{"id":"mppscan-aa6c346e9d28f4d9a8e30018","name":"DripStack","homepage_url":"https://dripstack.xyz/","service_url":"https://dripstack.xyz/","origin":"https://dripstack.xyz","description":"MPP-enabled content retrieval from Substack publications.","status":"active","implementation":"unknown","implementation_confidence":0,"fingerprint_observed_at":null,"published":1,"catalog_ingest_at":"2026-10-09T18:17:43.417Z","openapi_ingest_at":null,"catalog_seen_at":"2026-10-09T18:17:43.417Z","openapi_seen_at":"2026-08-28T18:22:47.073Z","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:37:23.917Z","last_probe_at":"2026-08-31T12:22:15.125Z","created_at":"2026-08-25 18:43:44","updated_at":"2026-10-09T18:33:53.867Z","categories":["web","data"],"tags":["substack","blog","publication","post","data","query"],"fingerprintEvidence":[],"paymentMethods":[],"paymentMethodCount":0,"endpoints":[{"id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/companies","http_method":"GET","path":"/api/v1/companies","kind":"paid-api","description":"Look up a company profile by ticker, domain, qid, CIK, or name.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-31T12:22:15.125Z","last_probe_at":"2026-08-31T12:22:15.125Z","last_status":400,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:11:51","updated_at":"2026-08-31 12:22:15","offers":[{"id":"7c72f02aa3beb445cc1295430f740b73f9fd161f98ba100110025f647db1839b","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"0653b757efae2b800e40a8e6978956e8b5c9994e39288ef752c36b8a49ad6881","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/companies/%7BcompanyId%7D","http_method":"GET","path":"/api/v1/companies/%7BcompanyId%7D","kind":"paid-api","description":"Get one company profile by id.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:11:57","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"cb9f81ccd93234f05e17d423100bf726cc0c3f7a7836db70a587648d15a53e2b","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/entities/search","http_method":"GET","path":"/api/v1/entities/search","kind":"paid-api","description":"Find articles that mention an entity or are linked to a stock pick.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-30T00:21:52.545Z","last_probe_at":"2026-08-30T00:21:52.545Z","last_status":400,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:23","updated_at":"2026-08-30 00:21:53","offers":[{"id":"d5601a22b24b0d11abd06c071be74c78f01f88b41c8c88dbc604178b3eda77fd","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/me","http_method":"GET","path":"/api/v1/me","kind":"paid-api","description":"Auth introspection for the current API key or OAuth token.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-30T12:23:35.139Z","last_probe_at":"2026-08-30T12:23:35.139Z","last_status":401,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:38","updated_at":"2026-08-30 12:23:36","offers":[{"id":"2fb0a160b763c243112ae7f370c1dc96230512b1b8958df9ec13d00e689f71d5","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/me/credits","http_method":"GET","path":"/api/v1/me/credits","kind":"paid-api","description":"Purchased credit balance and top-up URLs.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-31T00:25:43.228Z","last_probe_at":"2026-08-31T00:25:43.228Z","last_status":401,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:44","updated_at":"2026-08-31 00:25:44","offers":[{"id":"2f59268b325cd9369a43ff421123f4af0ae0f99eea7c81d2bad9e15e3b75a289","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/me/credits/activity","http_method":"GET","path":"/api/v1/me/credits/activity","kind":"paid-api","description":"Cursor-paginated credit ledger activity.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-31T12:18:26.915Z","last_probe_at":"2026-08-31T12:18:26.915Z","last_status":401,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:48","updated_at":"2026-08-31 12:18:27","offers":[{"id":"d87c9343100bf3d421d55a40c583bcd11fde0f45d3e3f9c9ce7de96eb6d933c7","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/me/unlocks","http_method":"GET","path":"/api/v1/me/unlocks","kind":"paid-api","description":"Cursor-paginated posts unlocked for lifetime access.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-30T00:22:18.742Z","last_probe_at":"2026-08-30T00:22:18.742Z","last_status":401,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:48","updated_at":"2026-08-30 00:22:53","offers":[{"id":"fcbf255a0b46ce2d4de99c2288dd3548a8e6bdc413154db0bf4c0ad476deb64a","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/podcasts","http_method":"GET","path":"/api/v1/podcasts","kind":"paid-api","description":"List curated podcasts.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-29T12:20:13.259Z","last_probe_at":"2026-08-29T12:20:13.259Z","last_status":200,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:48","updated_at":"2026-08-29 12:20:14","offers":[{"id":"91def3b2582ed94dd314d5e80cc33eeb06ca81798ef7934e41c06d50cc827edf","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"816b45b4eaa0206e4fc471ba422ce976580ac4853a22801b3d0bbd6f98a96cec","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/podcasts/%7BpublicationSlug%7D","http_method":"GET","path":"/api/v1/podcasts/%7BpublicationSlug%7D","kind":"paid-api","description":"Get one podcast with recent episodes.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:49","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"cf03e09c7d2fd847fc8e02cbdf8222c2976b03caae87626af7aa8c12dcab40af","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/posts/top-selling","http_method":"GET","path":"/api/v1/posts/top-selling","kind":"paid-api","description":"List the most purchased posts.