{
  "url": "https://kirkdiamond.com/tools/status/302",
  "method": "GET",
  "hops": [
    {
      "url": "https://kirkdiamond.com/tools/status/302",
      "method": "GET",
      "addr": "104.21.2.69:443",
      "status": 302,
      "status_text": "Found",
      "proto": "HTTP/2.0",
      "tls_version": "TLS 1.3",
      "cipher": "TLS_AES_128_GCM_SHA256",
      "content_type": "text/plain; charset=utf-8",
      "headers": [
        {
          "name": "Alt-Svc",
          "value": "h3=\":443\"; ma=86400"
        },
        {
          "name": "Cache-Control",
          "value": "no-store"
        },
        {
          "name": "Cf-Cache-Status",
          "value": "DYNAMIC"
        },
        {
          "name": "Cf-Ray",
          "value": "a523b8d63a0bf37d-LHR"
        },
        {
          "name": "Content-Length",
          "value": "10"
        },
        {
          "name": "Content-Security-Policy",
          "value": "default-src 'self'; style-src 'self'; font-src 'self'; img-src 'self' data:; script-src 'self'; connect-src 'self'; frame-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'"
        },
        {
          "name": "Content-Type",
          "value": "text/plain; charset=utf-8"
        },
        {
          "name": "Date",
          "value": "Thu, 29 Oct 2026 16:57:55 GMT"
        },
        {
          "name": "Nel",
          "value": "{\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}"
        },
        {
          "name": "Permissions-Policy",
          "value": "camera=(), microphone=(), geolocation=()"
        },
        {
          "name": "Referrer-Policy",
          "value": "strict-origin-when-cross-origin"
        },
        {
          "name": "Report-To",
          "value": "{\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i257eq8dgTt2H1IHlNsdf8hzUZ9vPA94F15BI8fUmiCg4I2M1nXhWGnhVj3c3nieKxHnyslbaSrhe4BRoWixwxs9fudQU7MsHm83ueCWQvWgoG%2B7%2BWHaLI2Bhl1GUNy7LAo%3D\"}]}"
        },
        {
          "name": "Server",
          "value": "cloudflare"
        },
        {
          "name": "Strict-Transport-Security",
          "value": "max-age=63072000; includeSubDomains"
        },
        {
          "name": "X-Content-Type-Options",
          "value": "nosniff"
        },
        {
          "name": "X-Frame-Options",
          "value": "DENY"
        },
        {
          "name": "X-Robots-Tag",
          "value": "noindex, follow"
        }
      ],
      "timing": [
        {
          "name": "dns",
          "ms": 29.205
        },
        {
          "name": "connect",
          "ms": 10.778
        },
        {
          "name": "tls",
          "ms": 38.816
        },
        {
          "name": "ttfb",
          "ms": 197.734
        },
        {
          "name": "download",
          "ms": 0.008
        }
      ],
      "total_ms": 277.255,
      "total": "277 ms",
      "body_bytes": 10
    }
  ],
  "redirects": 0,
  "total_ms": 277.255,
  "total": "277 ms",
  "proto": "HTTP/2.0",
  "http3_advertised": true,
  "compression": "none",
  "grade": "A",
  "checks": [
    {
      "name": "Strict-Transport-Security",
      "status": "pass",
      "value": "max-age=63072000; includeSubDomains",
      "note": "Browsers that have seen this will refuse to load the site over plain HTTP."
    },
    {
      "name": "Content-Security-Policy",
      "status": "pass",
      "value": "default-src 'self'; style-src 'self'; font-src 'self'; img-src 'self' data:; script-src 'self'; connect-src 'self'; frame-src 'none'; base-uri 'self'; form-acti...",
      "note": "Policy is enforced and script sources are restricted."
    },
    {
      "name": "Framing",
      "status": "pass",
      "value": "frame-ancestors 'none'",
      "note": "CSP frame-ancestors controls which sites may embed this page. It supersedes X-Frame-Options."
    },
    {
      "name": "X-Content-Type-Options",
      "status": "pass",
      "value": "nosniff",
      "note": "Browsers will trust the declared Content-Type rather than guessing, which blocks a class of script-injection tricks."
    },
    {
      "name": "Referrer-Policy",
      "status": "pass",
      "value": "strict-origin-when-cross-origin",
      "note": "Limits how much of the URL other sites learn when a user follows a link."
    },
    {
      "name": "Permissions-Policy",
      "status": "pass",
      "value": "camera=(), microphone=(), geolocation=()",
      "note": "Declares which browser features (camera, microphone, geolocation, payment) the page and its frames may use."
    },
    {
      "name": "Cross-Origin-Opener-Policy",
      "status": "info",
      "value": "missing",
      "note": "Not essential for most sites. same-origin is worth adding if the page handles logins or sensitive data.",
      "guide": "https://kirkdiamond.com/guides/security-headers"
    },
    {
      "name": "Server disclosure",
      "status": "pass",
      "value": "Server: cloudflare",
      "note": "A product name without a version is fine."
    },
    {
      "name": "Cookies",
      "status": "info",
      "value": "none set",
      "note": "No Set-Cookie headers in the chain, so nothing to audit.",
      "guide": "https://kirkdiamond.com/guides/security-headers"
    }
  ]
}