PUBLIC DOSSIER / DATED OBSERVATION
Scope completed
Documented angles
Reading coverage, not a security grade.
9 public observations are documented in this dossier.
7 structuring public dependencies are visible.
No useful change is retained since the previous reading.
4 points still require confirmation or cannot be observed from outside.
Domain registration, not the website or company creation date.
Hursad
Preview of the retained dossier, not a screenshot of the target.
View observed content →Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.
1 recorded IP address(es) / 1 country estimate(s) available
185.111.234.19TurkeyConnected IPCountry-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth
No summary signal retained. This does not mean “no risk”.
Each finding remains linked to its scope, evidence and limitations.
Only retained observations are shown. No earlier event is reconstructed.
02 / IDENTITY & CONTEXT
2026-09-29 17:03 UTC
Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.
Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.
1 recorded IP address(es) / 1 country estimate(s) available
185.111.234.19TurkeyConnected IPCountry-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth
Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.
The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.
Applicability requires review; not a legal determination.
Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
The applicable jurisdiction requires additional public or organisational evidence.
03 / TECHNICAL CLUES
A resource or response header is a public clue, not a server inspection.
HTTP Server header
2026-09-29 17:03 UTC
Clue source ↗2026.09-v3.1
Does not establish effective execution or a server technology that is not exposed.
X-Powered-By header
2026-09-29 17:03 UTC
Clue source ↗2026.09-v3.1
Does not establish effective execution or a server technology that is not exposed.
Bootstrap asset filename
2026-09-29 17:03 UTC
Clue source ↗2026.09-v3.1
Does not establish effective execution or a server technology that is not exposed.
PHP session cookie
2026-09-29 17:03 UTC
Clue source ↗2026.09-v3.1
Does not establish effective execution or a server technology that is not exposed.
fonts.googleapis.com/css
2026-09-29 17:03 UTC
Clue source ↗2026.09-v3.1
Does not establish effective execution or a server technology that is not exposed.
04 / WHAT CONNECTS
Technical relationships, not ownership links or assumed partnerships.
depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"d4a2ccc52a683d7e64d0add116f92b48251361e28d75cbd263c253ba4bde0c8a","subject":"hursad.org","predicate":"depends_on_provider","object":"Cloudflare","state":"observed","evidence_ids":["48f040054673a87929263d7803f2e792622b9f1b701a428b2bea20eb602d4bce"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"eb18125bbb8094cde0ec9da83b28cd3225f0f8eec8c803ba52f7f73d1a46fd70","subject":"hursad.org","predicate":"resolves_to","object":"185.111.234.19","state":"observed","evidence_ids":["e1563cdbe01e915b5e808c5ea6552e7c4f112def0168975fe643be72b3a20f2e"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"f8da1b08812630ef491166f898d7f2620542abb67e166b64f09a692ac13a6a42","subject":"hursad.org","predicate":"uses_nameserver","object":"eu.dnsenable.com","state":"observed","evidence_ids":["d6c1e92d1415eb39e3905c93aa99cf849f0d77106fb4d09385d29ede2e156220"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"fdf4b1399c74ee98fcc86619134be207150b4de6419b87e34e54fb8bd5acdf1a","subject":"hursad.org","predicate":"depends_on_provider","object":"mx01.hursad.org","state":"observed","evidence_ids":["b581ff9c942c7c2c177a98f74ac158966aa5d9dfcf1dcc710af9dbce18c231ee"],"first_seen_at":"2026-09-29T17:03:05+00:00","last_seen_at":"2026-09-29T17:03:05+00:00"}05 / POINTS TO EXAMINE
No summary signal retained. This is not a finding of no risk.
A provider headquarters, an IP address, or a CDN is not proof of data location.
Provider visibility does not describe contracts, subprocessors, or actual processing location.
Edge presence must not be treated as origin hosting.
Single DNS provider The name servers appear to belong to the same provider domain.
["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com"]
DMARC not detected No DMARC policy was observed for the domain.
CAA not published No authorized certificate authority is declared in DNS.
DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.
{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}DMARC missing No DMARC policy was observed for a domain that receives email.
TLS reporting not declared No TLS-RPT record was observed.
MTA-STS not declared The MTA-STS version DNS signal was not observed.
Single MX relay Only one mail relay was observed.
[{"host":"mx01.hursad.org","priority":10}]Content-Security-Policy missing The browser receives no explicit resource loading policy.
nosniff missing The browser may try to interpret a content type differently from the declared type.