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-29T12:21:16.437Z","last_probe_at":"2026-08-29T12:21:16.437Z","last_status":200,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:12:51","updated_at":"2026-08-29 12:21:51","offers":[{"id":"3cfc2dcb8641dfa7e423a7d1f8dd3492192105875ad453823c7c4d3673bfa9ac","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications","http_method":"GET","path":"/api/v1/publications","kind":"paid-api","description":"List publications (free)","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:17:43.417Z","last_probe_at":"2026-08-28T06:20:52.536Z","last_status":200,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":"2026-10-09T18:17:43.417Z","openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:01:21","updated_at":"2026-10-09T18:33:53.747Z","offers":[{"id":"5bb2cbc57c78581c6722b813a8801e24c96f069629c39af989e713bbc15bddf7","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"catalog","ref":"https://mpp.dev/api/services","firstSeen":"2026-08-25T18:43:12.674Z","lastSeen":"2026-10-09T18:17:43.417Z"},{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":2,"truncated":false}},{"id":"610ba3e604276ffa7410eec6811972ba86b7596ab01a2e4dd170295e5d2afbfc","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/%7BpublicationSlug%7D","http_method":"GET","path":"/api/v1/publications/%7BpublicationSlug%7D","kind":"paid-api","description":"Get one publication with recent posts.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:13:47","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"194f1d076aa705304216bb80fe07725cf89f104fb89f795d8d9d027fce782f1f","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"ecf774b2184fc23108a34330faf60132c9e5464bd0d4ac739b60c7a4e66b3e0c","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/%7BpublicationSlug%7D/%7BpostSlug%7D","http_method":"GET","path":"/api/v1/publications/%7BpublicationSlug%7D/%7BpostSlug%7D","kind":"paid-api","description":"Get article, podcast, or book chapter content (paid).","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:13:52","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"075ac2cc29341ec609068e0a3c5693abd5f85503822fe7a4545a759273d44c0f","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"1000000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"eip155:8453"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"a2cfc453ade34b5cb8fae66ca734acf057537a7509c5249e5c1f9154392e52f2","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"2cCuDjNEuA7QFgBiS8rYcWrxJxeYGJFGHvXaaCXBqmHF","amount":"1000000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":1,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"84d2c6c6af739958e3bbb57620d968b4d681fa52cd4b519689d3a0c98afa75b0","method":"tempo","intent":"charge","currency":"0x20C000000000000000000000b9537d11c60E8b50","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"1000000","decimals":null,"unitType":null,"session":null,"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":2,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"f746e4a0e18fae71add640d4d99518d4a80c5ef44e2905d33e61d9ea4cf92d5a","method":"stripe","intent":"charge","currency":"usd","chainId":null,"recipient":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","amount":"100","decimals":null,"unitType":null,"session":{"methodDetails":{"networkId":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","paymentMethodTypes":["card","link"]}},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":3,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":4,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"5f00876c5d7dcde6eeddb62fd78c5c032727e9f6f43a1dfb9761ced1aef04231","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/%7BpublicationSlug%7D/%7BpostSlug%7D","http_method":"POST","path":"/api/v1/publications/%7BpublicationSlug%7D/%7BpostSlug%7D","kind":"paid-api","description":"Access post with credits (paid, same as GET).","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:14:37","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"d0c3aa171f707acaf23ce3002b97d941098b016ef6b2748e785010cf0f555158","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"1000000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"eip155:8453"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"c1fe9641356848c4051cb2c51971bfd9aed42095957065a2bb045c968774b76a","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"2cCuDjNEuA7QFgBiS8rYcWrxJxeYGJFGHvXaaCXBqmHF","amount":"1000000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":1,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"5b40ec8a4cddd1ee8efd54f39de52b26f9a370afa5ed6183e25f5683f71fe790","method":"tempo","intent":"charge","currency":"0x20C000000000000000000000b9537d11c60E8b50","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"1000000","decimals":null,"unitType":null,"session":null,"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":2,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"27fba92000d6eb3b1ffdd0366136916b686781e7ba20200f88d60e2c9ed2bd54","method":"stripe","intent":"charge","currency":"usd","chainId":null,"recipient":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","amount":"100","decimals":null,"unitType":null,"session":{"methodDetails":{"networkId":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","paymentMethodTypes":["card","link"]}},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":3,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":4,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/:publicationSlug","http_method":"GET","path":"/api/v1/publications/:publicationSlug","kind":"paid-api","description":"Get list of posts for a publication (free)","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:17:43.417Z","last_probe_at":"2026-08-28T18:21:54.295Z","last_status":404,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":"2026-10-09T18:17:43.417Z","openapi_seen_at":null,"created_at":"2026-08-25 19:01:24","updated_at":"2026-10-09T18:33:53.747Z","offers":[],"activeSources":[{"type":"catalog","ref":"https://mpp.dev/api/services","firstSeen":"2026-08-25T18:43:12.674Z","lastSeen":"2026-10-09T18:17:43.417Z"}],"offerPagination":{"limit":12,"total":0,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/:publicationSlug/:postSlug","http_method":"GET","path":"/api/v1/publications/:publicationSlug/:postSlug","kind":"paid-api","description":"Get post