ae277a72e265868ce4e
  15. 0x73341bb09dd901ca47f26173883431496e3d98d6b0fb5b89f36218126d46c5d4
  16. 0xa94627de1af0e823832e05a9069b304ecccb8c0cdb8f9cfc4f2039bfb9799dc5
  17. 0xdf1105afdc109de3c09a98fc8a3864159ad964e6f49b635c105a27a1e1f14310
  18. 0x2bf8151e5f157dd183b9de6fa00469551932a7a6e3f33a694895000ac9061197
  19. 0x9fc354c0ea3efc3f1b6548bb77ea902a50f2c9647647ea61592efce2bd795699
Day root
0xdd77e5e99da32c3f154180d63e3c3e6fe11e896a2c6896412ef6b5c4bcf7e795
Chained
0x23bb4dfd09f55c15ac3962f53578e02c6114d5bfd9bb451cf8794fb6e2817ef4
Published
On Arc Testnet, block 69414147: 0xb2ebd83aafeb765a0ce66e76aefb133ed06606c98038fd56191e2bcd1dcb77b4

How to check it · This row as JSON