One submitted origin
The recipe follows only plug-in-enforced in-scope redirects. An offsite redirect stops the chain and does not become active expansion.
Authenticated API product
Web and TLS posture—authorised scope, not penetration testing.
Collect an evidence-backed view of one public HTTP or HTTPS origin. Redirect, TLS, header, security.txt and technology states remain source-qualified and bounded.
Observed versus candidate
Direct technology observations remain separate from candidate versions. Fingerprints do not establish a vulnerability.
Authenticated · Credit based
Live collection requires a permitted API identity, explicit target authorisation and the current credit and idempotency controls.
Exact coverage
What the bounded job attempts.
The generated product recipe supplies every lane shown here; no source-availability or response-volume promise is added by the page.
Http headers
Web surface
Page metadata
Web surface
Tls certificate
Tls service
Security txt
General
Technology fingerprints
Web fingerprinting
Only submit systems you own or are explicitly authorised to assess. This product does not exploit, brute-force, evade controls, or recursively execute against external redirect destinations.