content","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:17:43.417Z","last_probe_at":"2026-08-28T18:22:22.964Z","last_status":404,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":"2026-10-09T18:17:43.417Z","openapi_seen_at":null,"created_at":"2026-08-25 19:01:26","updated_at":"2026-10-09T18:33:53.747Z","offers":[{"id":"334cf1fa60e17b8a31042b2662e7784031cad8c8de23a65e4a819cd64b22376c","method":"tempo","intent":"charge","currency":"0x20c000000000000000000000b9537d11c60e8b50","chainId":null,"recipient":null,"amount":null,"decimals":6,"unitType":null,"session":{"dynamic":true,"amountHint":"$0.05-$10"},"sourceType":"catalog","sourceRef":"https://mpp.dev/api/services","sourceOrdinal":0,"firstSeen":"2026-08-25T18:43:12.674Z","lastSeen":"2026-10-09T18:17:43.417Z"}],"activeSources":[{"type":"catalog","ref":"https://mpp.dev/api/services","firstSeen":"2026-08-25T18:43:12.674Z","lastSeen":"2026-10-09T18:17:43.417Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/search","http_method":"GET","path":"/api/v1/publications/search","kind":"paid-api","description":"Search curated publications, newsletters, podcasts, and authors.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-30T06:20:53.539Z","last_probe_at":"2026-08-30T06:20:53.539Z","last_status":400,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:15:09","updated_at":"2026-08-30 06:20:54","offers":[{"id":"4f1ac59daa97839c86e3f336158ac2f07a306d8a54acebfe1706972c58105e78","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/publications/top-selling","http_method":"GET","path":"/api/v1/publications/top-selling","kind":"paid-api","description":"List the highest-earning publications.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-29T12:20:39.797Z","last_probe_at":"2026-08-29T12:20:39.797Z","last_status":200,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:15:15","updated_at":"2026-08-29 12:21:13","offers":[{"id":"d94266325b550ad3892da496564372b5bb988f48981d4e48c4f7e50a2315d215","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/search","http_method":"GET","path":"/api/v1/search","kind":"paid-api","description":"Search premium financial newsletter and podcast posts by topic.","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-29T18:23:07.344Z","last_probe_at":"2026-08-29T18:23:07.344Z","last_status":400,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:15:27","updated_at":"2026-08-29 18:23:08","offers":[{"id":"a5469b85c4f3bf058c4c26d64e95fa310dbadc18e2023e4910b7c438bd29557a","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"1ef477fd2d05ff1b4e5272aa1d7487ac950602bd8ec6733b7ad43fb809f44115","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/stock-picks","http_method":"GET","path":"/api/v1/stock-picks","kind":"paid-api","description":"List stock-picker calls for one day (paid).","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","last_probe_at":null,"last_status":null,"content_type":null,"tls_state":"not-tested","redirect_count":null,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:15:40","updated_at":"2026-08-28T18:23:45.766Z","offers":[{"id":"de9207bd5965531a447b0bdf6b576cbed646dd1976e690d83fda076ede81fba0","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"500000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"eip155:8453"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"fa0afc5812b347acce527843690e7b47e218fe3c1cba8b2f28f2d1dc291e313f","method":"x402","intent":"charge","currency":"USDC","chainId":null,"recipient":"2cCuDjNEuA7QFgBiS8rYcWrxJxeYGJFGHvXaaCXBqmHF","amount":"500000","decimals":null,"unitType":null,"session":{"scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":1,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"4d7a50e384f922e399ce4ef7fe660ab3bd9ab86928e25f2d00afb113bac53234","method":"tempo","intent":"charge","currency":"0x20C000000000000000000000b9537d11c60E8b50","chainId":null,"recipient":"0xBF22b6DdB5A08c823856A779f1004eEa60C5aB92","amount":"500000","decimals":null,"unitType":null,"session":null,"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":2,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"},{"id":"00354b0c3932b589a1b5cb0673cdd1a5fb600d62877811ee5c8ebf28c0300840","method":"stripe","intent":"charge","currency":"usd","chainId":null,"recipient":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","amount":"50","decimals":null,"unitType":null,"session":{"methodDetails":{"networkId":"profile_61Umz1FUfXxChDA5oA6Umz1EM7SQ1AjJpNQxiSGWWUSe","paymentMethodTypes":["card","link"]}},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":3,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":4,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}},{"id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced","service_id":"mppscan-aa6c346e9d28f4d9a8e30018","url":"https://dripstack.xyz/api/v1/stock-picks/quote","http_method":"GET","path":"/api/v1/stock-picks/quote","kind":"paid-api","description":"Quote the stock-picks bundle price for one day (free).","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-29T12:19:37.265Z","last_probe_at":"2026-08-29T12:19:37.265Z","last_status":200,"content_type":"application/json","tls_state":"tested-pass","redirect_count":0,"challenge_format":null,"published":1,"catalog_seen_at":null,"openapi_seen_at":"2026-08-28T18:22:47.073Z","created_at":"2026-08-25 19:16:23","updated_at":"2026-08-29 