# HAITI MILITARY & SECURITY DOMAINS - RECONNAISSANCE SWEEP
**Date:** 2026-03-04
**Analyst:** Passive OSINT (unauthenticated HTTP GET only)
**Scope:** 9 military/security-related .gouv.ht domains

---

## EXECUTIVE SUMMARY

Of 9 domains probed, only **2 responded** (md.gouv.ht and pnh.gouv.ht). The remaining 7 have **no DNS records** (NXDOMAIN) and do not exist in public DNS.

### Critical Findings

| # | Finding | Severity | Domain |
|---|---------|----------|--------|
| 1 | **pnh.gouv.ht DOMAIN HIJACKED** -- Police Nationale d'Haiti domain is serving a "Cash Rocket / smocup-cashads" scam platform. SSL cert issued to `cashads.smocup.site`, not pnh.gouv.ht. | **CRITICAL** | pnh.gouv.ht |
| 2 | md.gouv.ht exposes full WP REST API with user enumeration, 168 media files, 22 posts, 20 pages, XMLRPC enabled with 80+ methods | HIGH | md.gouv.ht |
| 3 | md.gouv.ht has military recruitment forms (FAd'H enrollment), employee newsletter system, and candidate eligibility lists publicly accessible via REST API | HIGH | md.gouv.ht |
| 4 | 7 of 9 military/security domains have NO DNS -- these .gouv.ht subdomains do not exist | MEDIUM | Multiple |
| 5 | md.gouv.ht runs Code Snippets plugin (PHP code execution capability), Ultimate Member (user registration), and application-password auth enabled | MEDIUM | md.gouv.ht |

---

## DOMAIN STATUS OVERVIEW

| Domain | Purpose | HTTPS | HTTP | DNS | Status |
|--------|---------|-------|------|-----|--------|
| md.gouv.ht | Ministry of Defense | 200 OK | 301->HTTPS | Resolves | **ALIVE - WordPress** |
| pnh.gouv.ht | Police Nationale d'Haiti | 200 OK (insecure) | 301->HTTPS | 193.203.165.231 | **ALIVE - HIJACKED** |
| cspn.gouv.ht | Superior Council of National Police | Timeout | Timeout | NXDOMAIN | **DEAD** |
| bsap.gouv.ht | Bureau of Security Affairs | Timeout | Timeout | NXDOMAIN | **DEAD** |
| protection-civile.gouv.ht | Civil Protection | Timeout | Timeout | NXDOMAIN | **DEAD** |
| ema.gouv.ht | Etat-Major des Armees | Timeout | Timeout | SERVFAIL | **DEAD** |
| securite.gouv.ht | Security Ministry | Timeout | Timeout | NXDOMAIN | **DEAD** |
| fad.gouv.ht | Forces Armees d'Haiti | Timeout | Timeout | NXDOMAIN | **DEAD** |
| justice.gouv.ht | Justice Ministry | Timeout | Timeout | NXDOMAIN | **DEAD** |

Alternative subdomains checked (all NXDOMAIN): www.pnh.gouv.ht, www.md.gouv.ht, www.fad.gouv.ht, police.gouv.ht, armee.gouv.ht, defense.gouv.ht, fadh.gouv.ht

---

## DOMAIN 1: md.gouv.ht (Ministry of Defense) -- DETAILED ANALYSIS

### Tech Stack

| Component | Value |
|-----------|-------|
| **CMS** | WordPress (latest-ish) |
| **PHP Version** | 8.2.28 |
| **Web Server** | LiteSpeed |
| **Hosting** | Hostinger (hpanel) |
| **Theme** | Astra |
| **Page Builder** | Elementor (with Elementor AI) |
| **Security Plugin** | iThemes Security |
| **HTTP/3** | Enabled (QUIC/h3) |
| **CSP** | upgrade-insecure-requests only |

