rsoe-edis.org
At a glance
- Category
- Data & Analytics
- Language
- English
- Paid-content signal
- No paid content foundObserved
- Registered
- 2020
- Hosting
- Microsoft CorporationInferred
- HTTPS certificate trusted
- PassedObserved
- Last updated
Related questions
More questions →What is rsoe-edis.org?
Does rsoe-edis.org offer paid content?
What languages does rsoe-edis.org support?
How can I visit rsoe-edis.org?
What are some alternatives to rsoe-edis.org?
Website Overview
Software versions and possible internal network details are exposed together, potentially making targeted reconnaissance easier. Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks.
Domain and Registration
Registered in 2020, this domain has about 6 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .org extension, which is not an independent safety signal.
DNS and Email
MX records exist, but SPF, DKIM and DMARC were not detected. Protection against domain impersonation may be incomplete. Nameservers are provided by Azure DNS, indicating managed DNS hosting. MX records point to the rsoe-edis.org email service. No CNAME was found; the observed records resolve directly to addresses. DNSSEC signatures were not detected, so this additional DNS authenticity protection is not confirmed.
TLS and Certificates
The certificate issuer is DigiCert Inc, a commercial certificate authority. The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate is valid for about 198 days in total, with 138 days remaining.
HTTP and Browser Security
The Server header exposes the software version: Microsoft-IIS/10.0. This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. X-Powered-By exposes backend information: PHP/7.4.30, ASP.NET. The response lacks these common security headers: HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. The headers contain possible internal network information: Microsoft-IIS/10.0. Cookie security attributes are unknown.
Technology Stack Analysis
The public page identifies Google Analytics, Microsoft IIS 10.0, PHP, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.
Search and Social Sharing
No homepage meta description was detected, leaving snippet selection more dependent on page text. No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. No Open Graph metadata was detected, so social previews may depend on platform inference. The title has 42 characters, within a common display range. The observed directives allow indexing and link following.
Hosting and Email
Registration details
| Registrar | InterNetX GmbH |
|---|---|
| Registered | 2020-02-24 |
| Expires | 2027-02-24 |
| Domain status | client transfer prohibited |
| Nameservers | ns1-03.azure-dns.com、ns2-03.azure-dns.net、ns3-03.azure-dns.org、ns4-03.azure-dns.info |
| DNSSEC | unsigned |
DNS records
TLS and certificates
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html; charset=UTF-8 |
| cache-control | no-store, max-age=0, no-cache |
| server | Microsoft-IIS/10.0 |
| content-security-policy | base-uri 'self'; child-src 'self' blob: *.arcgisonline.com data: *.google.com *.googlesyndication.com googleads.g.doubleclick.net mw1.googleapis.com *.facebook.com *.twitter.com accounts.google.com; connect-src 'self' data: *.windows.net *.arcgis.com *.arcgisonline.com *.googleapis.com edis-webapi.azurewebsites.net edis-webapi-test.azurewebsites.net *.fbcdn.net staging-website-api.airvisual.net *.google-analytics.com overpass-api.de wwf-sight-maps.org *.rsoe-edis.org *.columbia.edu *.unesco.org *.nasa.gov *.googlesyndication.com accounts.google.com; default-src 'self'; font-src 'self' *.arcgis.com; form-action 'self'; frame-ancestors 'self' data: localhost ; img-src 'self' blob: localhost edis-web-test.azurewebsites.net edis-web.azurewebsites.net rsoe-edis.org test.rsoe-edis.org data: localhost *.arcgisonline.com *.google.com *.arcgis.com *.twitter.com gtranslate.net *.gstatic.com localhost *.openweathermap.org *.githubusercontent.com wwf-sight-maps.org *.opentopomap.org *.columbia.edu *.unesco.org *.nasa.gov *.googlesyndication.com; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.arcgis.com resource://devtools *.googleapis.com translate.google.com cdn.jsdelivr.net connect.facebook.net *.twitter.com *.googletagmanager.com *.googlesyndication.com *.googleadservices.com adservice.google.hu adservice.google.com accounts.google.com; style-src 'self' 'unsafe-inline' *.arcgis.com *.googleapis.com accounts.google.com; |
| access-control-allow-origin | |
| set-cookie | Redacted |
Identified technologies
Pages, Search and Sharing
| Meta description | Not detected |
|---|---|
| Canonical URL | Not detected |
| Language | English (default) |
| Twitter Card | Not detected |
Unknown
robots.txt (opens in a new tab)
0 rulesAll bots 0 allowed · 0 disallowed
No matching rules.
Sitemaps
0No sitemaps found
User reviews (0)