12:19:38","offers":[{"id":"8adfdf65fc1cfe72452fa1a4f2bac071b142027c6bf98d8225f3735ee4070a37","method":"unknown","intent":"charge","currency":null,"chainId":null,"recipient":null,"amount":null,"decimals":null,"unitType":null,"session":{"authMode":"none"},"sourceType":"openapi","sourceRef":"https://dripstack.xyz/openapi.json","sourceOrdinal":0,"firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"activeSources":[{"type":"openapi","ref":"https://dripstack.xyz/openapi.json","firstSeen":"2026-08-25T19:11:44.288Z","lastSeen":"2026-08-28T18:22:47.073Z"}],"offerPagination":{"limit":12,"total":1,"truncated":false},"activeSourcePagination":{"limit":32,"total":1,"truncated":false}}],"endpointPagination":{"limit":25,"total":21,"nextCursor":null},"sources":[{"source_kind":"mpp.dev-catalog","source_url":"https://mpp.dev/api/services","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:17:43.417Z","evidence":{"catalogId":"dripstack","version":1}},{"source_kind":"mppscan","source_url":"https://mppscan.com/","first_seen":"2026-08-25T18:43:12.674Z","last_seen":"2026-10-09T18:17:43.417Z","evidence":{"discoveredUrl":"https://dripstack.xyz/"}},{"source_kind":"openapi","source_url":"https://dripstack.xyz/openapi.json","first_seen":"2026-08-25T19:11:44.288Z","last_seen":"2026-08-28T18:22:47.073Z","evidence":{"runtimeFetched":true,"finalUrl":"https://dripstack.xyz/openapi.json","serviceInfo":{"name":"Drip","description":"Paid API for searching and browsing Drip's premium financial newsletters, podcasts, and books, resolving publications and direct post links, and purchasing synthesized post summaries for investing research and market analysis.\n\n## Payment Flow\n\nPaid routes return HTTP 402 with a dual challenge. Use an x402 or MPP payment-aware client.\n\n1. Plain request returns 402 with `WWW-Authenticate` (MPP) and `PAYMENT-REQUIRED` (x402) headers.\n2. Retry the same request through a payment-aware client, or manually with `Authorization: \"[redacted]\" <credential>` (MPP) or `PAYMENT-SIGNATURE` header (x402).\n3. On success (200), response includes `synthesizedSummary`, `transcript` for podcast episodes, `content` for book chapters, and `paymentInfo`. The first successful pay for a single post unlocks that post forever for the paying subject; later fetches are free. Credits / API key / JWT / MCP OAuth share one Drip-user entitlement. x402/MPP clients should store `unlockToken` / `X-Drip-Unlock` for free re-reads.\n\n**Pricing:** Discovery `x-payment-info.offers[]` is advisory. Runtime 402 challenge is authoritative. Stock-picks charge a flat unit (`STOCK_PICKS_ARTICLE_PRICE_USD`) times distinct source article count — use free `GET /api/v1/stock-picks/quote` for the exact bundle total; live `402` on the paid route remains authoritative for payment clients. Stock-picks remain pay-per-request (no forever unlock).\n\n**Error codes:** 402 = payment required, do not retry without payment. 503 = summary not ready, retry later. 404 = content not found, do not pay.","version":"0.1.0"}}}],"sourcePagination":{"limit":100,"total":3,"truncated":false},"security":[{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-10-09T12:36:39.996Z","endpoint_id":null},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/publications/:publicationSlug/:postSlug was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-10-03T00:31:12.718Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/publications/:publicationSlug was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-10-03T00:30:51.569Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/publications was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-10-02T12:21:39.156Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/companies was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-09T00:24:23.567Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/me/credits/activity was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-08T18:22:11.121Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/me/credits was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-08T12:23:02.407Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/me was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-07T18:25:09.355Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/publications/search was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-07T06:24:31.801Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/me/unlocks was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-07T06:22:45.452Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/entities/search was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-07T06:21:34.822Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/search was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-07T00:22:08.946Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/posts/top-selling was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-06T12:21:20.416Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/publications/top-selling was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-06T12:20:31.174Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/podcasts was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-06T12:20:11.380Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"probe_safety","state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://dripstack.com/api/v1/stock-picks/quote was recorded but not followed","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-09-06T12:19:18.873Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"bounded_response","state":"tested-pass","evidence":"133 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-31T12:22:15.125Z","endpoint_id":"c7dc67eb566f7c4baa73f25ab78cb43bc43bcafac374d177ccd2306bef45bb65"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"bounded_response","state":"tested-pass","evidence":"120 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-31T12:18:26.915Z","endpoint_id":"bae0ea271c720688926ee2dfe9b74046f867af451f7b4960836f47da4292694e"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"bounded_response","state":"tested-pass","evidence":"120 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-31T00:25:43.228Z","endpoint_id":"c332aed774b0fd3faec221082798126a187b8cc46dd2169c7ad709a27b83999c"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"bounded_response","state":"tested-pass","evidence":"120 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-30T12:23:35.139Z","endpoint_id":"8ba3fa20c4c113e521e07f2a954f260a5f3819494b73cfc52d74797867f74224"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"bounded_response","state":"tested-pass","evidence":"142 