PUBLIC DOSSIER / DATED OBSERVATION

hursad.org

Scope completed

Dossier overview

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

9 public observations are documented in this dossier.

7 structuring public dependencies are visible.

No useful change is retained since the previous reading.

4 points still require confirmation or cannot be observed from outside.

Distinct evidence
67
Retained signals
3
Identified products
5

General information

Domain name
hursad.org
Reading state
Scope completed
Registered on
2013-11-18 10:29 UTC
Registrar
Çizgi Telekomunikasyon A.Ş.
Stated expiration
2026-11-18 10:29 UTC
Registry outcome
Observed
View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE
hursad.org2026-09-29 17:03 UTC

Hursad

Angles
11/12
Evidence
67
Signals
3

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →
FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

1 recorded IP address(es) / 1 country estimate(s) available

  • 185.111.234.19TurkeyConnected IP

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Key signals

Inspect →

No summary signal retained. This does not mean “no risk”.

Each finding remains linked to its scope, evidence and limitations.

Visible relationships

Explore all →
hursad.orgus.dnsenable.comdepends on provider
hursad.orgus.dnsenable.comuses nameserver
hursad.orgtr.dnsenable.comdepends on provider
hursad.orgmx01.hursad.orguses mail exchanger
The twelve reading angles

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host
hursad.org
Registry query domain
hursad.org
Registered on
2013-11-18 10:29 UTC
Registrar
Çizgi Telekomunikasyon A.Ş.
Stated expiration
2026-11-18 10:29 UTC
Collection outcome
Observed
Read RDAP source ↗

2026-09-29 17:03 UTC

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

1 recorded IP address(es) / 1 country estimate(s) available

  • 185.111.234.19TurkeyConnected IP

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

LiteSpeed

Technology fingerprint

HTTP Server header

2026-09-29 17:03 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

PHP/7.2.34, PleskLin

Technology fingerprint

X-Powered-By header

2026-09-29 17:03 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

Bootstrap

Technology fingerprint

Bootstrap asset filename

2026-09-29 17:03 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

PHP

Technology fingerprint

PHP session cookie

2026-09-29 17:03 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

Google Fonts

Referenced service

fonts.googleapis.com/css

2026-09-29 17:03 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

hursad.orgus.dnsenable.com

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"00a3891458383607674e99cd09316dcf1476992efe6c6fddf3f8da46321db84b","subject":"hursad.org","predicate":"depends_on_provider","object":"us.dnsenable.com","state":"observed","evidence_ids":["a12986c4406743b752bc6490995fcd4a31f1cbbb589b143bf28eb51beb1a9968"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgus.dnsenable.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"00ab795438b31f306f81d31b2154c788a3c4f3cd04afbb10e25a23492e6cff69","subject":"hursad.org","predicate":"uses_nameserver","object":"us.dnsenable.com","state":"observed","evidence_ids":["2d329a6eeb7d356d3a1f4255a2cd4b003c0d30c3f9a9b000d5f3e74edb787e41"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgtr.dnsenable.com

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"16fed827fb9d7b6376eb959ff3900de0ea5fe03fc0756f065c1dc22ee96e2933","subject":"hursad.org","predicate":"depends_on_provider","object":"tr.dnsenable.com","state":"observed","evidence_ids":["75c84684641d27b58e26c6c3978723dfc1531a0256d97a87a33c792e3741e732"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgmx01.hursad.org

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"29cf5961fbfb883ea55064850e8a6b8bceeff781e7afa65b1749008ce4ff3c1b","subject":"hursad.org","predicate":"uses_mail_exchanger","object":"mx01.hursad.org","state":"observed","evidence_ids":["5c6eadac0d5fe49c771198aa5f3fd3dadfc7d09f8f4661e78cfbf1f80cb828cf"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgtr.dnsenable.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"54a760e4b6f4a9c43e67e6ce8b27e814f1b98d511bda3632505dc514354fb0a6","subject":"hursad.org","predicate":"uses_nameserver","object":"tr.dnsenable.com","state":"observed","evidence_ids":["83de4257e38abae0abea04ec82762dc3073e04426bcb55e0b03338acde027754"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgeu.dnsenable.com

