How privacy works

Private lookups are not added to public searches, stored reports or change history. This does not remove a report that was already public. Your choice lasts for this browser session.

Who hosts www.elixir.org.pk?

Answer

www.elixir.org.pk uses the Hetzner network; the hosting company is unconfirmed.

Likely🇩🇪 GermanyHTTP/3

Checked 3 days ago from Cloudflare MIA in 2.0 s. This is a saved result.

Your next steps

What needs attention

Prioritized observations from this check. Review changes with whoever manages the website.

  1. Review

    No DMARC record was found at this domain

    A DMARC policy was not returned by this check. Parent-domain policy discovery and message authentication were not tested.

    Next step: Check whether a parent policy applies; otherwise configure DMARC reporting, verify SPF/DKIM alignment, then choose an appropriate policy.

  2. Improve

    Review browser security headers

    Strict-Transport-Security, Content-Security-Policy, Clickjacking protection, X-Content-Type-Options, Referrer-Policy did not meet the conservative header checks. This is not a complete security audit.

    Next step: Review these headers with the site developer and test policy changes before enforcing them.

  3. Good to know

    Only the network operator is identified

    The visible IP network is known, but no hosting-specific evidence confirms the company or reseller serving the site.

    Next step: Use the evidence as a network attribution and verify the hosting provider with the website owner if needed.

Evidence by layer

The company operating a network and the company selling the hosting can be different.

Network operators

Hetzner

Network ownership alone does not confirm the retail hosting provider.

How we know

  • 5.9.80.16 belongs to AS24940 (Hetzner), reverse DNS h28.core.hostnext.net

Servers

The addresses the name points to and the networks that own them.

www.elixir.org.pk→elixir.org.pk

  • 5.9.80.16HetznerNetwork AS24940🇩🇪 Registered in Germany, block 5.9.0.0/16Reverse DNS h28.core.hostnext.net

No IPv6 address.

Website

What the site answered when we visited its home page.

Status
200 OK
Address
https://www.elixir.org.pk/
Page title
Best FUE Hair Transplant Center in Islamabad Pakistan
HTTPS
Yes
HTTP/3
Supported
Response time
1.7 s from Cloudflare MIA
Powered by
PHP/8.3.36

Security headers

F
  • Strict-Transport-Security
  • Content-Security-Policy
  • Clickjacking protection
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy

Built with

CMSWordPress 7.0.8
JavaScriptjQuery
LanguagePHP 8.3.36
SEOYoast SEO
ChatTidio
FontsFont Awesome

DNS

Who answers for the domain name, and its records.

DNS provider
hostnext.net
Name servers
ns1.hostnext.net
ns2.hostnext.net
Zone
elixir.org.pk
DNSSEC
Not signed
Certificates
Any certificate authority (no CAA record)
All DNS records (6)
TypeNameValueTTL
CNAMEwww.elixir.org.pkelixir.org.pk900
Aelixir.org.pk5.9.80.16900
NSelixir.org.pkns2.hostnext.net86400
NSelixir.org.pkns1.hostnext.net86400
MXelixir.org.pk0 elixir.org.pk900
TXTelixir.org.pkv=spf1 ip4:5.9.80.16 include:relay.mailchannels.net ip4:5.9.80.10 ip4:213.59.121.50 ip4:23.226.129.107 +a +mx +ip4:131.153.38.228 +ip4:75.126.44.194 +ip4:50.97.97.132 +ip4:108.168.144.195 +ip4:50.97.97.130 +ip4:50.28.23.203 +ip4:204.197.244.72 +ip4:64.64.18.247 +include:websitewelcome.com ~all900

Email

Easy to spoof: SPF or DMARC is missing.

Mailbox provider
Own mail server (elixir.org.pk)
Mail servers
0 elixir.org.pk
Allowed senders
MailChannels
SPF
Mail from other servers is marked as suspicious.
DMARC
Missing
MTA-STS
Not enabled
SPF and DMARC records

v=spf1 ip4:5.9.80.16 include:relay.mailchannels.net ip4:5.9.80.10 ip4:213.59.121.50 ip4:23.226.129.107 +a +mx +ip4:131.153.38.228 +ip4:75.126.44.194 +ip4:50.97.97.132 +ip4:108.168.144.195 +ip4:50.97.97.130 +ip4:50.28.23.203 +ip4:204.197.244.72 +ip4:64.64.18.247 +include:websitewelcome.com ~all

Domain registration

The .pk registry does not publish RDAP data.

Observed changes

A compact record of what changed between public checks. Rechecks happen only when someone requests them.

History starts with saved public observations. No earlier changes are inferred.