B65.0 / 100
SRI Collision Risk
Advertised description
(Provider-supplied: an unverified claim, not checked by us. The trust grade above is our independent measurement.)
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token…
Show more ▾Show less ▴
Paid SRI hash collision-risk + algorithm-strength probe (cycle 113) — parses every <script src integrity> and <link rel=stylesheet href integrity>, for each subresource: extracts the hash token (sha256/sha384/sha512/sha1/md5), validates HASH LENGTH against expected base64 char count (sha256=44/sha384=64/sha512=88/sha1=28/md5=24 — anything shorter = TRUNCATED = SRI USELESS), flags WEAK HASH ALGORITHM (sha1/md5 per W3C 2024 SHOULD NOT), HEAD-probes the actual URL checking for CORS headers...
30-day uptime
100.0%
Avg latency (EU)
1064 ms
slow · measured from a single EU vantage point; includes network round-trip distance to the endpoint; a geographically distant endpoint reads slower even when its server is fast, so it is only lightly weighted in the score
Confidence
0.32
full-density score
Advertised price
$0.01
USDC
Price stability
Stable
last 30 days
Probes (30d)
9
full record · up to 48/day
More details ▾
| Endpoint ID | 299870 |
| Pay on Base | $0.01 USDC · to 0xCa0a…500c ↗ |
| First seen | 2026-10-24 |
| Last probed | 2026-10-29 |
| Status | listed |
| Snapshot computed | 2026-10-30 05:11 UTC (free snapshot, recomputed at least every 24h) |
Why this verdict?1 warning
A wallet payment page opens first; approve the USDC payment and the full JSON report loads right in your browser. Want a taste first? Read a free full sample report.
This page is the free cached snapshot (computed 6 hours ago, refreshed at least every 24h). Here's what the paid API adds.
✓Live re-probe at decision time
The score is computed the moment you ask, not up to 24h ago.✓Instant snapshot refresh
Every paid call rewrites this page, the badge and the card immediately.✓The full “why”, machine-readable
Confidence band, component breakdown, every risk flag with its evidence.✓On-chain settlement proof
Real USDC volume and distinct payers behind the pay-to wallet.✓90-day raw history
Every listing, price and payTo change, every probe result.✓Ranked better alternatives
Higher-scored endpoints serving the same function, when they exist.✓Change & liveness alerts
PayTo/price moves, spec regressions, downtime; 5-minute probes while watched.
$
npx -y x402-trust-mcpGive your agents the tools to do all of this for you, with one install. Agents use the x402_trust_score MCP tool or POST /v1/x402-trust directly (pay-per-call over x402, from $0.005).