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-30T06:20:53.539Z","endpoint_id":"80eb1ef390803140a567cfe0917ee59aaf552c27e228e6f09c7820682e6ad866"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"bounded_response","state":"tested-pass","evidence":"120 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-30T00:22:18.742Z","endpoint_id":"eeafac7a69d01826ab806aa7a6fbc0292fea296cd3d5ed3142eb5fae1cf4d35c"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"bounded_response","state":"tested-pass","evidence":"156 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-30T00:21:52.545Z","endpoint_id":"05e86747bd7fd24b504221abdbe98b5c25a8bf58c19a98ecd79ad438fe3f3f17"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"bounded_response","state":"tested-pass","evidence":"130 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T18:23:07.344Z","endpoint_id":"2ad32986c587d584db453317a810c0bf9f44ef06a00fda91defabedd00014dac"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"bounded_response","state":"tested-pass","evidence":"3189 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T12:21:16.437Z","endpoint_id":"a3d0819dac72b5d1ce819eb0d4a19ec1c01082693df8a1313561794ce8540387"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"bounded_response","state":"tested-pass","evidence":"3596 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T12:20:39.797Z","endpoint_id":"41617458e2c3c80cea47d0dc3691c51e8ac6e4fd3d06d7afc0e75a66e719c8e2"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"bounded_response","state":"tested-pass","evidence":"6157 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T12:20:13.259Z","endpoint_id":"64e985dd7123fa062f941e842115900b06f0584354d6365d0da9d9e670644ca6"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"bounded_response","state":"tested-pass","evidence":"395 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T12:19:37.265Z","endpoint_id":"bdd0e1b561decfed9821153782c20a4ec0e0bfc2c69958db802f95fea5754ced"},{"property_key":"api_catalog_parse","state":"observed","evidence":"API catalog source returned HTTP 404; prior advertised links were withdrawn","basis":"RFC 9727 discovery response","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"bounded_response","state":"tested-pass","evidence":"115023 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-29T00:23:02.923Z","endpoint_id":null},{"property_key":"openapi_parse","state":"tested-pass","evidence":"28 payment offer(s) accepted","basis":"harmless discovery response","advisory_ref":null,"observed_at":"2026-08-28T18:22:47.073Z","endpoint_id":null},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"bounded_response","state":"tested-pass","evidence":"27 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-28T18:22:22.964Z","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"bounded_response","state":"tested-pass","evidence":"34 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-28T18:21:54.295Z","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039"},{"property_key":"authorization_delivery_settlement","state":"not-tested","evidence":"Requires paid or state-changing behavior outside scanner scope","basis":"Tempo Aug 24 research class","advisory_ref":"https://github.com/wevm/mppx/pull/510#discussion_r3377899233","observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"bounded_response","state":"tested-pass","evidence":"17824 bytes within scanner limit","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"challenge_parse","state":"unknown","evidence":"No MPP Payment challenge observed","basis":"unauthenticated HTTP response","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"channel_lifecycle_binding","state":"not-tested","evidence":"Channel and settlement lifecycle require credentials or payments","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"concurrency_single_winner","state":"not-tested","evidence":"Concurrency and paid state changes are prohibited","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"credential_replay","state":"not-tested","evidence":"Scanner never sends credentials or payments","basis":"methodology","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"economic_exposure_metadata","state":"unknown","evidence":"No current Payment challenge exposes session or authorization inputs","basis":"observable challenge values only","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"fee_payer_cosigner_binding","state":"not-tested","evidence":"Signature and fee-payer relationships are not observable unauthenticated","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"https_transport","state":"tested-pass","evidence":"HTTPS fetch completed with platform certificate validation","basis":"platform TLS validation","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"method_fallback_policy","state":"not-tested","evidence":"Scanner does not select, downgrade, or execute payment methods","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"price_debit_consistency","state":"not-tested","evidence":"Requires a completed paid interaction outside scanner scope","basis":"public economic-security prior art","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"redirect_policy","state":"tested-pass","evidence":"0 redirects; every hop passed URL and DNS validation","basis":"harmless scanner","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"replay_idempotency_scope","state":"not-tested","evidence":"Scanner never replays signed credentials","basis":"public advisory and protocol prior art","advisory_ref":"https://github.com/advisories/GHSA-fxc9-7j2w-vx54","observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"ssrf_target_validation","state":"tested-pass","evidence":"1 hop(s) resolved twice to stable public addresses","basis":"scanner URL, DNS and redirect policy","advisory_ref":null,"observed_at":"2026-08-28T06:20:52.536Z","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e"},{"property_key":"probe_safety","state":"observed","evidence":"Response exceeds 262144 bytes","basis":"scanner policy