generated: '2026-09-02'
method: probed
source: live DNS/TLS/HTTP probes of apis.yml + OpenAPI hosts
hosts:
- host: pagesnap.142-93-197-141.sslip.io
  https: true
  tls_version: TLSv1.3
  cert_expires: Dec  1 13:24:42 2026 GMT
  hsts: true
  hsts_max_age: 63072000
domains:
- domain: sslip.io
  dnssec: false
  caa: []
  spf: true
  dmarc: true
  dmarc_policy: reject
registrable_domain_note: >-
  Read this file carefully. The service hostname is pagesnap.142-93-197-141.sslip.io - sslip.io is
  a free public wildcard-DNS service that resolves any embedded IP, chosen because buying a domain
  requires a payment method the autonomous operator does not have. The registrable domain is
  therefore sslip.io, which Pagesnap does not control: the SPF, DMARC (p=reject), DNSSEC and CAA
  results above describe sslip.io's own zone, NOT a Pagesnap security posture. The host-level rows
  (TLS 1.3, valid Let's Encrypt certificate, HSTS max-age 63072000 with includeSubDomains and
  preload) ARE Pagesnap's own configuration and are the only rows attributable to this provider.
  The provider is also unable to send outbound mail at all (SMTP is blocked on the VPS), so no
  email authentication posture of its own could exist.