hadef.org
All Connections
1 total
All Connections
1 totalhadef.org was the domain/public face of HADEF's CACFP food site operations. HADEF listed 2722 Park Ave S Minneapolis as its food distribution site under Partners in Nutrition sponsorship (MDE records). The site claimed 1,000 children/day capacity. HADEF received $1,155,035 in CACFP/SFSP payments via Partners in Nutrition in FY2021. 2722 Park Ave was subsequently purchased for $2.8M using FoF fraud proceeds.
All Findings
5 total
All Findings
5 totaldigital (5)
hadef.org cert gap: site dormant Apr 2018 – Nov 2020 (2.5 years), reactivated exactly as HADEF entered the COVID CACFP fraud ecosystem
hadef.org first cert was issued 2016-12-11 (GoDaddy). After regular renewal through April 2018, no certificate was issued for 2.5 years until November 2020 when Let's Encrypt automation was set up. The site reactivation in Nov 2020 precedes HADEF's FY2021 revenue spike of $1.175M from CACFP food program payments by approximately one month.
June 2025: 7 certs issued in single month (vs. ~1/quarter norm) — correlates with HADEF's 2025 dissolution/reinstatement period, suggesting server migration or account restructuring
crt.sh timeline shows 7 Let's Encrypt certificates issued in June 2025 alone, breaking the otherwise steady quarterly rhythm. This spike occurs 5 months after HADEF's January 2025 involuntary dissolution and January 25, 2025 reinstatement. Most likely cause: Hostinger account migration, server reassignment, or cPanel reconfiguration that triggered mass cert reissuance for all hosted domains.
9 hadef.org subdomains in CT logs including cpanel, webmail, webdisk — confirms budget shared cPanel hosting on Hostinger
crt.sh subdomains query returned: cpanel.hadef.org, cpcalendars.hadef.org, cpcontacts.hadef.org, m.hadef.org, mail.hadef.org, webdisk.hadef.org, webmail.hadef.org, www.hadef.org. These subdomains were TLS-certified under Let's Encrypt cPanel auto-TLS — standard cPanel hosting behavior. 76 total cert records, 43 unique certs since 2016-12-11.
hadef.org hosted on Hostinger shared cPanel (AS47583); all email, DNS, and web infrastructure is Hostinger-managed; no independent infrastructure
hadef.org resolves via www CNAME to www.hadef.org.cdn.hstgr.net (Hostinger CDN). All A and AAAA records are in Hostinger AS47583 address space. MX records point to mx1/mx2.hostinger.com. Nameservers are ns1/ns2.dns-parking.com (Hostinger DNS). SPF allows only Hostinger SMTP. The site uses standard shared cPanel hosting on Hostinger — a budget hosting provider.
hadef.org DMARC policy is p=none (no enforcement) — domain vulnerable to spoofing; anyone can send @hadef.org email with no automatic consequence
DMARC record: v=DMARC1; p=none. Policy of 'none' means no action is taken on authentication failures — emails failing SPF/DKIM are delivered normally. Combined with Hostinger-only SPF (~all softfail), the domain has minimal email authentication enforcement.