url inspect derived

{
  "input": {
    "type": "http",
    "method": "GET",
    "queryParams": {
      "url": "https://example.com"
    }
  },
  "output": {
    "type": "json",
    "example": {
      "targets": [
        {
          "dns": {
            "a": [
              "104.20.23.154",
              "172.66.147.243"
            ],
            "aaaa": [
              "2606:4700:10::ac42:93f3",
              "2606:4700:10::6814:179a"
            ],
            "status": "resolved",
            "observedAt": "2026-09-21T15:56:40.006Z"
          },
          "url": "https://example.com/",
          "http": {
            "method": "HEAD",
            "status": 200,
            "headers": {
              "xFrameOptions": null,
              "referrerPolicy": null,
              "permissionsPolicy": null,
              "xContentTypeOptions": null,
              "contentSecurityPolicy": null,
              "strictTransportSecurity": null
            },
            "location": null,
            "observedAt": "2026-09-21T15:56:40.036Z"
          },
          "hostname": "example.com"
        }
      ],
      "findings": [
        {
          "code": "header_not_observed",
          "detail": "strict-transport-security was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        },
        {
          "code": "header_not_observed",
          "detail": "content-security-policy was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        },
        {
          "code": "header_not_observed",
          "detail": "x-frame-options was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        },
        {
          "code": "header_not_observed",
          "detail": "x-content-type-options was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        },
        {
          "code": "header_not_observed",
          "detail": "referrer-policy was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        },
        {
          "code": "header_not_observed",
          "detail": "permissions-policy was not present in the HEAD response; absence alone is not a vulnerability verdict.",
          "target": 0
        }
      ],
      "inputUrl": "https://example.com/",
      "terminal": {
        "status": 200,
        "target": 0
      },
      "warnings": [],
      "redirects": [],
      "observedAt": "2026-09-21T15:56:40.037Z",
      "sourceLinks": {
        "dns": "https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/make-api-requests/",
        "http": "https://www.rfc-editor.org/rfc/rfc9110.html",
        "platformSecurity": "https://developers.cloudflare.com/workers/reference/security-model/"
      },
      "completeness": {
        "complete": true,
        "dnsQueries": 2,
        "httpTargets": 1,
        "notPerformed": [
          "response_body_download",
          "get_request_fallback",
          "javascript_rendering",
          "malware_or_phishing_reputation",
          "certificate_chain_validation",
          "rdap_registration",
          "bgp_or_rpki_validation"
        ],
        "partialReasons": []
      },
      "normalizedUrl": "https://example.com/"
    }
  }
}