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"6889dbbeb2ee4179795f62fe99d45a030a539f23b297e07e3f288aa71445f232","subject":"hursad.org","predicate":"depends_on_provider","object":"eu.dnsenable.com","state":"observed","evidence_ids":["d8728f8a245f0985600fe87793f1b1933b267b5d0f2ed1f5556c810d95d09181"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgGoogle

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"8f58796e47b0b2c2788434b561ca4b4cb94ac92984619b00e937be52e66dc546","subject":"hursad.org","predicate":"depends_on_provider","object":"Google","state":"observed","evidence_ids":["c1bc407438daa8067455fa05341e47ad63e97b214fe1f3e02db385e81b682c7a"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgLiteSpeed

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"9dd2815d9606244105fe71b99e7a01ae1febb2174531d865a27a1d17dfa8a0ca","subject":"hursad.org","predicate":"uses_technology","object":"LiteSpeed","state":"observed","evidence_ids":["5dd025b1806797981425a64c5c8f6e9110a46774ed487b94eb62bb5fd104b019"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgs7.addthis.com

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"a2a204f2a8e3649b4a589b1ca85ec3bbf3205d1994062a53ae9352725748d8c4","subject":"hursad.org","predicate":"depends_on_provider","object":"s7.addthis.com","state":"observed","evidence_ids":["f81362217b80d5d0b90f3b0162c2961db929747c141559716c51ff53a932160b"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgPHP/7.2.34, PleskLin

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"a5d01a425e4784a938f01716e5ee678ee12d19df9fedc7d04e7c8d84c212606e","subject":"hursad.org","predicate":"uses_technology","object":"PHP/7.2.34, PleskLin","state":"observed","evidence_ids":["91b042f5e3abe361953b3c5b929f397023b2429afb2f991df87052926c696243"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgPHP

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"acfc6986fb71e73058ec05c89972c993af1f4701b49c9bf9351d1ba3621a07e1","subject":"hursad.org","predicate":"uses_technology","object":"PHP","state":"observed","evidence_ids":["79da05223f6c9d7b78642ca457c4852db49ead4466ec5f297851543367d04960"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}
hursad.orgBootstrap

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"b7693e04f5f21f28188a4299b6dcf238760b05fcc82b81fb0a19aaa3be59f8b1","subject":"hursad.org","predicate":"uses_technology","object":"Bootstrap","state":"observed","evidence_ids":["d6898e1644a50b4128d68d3450ffc8388b521a4b7e09ea56ed1c5f522c4a28ea"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

No summary signal retained. This is not a finding of no risk.

All retained signals (3)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com"]

DMARC not detected No DMARC policy was observed for the domain.

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

DMARC missing No DMARC policy was observed for a domain that receives email.

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

Single MX relay Only one mail relay was observed.

[{"host":"mx01.hursad.org","priority":10}]

TLS transport

Security headers

Content-Security-Policy missing The browser receives no explicit resource loading policy.

nosniff missing The browser may try to interpret a content type differently from the declared type.

Anti-framing protection missing The page may potentially be embedded in a hostile iframe.

Referrer-Policy missing Referrer URLs may be transmitted with uncontrolled granularity.

Permissions-Policy missing Unused browser capabilities are not explicitly disabled.

COOP isolation missing The browsing context is not isolated from cross-origin windows.

CORP missing The cross-origin resource sharing policy is not explicit.

COEP missing Embedded resource isolation is not enabled.

Runtime exposed X-Powered-By discloses unnecessary technical information.

php/7.2.34, plesklin

Third-party resource control

Third-party scripts without declared integrity External scripts are loaded without an observable SRI hash. Some dynamic resources do not support SRI.

["s7.addthis.com","cdnjs.cloudflare.com"]

Inline event handlers Inline JavaScript attributes make a strict CSP harder to maintain.

35

External links without explicit isolation Links opened in a new tab do not declare rel=noopener or noreferrer.

1

Dependencies

Highly dependent ecosystem The public document reveals several third-party providers or services.

["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","Google","s7.addthis.com","Cloudflare","mx01.hursad.org"]

Unattributed providers Some external hosts do not yet match the provider catalog.