Anti-framing protection missing The page may potentially be embedded in a hostile iframe.
Referrer-Policy missing Referrer URLs may be transmitted with uncontrolled granularity.
Permissions-Policy missing Unused browser capabilities are not explicitly disabled.
COOP isolation missing The browsing context is not isolated from cross-origin windows.
CORP missing The cross-origin resource sharing policy is not explicit.
COEP missing Embedded resource isolation is not enabled.
Runtime exposed X-Powered-By discloses unnecessary technical information.
php/7.2.34, plesklin
Third-party scripts without declared integrity External scripts are loaded without an observable SRI hash. Some dynamic resources do not support SRI.
["s7.addthis.com","cdnjs.cloudflare.com"]
Inline event handlers Inline JavaScript attributes make a strict CSP harder to maintain.
35
External links without explicit isolation Links opened in a new tab do not declare rel=noopener or noreferrer.
1
Highly dependent ecosystem The public document reveals several third-party providers or services.
["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","Google","s7.addthis.com","Cloudflare","mx01.hursad.org"]
Unattributed providers Some external hosts do not yet match the provider catalog.
["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","s7.addthis.com","mx01.hursad.org"]
Cookie without Secure A cookie received over HTTPS does not explicitly require encrypted transport.
PHPSESSID
Sensitive cookie accessible to JavaScript The cookie name suggests session or authentication use without HttpOnly.
PHPSESSID
SameSite not explicit The cookie does not declare a SameSite strategy.
PHPSESSID
Technical versions exposed Headers or metadata reveal precise software versions.
["PHP/7.2.34, PleskLin"]
Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.
["Google","Cloudflare"]
Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.
["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com","s7.addthis.com","mx01.hursad.org"]
Concentrated DNS All observed name servers appear to depend on the same operator domain.
["eu.dnsenable.com","tr.dnsenable.com","us.dnsenable.com"]
Single address observed Public DNS returns a single address at scan time.
["185.111.234.19"]
security.txt missing or incomplete No usable /.well-known/security.txt file with a Contact field was observed.
404
Privacy information not found No obvious link to a privacy policy was identified on the page.
Legal notice not found No obvious legal link was identified in the public document.
Full structured details remain in the JSON report. Missing information is not reconstructed.
06 / THE INSPECTED PAGE
The target’s JavaScript is not executed. A website declaration does not certify its identity.
07 / REVIEWED REFERENCES
Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.
No reviewed external reference recorded.
08 / PUBLIC RESOURCES
Not observed at this location
https://hursad.org/.well-known/security.txt2026-09-29 17:03 UTC
09 / TIME CHANGES THE READING
Initial reference point for this reading.
Displayed reading
10 / KEEP THE READING VERIFIABLE
The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.
What is being observed and which public markers identify it?
Observed : Technical finding : Signal importance : medium / Observed : Dns nameserver : tr.dnsenable.com
Technical finding Observed
Signal importance : medium
dns
Dns nameserver Observed
tr.dnsenable.com
dns
Mail exchanger Observed
mx01.hursad.org
dns
Dns nameserver Observed
us.dnsenable.com
dns
Dns nameserver Observed
eu.dnsenable.com
dns
Dns address Observed
185.111.234.19
dns
Which public infrastructures appear to serve the service?
Observed : Provider dependency : Cloudflare / Undetermined : Origin host : Value not available
Provider dependency Observed
Cloudflare
provider_observed_once
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Provider dependency Observed
tr.dnsenable.com
provider_observed_once
Provider dependency Observed
mx01.hursad.org
provider_observed_once
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Provider dependency Observed
provider_observed_once
How are public exchanges protected and presented?
Observed : Tls issuer : C = US, O = SSL Corp, CN = TrustSafe TLS RSA SubCA 2 / Not tested : Post-quantum TLS negotiation : No measurement performed
Tls issuer Observed
C = US, O = SSL Corp, CN = TrustSafe TLS RSA SubCA 2
certificate_observed
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Tls valid to Observed
2027-03-06T18:53:46+00:00
tls
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : medium
headers
Which mail protections and policies are publicly observable?
