Service record

www.tact.wtf

https://www.tact.wtf/

candidate

Public discovery candidate; runtime MPP not yet established

Implementation fingerprint: unknown no confident attribution
Fingerprint evidence: No implementation-specific public signal observed.
First seen: Aug 25, 2026, 6:43 PM UTC
Last seen: Oct 10, 2026, 6:33 PM UTC
Origin: https://www.tact.wtf
Tags: None advertised

Payment surface

0 MPP endpoints

This count includes endpoints established by catalog, OpenAPI, or valid runtime 402 evidence. It does not count every URL the harmless scanner attempted.

JSON record →

No MPP endpoint has been confirmed or advertised for this record. Review the harmless observations below to see what was actually checked.

Probe coverage

363 harmless observations

These are bounded unauthenticated requests and scanner-policy stops. A response without MPP evidence remains a discovery result, not a security failure.

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 10, 2026, 6:33 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 10, 2026, 6:31 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 10, 2026, 6:28 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 10, 2026, 12:35 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 10, 2026, 12:32 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 10, 2026, 12:29 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 10, 2026, 6:36 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 10, 2026, 6:34 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 10, 2026, 6:30 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 10, 2026, 12:46 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 10, 2026, 12:44 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 10, 2026, 12:41 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 9, 2026, 6:35 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 9, 2026, 6:33 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 9, 2026, 6:30 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 9, 2026, 12:38 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 9, 2026, 12:35 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 9, 2026, 12:32 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 9, 2026, 6:29 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 9, 2026, 6:28 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 9, 2026, 6:24 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 9, 2026, 12:44 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 9, 2026, 12:42 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 9, 2026, 12:39 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 8, 2026, 6:39 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 8, 2026, 6:37 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 8, 2026, 6:33 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 8, 2026, 12:36 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 8, 2026, 12:34 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 8, 2026, 12:31 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 8, 2026, 6:35 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 8, 2026, 6:33 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 8, 2026, 6:29 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 8, 2026, 12:38 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 8, 2026, 12:36 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 8, 2026, 12:33 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 7, 2026, 6:36 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 7, 2026, 6:34 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 7, 2026, 6:31 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 7, 2026, 12:34 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 7, 2026, 12:33 PM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 7, 2026, 12:29 PM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 7, 2026, 6:42 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 7, 2026, 6:39 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 7, 2026, 6:36 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 7, 2026, 12:46 AM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 7, 2026, 12:44 AM UTC

GET https://www.tact.wtf/

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/ was recorded but not followed

Oct 7, 2026, 12:41 AM UTC

GET https://www.tact.wtf/openapi.json

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Oct 6, 2026, 6:41 PM UTC

GET https://www.tact.wtf/.well-known/api-catalog

scanner stopped: cross-host-redirect

Cross-host redirect to https://tact.wtf/.well-known/api-catalog was recorded but not followed

Oct 6, 2026, 6:39 PM UTC

Showing the latest 50 of 363 observations.

Evidence model

Security properties

Every result names its evidence state. Unknown and not tested never mean secure.

probe_safety

Observed

cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded but not followed

Basis: scanner policy decision · Oct 10, 2026, 6:33 PM UTC

History

Service changes

Showing the latest 50 of 451 changes. Continue in the changes API view.

Oct 10, 06:33 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 06:31 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 06:28 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:35 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:32 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:29 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 06:36 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 06:34 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 06:30 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:46 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:44 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 10, 12:41 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:35 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:33 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:30 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:38 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:35 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:32 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:29 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:28 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 06:24 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:44 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:42 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa…

Evidence: Repeated harmless observation changed the modeled property

Oct 9, 12:39 AM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded … → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/ was recorded but not foll…

Evidence: Repeated harmless observation changed the modeled property

Oct 8, 06:39 PM UTC

— security-property-changed

security:probe_safety: {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/.well-known/api-catalog wa… → {"state":"observed","evidence":"cross-host-redirect: Cross-host redirect to https://tact.wtf/openapi.json was recorded …

Evidence: Repeated harmless observation changed the modeled property