["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","s7.addthis.com","mx01.hursad.org"]

Privacy

Cookie without Secure A cookie received over HTTPS does not explicitly require encrypted transport.

PHPSESSID

Sensitive cookie accessible to JavaScript The cookie name suggests session or authentication use without HttpOnly.

PHPSESSID

SameSite not explicit The cookie does not declare a SameSite strategy.

PHPSESSID

Technology footprint

Technical versions exposed Headers or metadata reveal precise software versions.

["PHP/7.2.34, PleskLin"]

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Google","Cloudflare"]

Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.

["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","s7.addthis.com","mx01.hursad.org"]

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com"]

Single address observed Public DNS returns a single address at scan time.

["185.111.234.19"]

Transparency

security.txt missing or incomplete No usable /.well-known/security.txt file with a Contact field was observed.

404

Privacy information not found No obvious link to a privacy policy was identified on the page.

Legal notice not found No obvious legal link was identified in the public document.

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title
Hursad
Description
Hursad
Declared structured-data types
Not documented

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

09 / TIME CHANGES THE READING

The domain timeline

Initial reference point for this reading.

  1. Displayed reading

Open dedicated history →

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Technical finding : Signal importance : medium / Observed : Dns nameserver : tr.dnsenable.com

Technical finding Observed

Signal importance : medium

dns

Dns nameserver Observed

tr.dnsenable.com

dns

Mail exchanger Observed

mx01.hursad.org

dns

Dns nameserver Observed

us.dnsenable.com

dns

Dns nameserver Observed

eu.dnsenable.com

dns

Dns address Observed

185.111.234.19

dns

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Observed : Provider dependency : Cloudflare / Undetermined : Origin host : Value not available

Provider dependency Observed

Cloudflare

provider_observed_once

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Provider dependency Observed

tr.dnsenable.com

provider_observed_once

Provider dependency Observed

mx01.hursad.org

provider_observed_once

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Provider dependency Observed

Google

provider_observed_once

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = SSL Corp, CN = TrustSafe TLS RSA SubCA 2 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = SSL Corp, CN = TrustSafe TLS RSA SubCA 2

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Tls valid to Observed

2027-03-06T18:53:46+00:00

tls

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : medium

headers

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : SPF policy : hardfail / Observed : Technical finding : Signal importance : medium

SPF policy Observed

hardfail

mail_policy_observed

Technical finding Observed

Signal importance : medium

dns

Dns nameserver Observed

tr.dnsenable.com

dns

Mail policy flag Observed

No

mail_trust

Mail exchanger Observed

mx01.hursad.org

dns

Technical finding Observed

Evidence : Host : mx01.hursad.org ; Priority : 10 ; Signal importance : low

mail_trust

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Technical finding : Signal importance : medium / Observed : Dns nameserver : tr.dnsenable.com

Technical finding Observed

Signal importance : medium

dns

Dns nameserver Observed

tr.dnsenable.com

dns

Mail policy flag Observed

No

mail_trust

Mail exchanger Observed

mx01.hursad.org

dns

Technical finding Observed

Evidence : Host : mx01.hursad.org ; Priority : 10 ; Signal importance : low

mail_trust

Dns nameserver Observed

us.dnsenable.com

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Observed : Provider dependency : Cloudflare / Observed : Provider dependency : tr.dnsenable.com

Provider dependency Observed

Cloudflare

provider_observed_once

Provider dependency Observed

tr.dnsenable.com

provider_observed_once

Provider dependency Observed

mx01.hursad.org

provider_observed_once

Provider dependency Observed

Google

provider_observed_once

Provider dependency Observed

us.dnsenable.com

provider_observed_once

Provider dependency Observed

s7.addthis.com

provider_observed_once

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Technology : Name : PHP ; Version exposed : No / Observed : Technical finding : Signal importance : low

Technology Observed

Name : PHP ; Version exposed : No

technology

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : medium

headers

Technology Observed

Name : LiteSpeed ; Version exposed : No

technology

Technical finding Observed

Signal importance : low

headers

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Technical finding : Signal importance : medium