### Detected Plugins (via REST API namespaces)

1. **iThemes Security** (`ithemes-security/rpc`, `ithemes-security/v1`)
2. **Code Snippets** (`code-snippets/v1`) -- PHP code execution plugin
3. **Elementor** (`elementor/v1`, `elementor-ai/v1`)
4. **Elementor One** (`elementor-one/v1`)
5. **ZipWP** (`zipwp/v1`, `zipwp-images/v1`)
6. **Brave Popup Builder** (`brave/v1`)
7. **Forminator** (`forminator/v1`)
8. **WPMU DEV Plugin Cross-Sell** (`wpmudev_pcs/v1`)
9. **Hub Connector** (`hub-connector/v1`) -- WPMU DEV dashboard
10. **One Onboarding** (`one-onboarding/v1`)
11. **NPS Survey** (`nps-survey/v1`)
12. **Gutenberg Templates** (`gutenberg-templates/v1`)
13. **BSF Core** (`bsf-core/v1`) -- Brainstorm Force core
14. **Ultimate Member** (detected via shortcodes on pages)
15. **Newsletter** (detected via `[newsletter]` shortcode)

### Sensitive File Probes

| Path | Status | Notes |
|------|--------|-------|
| /.git/HEAD | 403 | Git repo exists but access denied |
| /.git/config | 403 | Same |
| /.env | 404 | Not found |
| /robots.txt | 200 | Standard WP robots.txt |
| /wp-sitemap.xml | 200 | Full sitemap exposed |
| /wp-json/ | 200 | Full REST API (528KB response!) |
| /wp-config.php.bak | 403 | Access denied (may exist) |
| /.htaccess | 403 | Access denied |
| /readme.html | 403 | Access denied |
| /xmlrpc.php | 405 (POST only) | **80+ XML-RPC methods available** |
| /wp-login.php | 302 | Redirects (login page active) |
| /wp-cron.php | 200 | WP Cron accessible |
| /wp-content/uploads/ | 403 | Directory listing disabled |
| /wp-content/plugins/ | 200 (empty) | Blank page |
| /wp-content/themes/ | 200 (empty) | Blank page |
| /wp-config.php~ | 403 | Vim backup blocked |
| /.wp-config.php.swp | 403 | Vim swap blocked |
| /server-status | 404 | |
| /phpinfo.php | 404 | |
| /debug.log | 404 | |

### robots.txt
```
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

Sitemap: https://md.gouv.ht/wp-sitemap.xml
```

### Authentication
- **Application Passwords** enabled: `https://md.gouv.ht/wp-admin/authorize-application.php`
- **XMLRPC** enabled with full method set (system.multicall, wp.getUsers, wp.uploadFile, etc.)
- **Ultimate Member** registration: `/register/` (200, 122KB page)
- **Ultimate Member** login: `/login/` (200, 124KB page)
- **Ultimate Member** members directory: `/members/`

### WordPress Users (2 accounts)

| ID | Display Name | Username/Slug | Author URL | Gravatar Hash |
|----|-------------|---------------|------------|---------------|
| 1 | PRL | admindev | /author/admindev/ | `33e54dec0cd79fc4b5e911c15f836c46ec8d0e452ecd3ca5f707bce0a3540a3b` |
| 5 | Jean Guiteau LAFAYE | ljguy | /author/ljguy/ | `6b4719d9a34c5d7ba29291ddeeb52119771098992822832fb2cdee5b384422bb` |

- User sitemap confirms only these 2 users
- Author enumeration via `?author=N`: IDs 1 and 5 resolve; IDs 2, 3, 4 return 404