decision","advisory_ref":null,"observed_at":"2026-08-25T19:20:13.955Z","endpoint_id":"1ef477fd2d05ff1b4e5272aa1d7487ac950602bd8ec6733b7ad43fb809f44115"}],"securityPagination":{"limit":250,"total":243,"truncated":false},"observations":[{"id":"07f307cd4256343e22d730e6b2dc1ec9b9368a201b314e64f3b5b88d200ecd76","endpoint_id":null,"observed_at":"2026-10-09T12:36:39.996Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"fef562dc3ac14f3c34ccdb85e9f5c0fcdb23f4c35f7e77272f8b0d3a8d7f3781","endpoint_id":null,"observed_at":"2026-10-09T06:32:50.895Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"2213dfdc0fb970c4cbb79960919e995edda265237f414b0b37a7bf3d8498143c","endpoint_id":null,"observed_at":"2026-10-09T00:37:54.073Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"7fec1faba64526677c2740eed6d2268de586fbfc9dde192215a84c632095b34d","endpoint_id":null,"observed_at":"2026-10-09T00:19:29.764Z","request_method":"GET","requested_url":"https://dripstack.xyz/openapi.json","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"e55f6d5c05fd4263785417e0644c7c4f1b7e6e4b0397c67f2660388b6299e58f","endpoint_id":null,"observed_at":"2026-10-08T18:39:21.340Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"d763e9e5b2f7ed83838b4fe0b8982d22631bbc9dacace9dc3e6d9bf619532e69","endpoint_id":null,"observed_at":"2026-10-08T12:36:51.706Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"ac0f99ddf2a0dc95bbc7758bf898ce97ac1e506060bae36d5d6207012b494316","endpoint_id":null,"observed_at":"2026-10-08T06:36:37.868Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"5d2e5cf41ca9ea5c47eed7218146cbb2676084f644c9178d6620a2b458c66772","endpoint_id":null,"observed_at":"2026-10-08T00:35:45.697Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"4920bb0138f3d8d32205ead357eca100722930cde7212a07ab8bd11c37a28ddd","endpoint_id":null,"observed_at":"2026-10-07T18:36:59.260Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"c2dd44c483bf45be5c94a6fc688ea77a38075788e06cd2ffb9466149b435779f","endpoint_id":null,"observed_at":"2026-10-07T12:36:16.366Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"dbd059f91d8629adcd28504621d67c9c3c5384c8e15029fe39fd49a296a4d24d","endpoint_id":null,"observed_at":"2026-10-07T06:38:18.629Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"a9b9fee03c5d3ed1a9f60228156c0b6c15d44c980ed0ea6bf6706424d7b4e5ce","endpoint_id":null,"observed_at":"2026-10-07T00:41:54.497Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"3184ca0f78642484362b422ba3a33fddf5446dc3cc2b87cbd18ad64fc86fb4ba","endpoint_id":null,"observed_at":"2026-10-06T18:39:33.789Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"eb705f61d6ca42b1dbad63d1bd5f38a6280beb3597d295c8cd818bc4ee48fc66","endpoint_id":null,"observed_at":"2026-10-06T12:40:05.746Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"ab209c776c6813eebe56a4918193196f2e17c6af8a42927c72eba90410f3f13f","endpoint_id":null,"observed_at":"2026-10-06T06:32:43.075Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"f09086e7c12ad84c4dfe84463fbb9cfc11a321e3c5e829965a02eb930c7a36d9","endpoint_id":null,"observed_at":"2026-10-06T00:37:36.541Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"09ebe90afa057c77f370d8fcd5eee46c907ffcace2cd5315b9e0a264c6642a5e","endpoint_id":null,"observed_at":"2026-10-05T18:36:51.314Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"be8c9d9b50449cb12ea71c8538512c45e8687415d9a5d8b79bc37d213a84922e","endpoint_id":null,"observed_at":"2026-10-05T12:35:20.953Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"ed814e9a52d62ffb6aa8e422d20a2bd67771407722737598100540916440042d","endpoint_id":null,"observed_at":"2026-10-05T06:34:49.257Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"28a2e2560dc2662398f8880470f7844ddbd72b2e411ab4359906f5d6c84af25a","endpoint_id":null,"observed_at":"2026-10-05T00:34:58.516Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"a5c47e2239764324007d49f485e6bfea4a1981b98159ced0dd4e6a8d2bb2536e","endpoint_id":null,"observed_at":"2026-10-04T18:33:33.625Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"773b8b6aed2ab96845462d7004cb636c98cad46e2699deaf4fe967fe9167ca71","endpoint_id":null,"observed_at":"2026-10-04T12:37:05.031Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"5aea0e2e1a614d532c3fb430bb60fec38010e58c90af78aca8931f926cd6254e","endpoint_id":null,"observed_at":"2026-10-04T06:35:26.585Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"16bfe13936df305203d528c5e9a46601df7271f78d31fb8c5f5f938d425aa6df","endpoint_id":null,"observed_at":"2026-10-04T06:22:05.026Z","request_method":"GET","requested_url":"https://dripstack.xyz/.well-known/api-catalog","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"d01625278a838511b08e965732b852cf0b8e9a3d0a0e75900a9960e83f77ac70","endpoint_id":null,"observed_at":"2026-10-04T00:36:50.237Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"f45dd03e042befbd8ab15da75ec6688288bb9badc0ad6fb7d5161124d6d5c977","endpoint_id":null,"observed_at":"2026-10-03T18:35:22.156Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"5e41e46ec3096a190b698d0ccfcd6c7706123b2370d0ac071c0b3b9cc6b681d4","endpoint_id":null,"observed_at":"2026-10-03T12:40:05.274Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"8aa2787b82077c97b2f470c57cc1848488fddec505435d4c0de25ca519cfea4b","endpoint_id":null,"observed_at":"2026-10-03T06:32:37.546Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"236c7589f7fa9fff6ceab5e26f75b5d738ee3e20c7b1d2456b2199190faf6e1b","endpoint_id":null,"observed_at":"2026-10-03T00:38:57.000Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"e21afff2bb0a4457db29d179efe929cf3b06fbfc9082596a964c374d30fe0a31","endpoint_id":"c468dbfe3789d8b91e97d8ff6819d027c87f90f391ac7193e37b5bff6b877b6d","observed_at":"2026-10-03T00:31:12.718Z","request_method":"GET","requested_url":"https://dripstack.xyz/api/v1/publications/:publicationSlug/:postSlug","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/api/v1/publications/:publicationSlug/:postSlug was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"352cf9372930f709657c0d41319a1ee550190101a2094106db9f23d88d86fb25","endpoint_id":"e606eafbd1e83579455ca89a2b2d4eb0567955a89c4db6a3ae0bebda70ee4039","observed_at":"2026-10-03T00:30:51.569Z","request_method":"GET","requested_url":"https://dripstack.xyz/api/v1/publications/:publicationSlug","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/api/v1/publications/:publicationSlug