generated: '2026-08-05'
method: probed
source: live GET probes of the Super.com and SnapTravel hosts
name: Super.com well-known index
description: >-
  Every /.well-known/ path probed across the Super.com website host and the SnapTravel Partner
  Search API host on 2026-08-05. Only /.well-known/security.txt on www.super.com returned a real
  document; every other path on that host 307-redirects to /404, and every path on the API host
  returns 404. Absence is recorded as data — nothing here is inferred.
hosts:
- host: www.super.com
  probes:
  - path: /.well-known/security.txt
    status: 200
    content_type: text/plain
    file: supercom-security.txt
    hit: true
  - path: /.well-known/openid-configuration
    status: 307
    redirect: /404
    hit: false
  - path: /.well-known/oauth-authorization-server
    status: 404
    hit: false
  - path: /.well-known/api-catalog
    status: 307
    redirect: /404
    hit: false
  - path: /.well-known/ai-plugin.json
    status: 307
    redirect: /404
    hit: false
  - path: /.well-known/agent-card.json
    status: 307
    redirect: /404
    hit: false
  - path: /.well-known/agent.json
    status: 307
    redirect: /404
    hit: false
- host: api.snaptravel.com
  probes:
  - path: /.well-known/security.txt
    status: 404
    hit: false
  - path: /.well-known/openid-configuration
    status: 404
    hit: false
  - path: /.well-known/oauth-authorization-server
    status: 404
    hit: false
  - path: /.well-known/api-catalog
    status: 404
    hit: false
  - path: /.well-known/ai-plugin.json
    status: 404
    hit: false
  - path: /.well-known/agent-card.json
    status: 404
    hit: false
  - path: /.well-known/agent.json
    status: 404
    hit: false
files:
- type: SecurityTxt
  file: supercom-security.txt
  url: https://www.super.com/.well-known/security.txt
  status: 200
  fetched: '2026-08-05'
notes:
- >-
  www.super.com answers every /.well-known/* miss with a 307 to /404 rather than a 404, so a
  status-code-only check would read as a hit. Each redirect target was followed and confirmed
  to be the site's 404 page; no agent card, OpenID configuration, or plugin manifest exists.
- >-
  Publicly served .txt and .xml files (robots.txt, sitemap.xml, security.txt) pass, while every
  HTML path on www.super.com returns a 403 Cloudflare "Verifying you're human" interstitial to
  non-browser clients.