Canary statement detected To confirm

No

no_known_passive_signature_observed

Technical finding Observed

Signal importance : medium

dns

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Evidence : eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium

dependencies

Technical finding Observed

Evidence : Cloudflare ; Google ; eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium

dependencies

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Observed : Technical finding : Signal importance : medium / Observed : Technical finding : Signal importance : low

Technical finding Observed

Signal importance : medium

dns

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Evidence : eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium

dependencies

Technical finding Observed

Evidence : Cloudflare ; Google ; eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium

dependencies

Technical finding Observed

Evidence : PHPSESSID ; Signal importance : high

privacy

Security signalsObserved

Which protections or situations deserve particular attention?

To confirm : Canary statement detected : No / Not tested : Post-quantum TLS negotiation : No measurement performed

Canary statement detected To confirm

No

no_known_passive_signature_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Tls valid to Observed

2027-03-06T18:53:46+00:00

tls

Technical finding Observed

Signal importance : medium

dns

Technical finding Observed

Signal importance : low

headers

Dns nameserver Observed

tr.dnsenable.com

dns

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Tls valid to : 2027-03-06T18:53:46+00:00 / Observed : Dnssec evidence : Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested

Tls valid to Observed

2027-03-06T18:53:46+00:00

tls

Dnssec evidence Observed

Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested

dnssec_depth

Technology Observed

Name : PHP ; Version exposed : No

technology

Technical finding Observed

Signal importance : medium

dns

Technical finding Observed

Signal importance : low

headers

Dns nameserver Observed

tr.dnsenable.com

dns

Evidence record

The filter changes the display. Exports retain all evidence.

module_findinga79304616f1942dfe5
Observed value
{"evidence":null,"severity":"medium"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
technology5dd025b18067979814
Observed value
{"name":"LiteSpeed","version":"","version_exposed":false}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
openpgp_discovery705860d40efabce4c6
Observed value
{"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
openpgp_discovery
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dns_nameserverd6c1e92d1415eb39e3
Observed value
eu.dnsenable.com
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
module_findingc22f290098a3a14ced
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
post_quantum_tls4149bcff76cb4d3e9e
Observed value
{"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
pq_tls_probe
Method
Public observation
Limitations
A positive result does not make a site “post-quantum”, and a negative result does not prove no other client could negotiate it.
module_findinged67b3cc8ea6da4763
Observed value
{"evidence":["PHP/7.2.34, PleskLin"],"severity":"medium"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
tls_issuer4202a3fe0bebd28451
Observed value
C = US, O = SSL Corp, CN = TrustSafe TLS RSA SubCA 2
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
tls
Method
TLS handshake and public certificate inspection
Limitations
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.
dns_addresse1563cdbe01e915b5e
Observed value
185.111.234.19
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
module_finding2832066937f146a2d9
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
dependency_providerf81362217b80d5d0b9
Observed value
{"critical":false,"hosts":["s7.addthis.com"],"id":"host-67e8d7c07eed","known":false,"name":"s7.addthis.com","observation_count":1,"services":["unknown"],"tracker":false}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
http_header117c7d8b7c212a4d16
Observed value
["max-age=15552000; includeSubDomains; preload"]
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
module_finding6b5fc64e8457aa3bec
Observed value
{"evidence":"php/7.2.34, plesklin","severity":"medium"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
technologyd6898e1644a50b4128
Observed value
{"name":"Bootstrap","version":"","version_exposed":false}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
technology91b042f5e3abe36195
Observed value
{"name":"PHP/7.2.34, PleskLin","version":"","version_exposed":true}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_findinge5ce1fbe4be14e6a6d
Observed value
{"evidence":null,"severity":"critical"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
dependency_providerd8728f8a245f098560
Observed value
{"critical":true,"hosts":["eu.dnsenable.com"],"id":"host-b4f094cdb1e1","known":false,"name":"eu.dnsenable.com","observation_count":1,"services":["unknown"],"tracker":false}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
mail_transport_evidenceb2bbf41919fa84fb2e
Observed value
{"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
mail_transport
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
mail_policy_flag1801230e151223b08f
Observed value
false
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
module_finding51b871bfb25409950f
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-29T17:03:05+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