was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"23b53d57d9ef2a0c8eec6f5d51f97d028b9ca67b8ec15623c9141b5f4e3d7392","endpoint_id":null,"observed_at":"2026-10-02T18:36:58.299Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"eb8e128d4df753fddca5abe3afac0e96b33ef45112765eb24af0acf730352ebe","endpoint_id":null,"observed_at":"2026-10-02T12:46:24.239Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"c95e7532056e9b433a6150d5e0f20043acbf20c37c2bc39eeea495367f859a63","endpoint_id":"33e5622d105dc3703ecb75155a46fc8c09164193ba54d487e66d615316211f0e","observed_at":"2026-10-02T12:21:39.156Z","request_method":"GET","requested_url":"https://dripstack.xyz/api/v1/publications","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/api/v1/publications was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"d31b6b19ee838bce945af254acabf50fe9bdd5d34e8e6224ca063031a41705de","endpoint_id":null,"observed_at":"2026-10-02T06:34:55.513Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"c6c8b8ba59d78a1df559091039cccce7a287454550201de56a977f3d866c66ca","endpoint_id":null,"observed_at":"2026-10-02T00:35:42.638Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"7b8e098dcb213c9fbbff92cd16aefb4acce1a87a13e75ffa2b4031c4d0dbe0c3","endpoint_id":null,"observed_at":"2026-10-01T18:33:16.414Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"122867ec0c4e550565862c55d8fee32b119a98f97c59d2b958d499c78c27735b","endpoint_id":null,"observed_at":"2026-10-01T12:38:25.983Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"b3a4208a0bc2c2ca2a9413a12fdb4d4281c6552b79b8ad7b29e5c771f00abec5","endpoint_id":null,"observed_at":"2026-10-01T06:32:59.199Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"d83dd958e93c73c4df66f7962feb57493ff7fb092b64395e09cd89eb36e946ef","endpoint_id":null,"observed_at":"2026-10-01T00:36:54.982Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"e3e4e33d127109a89430dc9086029254a1dae398523524d4386aa739d3c88fcd","endpoint_id":null,"observed_at":"2026-09-30T18:33:07.249Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"5bc35b045bfe6130c7f6aa60333e39ac7fa22ec5d3a01410997615c27091a8f0","endpoint_id":null,"observed_at":"2026-09-30T12:33:48.408Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"40ffdbda52abb2742368dfbfa7bd75f8a01c075d4e6553f4e91c372a8fc3d471","endpoint_id":null,"observed_at":"2026-09-30T06:36:08.862Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"298b18de94f8586ddf455b564ad1c15e2086af992b6934b9a15bb38a9dad2d00","endpoint_id":null,"observed_at":"2026-09-30T00:33:05.244Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"31fbea9cc107a0f3affc923f593e5cc6ceb95cfb85990625b816fe15f3a9df2e","endpoint_id":null,"observed_at":"2026-09-29T18:33:03.241Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"c5ad356bc30588b1738c165f3bcc97f9179a45f707ce56e74f156a0eb04ea484","endpoint_id":null,"observed_at":"2026-09-29T18:20:01.639Z","request_method":"GET","requested_url":"https://dripstack.xyz/openapi.json","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"77349b88f23239a9967244cf9d4c8c93d0eb471cb96475c5e3721852ac79729d","endpoint_id":null,"observed_at":"2026-09-29T12:32:51.067Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"cb7727bc09de8ac3d191be587dc926f9ee0fecee6ea8ee213c6482f984539c5e","endpoint_id":null,"observed_at":"2026-09-29T06:32:57.264Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"9ea2d65b9e75b65deb49bbb4e5c71824165f25dae6d62931c2e235b625eee16a","endpoint_id":null,"observed_at":"2026-09-29T00:33:34.746Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}},{"id":"c3d10fbbdc398e33f853498a0e412b5bcfa7037824af943e77d153607796b810","endpoint_id":null,"observed_at":"2026-09-28T18:36:45.073Z","request_method":"GET","requested_url":"https://dripstack.xyz/","final_url":null,"status":null,"redirect_count":0,"response_bytes":0,"body_sha256":"","error_code":"cross-host-redirect","error_detail":"Cross-host redirect to https://dripstack.com/ was recorded but not followed","headers":{},"dns":[],"tls":{}}],"observationPagination":{"limit":50,"total":161,"truncated":true},"changes":[{"id":"94f9f8444e31f1a3d40741b6ce7e6956","endpoint_id":null,"changed_at":"2026-10-09T00:37:54.073Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"f58489aa3825aa3ef0a55673e7f40b65","endpoint_id":null,"changed_at":"2026-10-09T00:19:29.764Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"1012d5d80f0beb848e82d9c2f927f7c2","endpoint_id":null,"changed_at":"2026-10-04T06:35:26.585Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"38739a33821154c4f0a83fcfda3c9584","endpoint_id":null,"changed_at":"2026-10-04T06:22:05.026Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"251a2502ed691c891fb82d1f721ab81f","endpoint_id":null,"changed_at":"2026-09-29T18:33:03.241Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"a39de89e44290993366c01c114912fc6","endpoint_id":null,"changed_at":"2026-09-29T18:20:01.639Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"04df4dabf74046e3d59372f28a7b92c0","endpoint_id":null,"changed_at":"2026-09-25T00:43:54.495Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"c7514351052306095e57c8ebe25e681e","endpoint_id":null,"changed_at":"2026-09-24T18:52:25.536Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"366d2949bdd29886a78319f714eeea07","endpoint_id":null,"changed_at":"2026-09-24T18:37:54.174Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"9213e0b763edee54e8341e5a1eab97f1","endpoint_id":null,"changed_at":"2026-09-24T18:22:24.727Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"e6b2210afd780179a80aa893184d6def","endpoint_id":null,"changed_at":"2026-09-20T18:37:36.593Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"c5d7990bd83da5d30f374241fc85b1a4","endpoint_id":null,"changed_at":"2026-09-20T12:49:05.475Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"5e3ab90deeb976c2e4