Observed : SPF policy : hardfail / Observed : Technical finding : Signal importance : medium
SPF policy Observed
hardfail
mail_policy_observed
Technical finding Observed
Signal importance : medium
dns
Dns nameserver Observed
tr.dnsenable.com
dns
Mail policy flag Observed
No
mail_trust
Mail exchanger Observed
mx01.hursad.org
dns
Technical finding Observed
Evidence : Host : mx01.hursad.org ; Priority : 10 ; Signal importance : low
mail_trust
Which public DNS controls are visible and what remains undetermined?
Observed : Technical finding : Signal importance : medium / Observed : Dns nameserver : tr.dnsenable.com
Technical finding Observed
Signal importance : medium
dns
Dns nameserver Observed
tr.dnsenable.com
dns
Mail policy flag Observed
No
mail_trust
Mail exchanger Observed
mx01.hursad.org
dns
Technical finding Observed
Evidence : Host : mx01.hursad.org ; Priority : 10 ; Signal importance : low
mail_trust
Dns nameserver Observed
us.dnsenable.com
dns
Which external domains, providers or resources does the site visibly depend on?
Observed : Provider dependency : Cloudflare / Observed : Provider dependency : tr.dnsenable.com
Provider dependency Observed
Cloudflare
provider_observed_once
Provider dependency Observed
tr.dnsenable.com
provider_observed_once
Provider dependency Observed
mx01.hursad.org
provider_observed_once
Provider dependency Observed
provider_observed_once
Provider dependency Observed
us.dnsenable.com
provider_observed_once
Provider dependency Observed
s7.addthis.com
provider_observed_once
Which technologies can reasonably be inferred from public traces?
Observed : Technology : Name : PHP ; Version exposed : No / Observed : Technical finding : Signal importance : low
Technology Observed
Name : PHP ; Version exposed : No
technology
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : medium
headers
Technology Observed
Name : LiteSpeed ; Version exposed : No
technology
Technical finding Observed
Signal importance : low
headers
Which elements, endpoints or artefacts are publicly exposed?
To confirm : Canary statement detected : No / Observed : Technical finding : Signal importance : medium
Canary statement detected To confirm
No
no_known_passive_signature_observed
Technical finding Observed
Signal importance : medium
dns
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Evidence : eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium
dependencies
Technical finding Observed
Evidence : Cloudflare ; Google ; eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium
dependencies
Which public documents and transparency mechanisms are present?
Observed : Technical finding : Signal importance : medium / Observed : Technical finding : Signal importance : low
Technical finding Observed
Signal importance : medium
dns
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Signal importance : low
headers
Technical finding Observed
Evidence : eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium
dependencies
Technical finding Observed
Evidence : Cloudflare ; Google ; eu.dnsenable.com ; mx01.hursad.org ; s7.addthis.com ; tr.dnsenable.com ; us.dnsenable.com ; Signal importance : medium
dependencies
Technical finding Observed
Evidence : PHPSESSID ; Signal importance : high
privacy
Which protections or situations deserve particular attention?
To confirm : Canary statement detected : No / Not tested : Post-quantum TLS negotiation : No measurement performed
Canary statement detected To confirm
No
no_known_passive_signature_observed
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Tls valid to Observed
2027-03-06T18:53:46+00:00
tls
Technical finding Observed
Signal importance : medium
dns
Technical finding Observed
Signal importance : low
headers
Dns nameserver Observed
tr.dnsenable.com
dns
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Tls valid to : 2027-03-06T18:53:46+00:00 / Observed : Dnssec evidence : Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested
Tls valid to Observed
2027-03-06T18:53:46+00:00
tls
Dnssec evidence Observed
Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested
dnssec_depth
Technology Observed
Name : PHP ; Version exposed : No
technology
Technical finding Observed
Signal importance : medium
dns
Technical finding Observed
Signal importance : low
headers
Dns nameserver Observed
tr.dnsenable.com
dns
The filter changes the display. Exports retain all evidence.
e2c2bacb65f1803c44c04f76d012a8d87b5979da05223f6c9d7b7834e37167b83e840f0c2a906ddfb80d35376083de4257e38abae0aba35a74118b2269899e11f409f888071d1e748f80a14cdb275c11838067cf05345f0e2e098fcf5f129ff0019913aa0c0ca39d9082818548f040054673a879295c6eadac0d5fe49c772e30a75e97255a7da250064ba9522a5ab5dc2d329a6eeb7d356d3ab581ff9c942c7c2c17734d3de76ea9dd622c508f86344a20fc5ee7Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.
Report an error or request clarification ↗