Retained technical findings and limitations
Network reachability
DNS and email
Single DNS provider The name servers appear to belong to the same provider domain.
["theo.ns.cloudflare.com","kay.ns.cloudflare.com"]
CAA not published No authorized certificate authority is declared in DNS.
DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.
{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}Email trust
DMARC monitoring only The p=none policy collects reports but requests neither quarantine nor rejection.
v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
TLS reporting not declared No TLS-RPT record was observed.
MTA-STS not declared The MTA-STS version DNS signal was not observed.
TLS transport
Security headers
Content-Security-Policy missing The browser receives no explicit resource loading policy.
HSTS missing The browser is not instructed to return exclusively over HTTPS.
nosniff missing The browser may try to interpret a content type differently from the declared type.
Anti-framing protection missing The page may potentially be embedded in a hostile iframe.
Referrer-Policy missing Referrer URLs may be transmitted with uncontrolled granularity.
Permissions-Policy missing Unused browser capabilities are not explicitly disabled.
COOP isolation missing The browsing context is not isolated from cross-origin windows.
CORP missing The cross-origin resource sharing policy is not explicit.
COEP missing Embedded resource isolation is not enabled.
Third-party resource control
External links without explicit isolation Links opened in a new tab do not declare rel=noopener or noreferrer.
3
Dependencies
Privacy
Technology footprint
Technical versions exposed Headers or metadata reveal precise software versions.
["WordPress 7.1.1"]
Estimated sovereignty
Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.
["Cloudflare","Google"]
Resilience
Concentrated DNS All observed name servers appear to depend on the same operator domain.
["theo.ns.cloudflare.com","kay.ns.cloudflare.com"]
Transparency
security.txt missing or incomplete No usable /.well-known/security.txt file with a Contact field was observed.
403
origin_hostdata_locationFull structured details remain in the JSON report. Missing information is not reconstructed.