569278bfe38079","endpoint_id":null,"changed_at":"2026-09-20T12:35:18.615Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"553f39b008dbd9962f6fed3dbdc4e9f3","endpoint_id":null,"changed_at":"2026-09-20T06:48:39.839Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"e5119d267ce423d862864ba86669a430","endpoint_id":null,"changed_at":"2026-09-20T06:34:52.521Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"7d636c0fdb57ec75fb1a4af7f5fcbd5d","endpoint_id":null,"changed_at":"2026-09-20T00:49:57.284Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"0d8027aa340f192437a773912b4ac1b8","endpoint_id":null,"changed_at":"2026-09-20T00:36:11.793Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"63e632220b2a5376723ac5a6c912f79d","endpoint_id":null,"changed_at":"2026-09-19T18:50:04.794Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"20535eb67abbf857de51e5bdce9281b9","endpoint_id":null,"changed_at":"2026-09-19T18:36:26.887Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"3c9a7966c35cdb0df00279913f167886","endpoint_id":null,"changed_at":"2026-09-19T12:50:33.350Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"a7d34afd1a3ce18bc8442f1c758807fe","endpoint_id":null,"changed_at":"2026-09-19T12:36:51.753Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"ec35d305410909589660bc9a6dbc55cb","endpoint_id":null,"changed_at":"2026-09-19T06:48:51.630Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"2a45c77d156f226d19ae9849289b150a","endpoint_id":null,"changed_at":"2026-09-19T06:34:19.964Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"43ee9231744be599c3d885f826b31729","endpoint_id":null,"changed_at":"2026-09-19T00:49:55.433Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"46ea6332a326b941ef5a6a214fb649f4","endpoint_id":null,"changed_at":"2026-09-19T00:37:07.091Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"36208f98fb2e592f743e6a6f3579482a","endpoint_id":null,"changed_at":"2026-09-18T19:01:34.526Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"6a86eb5cad4f3ee749aea3faa57c00e3","endpoint_id":null,"changed_at":"2026-09-18T18:48:06.630Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"464cda924c37ce4358b0bcb9c71653e7","endpoint_id":null,"changed_at":"2026-09-18T12:47:06.872Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"6e9426016f5f47de111d3b11aae9702e","endpoint_id":null,"changed_at":"2026-09-18T12:33:20.944Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"b7a79dc989c38206e0640a3c29688688","endpoint_id":null,"changed_at":"2026-09-18T06:46:55.443Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"4971898e5a6cd4c0cedcb3aa0d25f75d","endpoint_id":null,"changed_at":"2026-09-18T06:33:10.666Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"c1f17f414e382d2d38282850d893d19f","endpoint_id":null,"changed_at":"2026-09-18T01:00:58.201Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"0e6204a16219bbd6006bf8d224f5d04f","endpoint_id":null,"changed_at":"2026-09-18T00:47:18.459Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"2d4e02ec28d6ea1010b1c5dac737f914","endpoint_id":null,"changed_at":"2026-09-18T00:19:53.612Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"55f9bbb19856d64284c2e8df6c463511","endpoint_id":null,"changed_at":"2026-09-15T18:38:50.090Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"a21d49676512ff303454002dedd390eb","endpoint_id":null,"changed_at":"2026-09-15T12:50:56.833Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"c41ba6836409d1de4f9e2f1f11a90e44","endpoint_id":null,"changed_at":"2026-09-15T12:36:28.264Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"d7cf2c04fca7e6cea10f20bf36b706f9","endpoint_id":null,"changed_at":"2026-09-15T06:54:09.186Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"d7130670e5d352d2878a6ac796c3c414","endpoint_id":null,"changed_at":"2026-09-15T00:39:30.832Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"26801313d9935c757bf9d80df6943d27","endpoint_id":null,"changed_at":"2026-09-15T00:27:55.732Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/.well-known/api-catalog was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"db9c04098b6f3eadc961f3fc342de5f2","endpoint_id":null,"changed_at":"2026-09-09T06:39:23.079Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"0c025ec31fb4d413d037598924afb0ba","endpoint_id":null,"changed_at":"2026-09-08T18:51:42.779Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"14b388dd4a625b320873c97a9087878a","endpoint_id":null,"changed_at":"2026-09-08T18:37:52.021Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"1c0ab08412d9f574b158877c5490a415","endpoint_id":null,"changed_at":"2026-09-08T12:51:54.218Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"5d7e7cdfb90ee87ede04bfa64faa4d84","endpoint_id":null,"changed_at":"2026-09-08T12:38:07.646Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"b2d191e5eedbca1cd95efa13baa06072","endpoint_id":null,"changed_at":"2026-09-08T06:51:18.512Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"048ec5cba37d21f11d01fd3ae07c18dd","endpoint_id":null,"changed_at":"2026-09-08T06:38:01.347Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"c9ab30517e5e1868fd8ab5fb31002ca9","endpoint_id":null,"changed_at":"2026-09-08T00:50:02.940Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"a18f8fe39c1af7a83801a7ce7f1541ac","endpoint_id":null,"changed_at":"2026-09-08T00:37:13.961Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"},{"id":"e9e3d12e7eaeeed7d8aacf86cc730fd4","endpoint_id":null,"changed_at":"2026-09-07T18:52:26.065Z","change_type":"security-property-changed","field_name":"security:probe_safety","old_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/ was recorded but not followed\",\"basis\":\"scanner policy decision\"}","new_value":"{\"state\":\"observed\",\"evidence\":\"cross-host-redirect: Cross-host redirect to https://dripstack.com/openapi.json was recorded but not followed\",\"basis\":\"scanner policy decision\"}","evidence":"Repeated harmless observation changed the modeled property"}],"changePagination":{"limit":50,"total":230,"truncated":true}}