### WordPress Posts (22 total, all on 1 page)

| ID | Date | Author | Title |
|----|------|--------|-------|
| 2632 | 2026-02-20 | 5 (ljguy) | AVIS AU PUBLIC |
| 2572 | 2026-02-10 | 5 (ljguy) | Communique de presse |
| 2568 | 2026-02-08 | 5 (ljguy) | Nomination FAd'H |
| 2558 | 2026-02-06 | 5 (ljguy) | POINT DE PRESSE |
| 2489 | 2025-07-22 | 5 (ljguy) | COMMUNIQUE |
| 2478 | 2025-07-22 | 5 (ljguy) | COMMUNIQUE |
| 2468 | 2025-06-23 | 5 (ljguy) | COMMUNIQUE OFFICIEL |
| 2403 | 2024-12-09 | 5 (ljguy) | Reunion entre le Ministre de la Defense et l'Ambassadeur de France en Haiti |
| 2392 | 2024-12-09 | 5 (ljguy) | Rencontre entre le Ministre de la Defense et le Charge d'Affaires des Etats-Unis du Mexique |
| 2349 | 2024-11-28 | 5 (ljguy) | Installation du nouveau Ministre de la Defense, Monsieur Jean-Michel MOISE |
| 2365 | 2024-11-28 | 5 (ljguy) | Visite du Ministre de la Defense au Grand Quartier General des Forces Armees d'Haiti |
| 2374 | 2024-11-28 | 5 (ljguy) | Reunion entre le Ministre de la Defense et l'Ambassadeur de la Republique de Chine (Taiwan) en Haiti |
| 2314 | 2024-10-23 | 5 (ljguy) | Haiti souhaite former 20 000 militaires au cours des cinq prochaines annees |
| 2309 | 2024-10-23 | 5 (ljguy) | Le Ministre de la Defense, M. Jean Marc Berthier Antoine, a ete accueilli a la Maison des Soldats (JID) |
| 2302 | 2024-10-22 | 5 (ljguy) | Le Ministre de la Defense, M. Jean Marc Berthier ANTOINE, mission officielle a Washington |
| 2289 | 2024-10-17 | 5 (ljguy) | Le Ministre de la Defense participe a la 16e Conference des Ministres de la Defense des Ameriques (CMDA) |
| 2297 | 2024-10-16 | 5 (ljguy) | Le ministre de la Defense conclut sa participation a la 16e CMDA |
| 1900 | 2024-09-03 | 5 (ljguy) | Le Ministere de la Defense Nationale d'Haiti - role crucial dans la protection et la securite du pays |
| 2064 | 2024-08-22 | 5 (ljguy) | Discours du Ministre Jean Marc Berthier Antoine lors de l'installation du Lt. General Derby Guerrier |
| 1990 | 2024-08-14 | 5 (ljguy) | Visite du Ministre de la Defense a la base de Clercine |
| 1851 | 2024-08-06 | 5 (ljguy) | Visite du Grand Quartier General et la base des Forces Armees d'Haiti a Clercine |
| 1712 | 2024-07-31 | 1 (admindev) | Installation du Directeur General du ministere de la Defence |

### Key Post Content

**Post 2568 -- Nomination FAd'H (2026-02-08):**
> Le Ministre de la Defense, Jean-Michel Moise, procede a la signature des avis de nomination des 341 nouveaux soldats, marquant une etape importante et constante dans le renforcement des capacites operationnelles de nos forces armees. Les Forces armees d'Haiti sont eternelles !

### WordPress Pages (20 total)

| ID | Date | Title | Slug | Notes |
|----|------|-------|------|-------|
| 4 | 2024-06-20 | Accueil | accueil | Homepage |
| 8 | 2024-06-20 | Contact | contact | |
| 540 | 2024-06-20 | A propos | a-propos | |
| 1264 | 2024-06-20 | le ministere | le-ministere | |
| 1381 | 2024-06-21 | media | media | |
| 1383 | 2024-06-21 | doccument | doccument | Typo in slug |
| 1385 | 2024-06-21 | Cabinet du ministre | membre-du-ministere | Lists cabinet members (placeholder text) |
| 1508 | 2024-07-04 | FAd'H | fadh | Forces Armees d'Haiti |
| 1947 | 2024-08-12 | Liste des candidats retenus pour FAd'H | liste-des-candidats-retenus-pour-fadh | **Military recruitment eligible candidates** |
| 2079 | 2024-08-24 | FAQ | faq | |
| 2101 | 2024-08-27 | Employes du MD/FAd'H | newsletter | **Restricted -- employee/military newsletter signup** |
| 2205 | 2024-09-01 | FORMULAIRE D'INSCRIPTION FAd'H 2026 | formulaire-dinscription-fadh | **Military enrollment form** |
| 2266 | 2024-10-09 | Formulaire de formation du FAd'H | formulaire-de-formation-du-fadh | **Military training application (age max 25/35)** |
| 2337 | 2024-11-08 | Utilisateur/utilisatrice | user | Ultimate Member |
| 2338 | 2024-11-08 | Connexion | login | UM login form (form_id=2334) |
| 2339 | 2024-11-08 | S'inscrire | register | UM registration (form_id=2333) |
| 2340 | 2024-11-08 | Membres | members | UM member directory (form_id=2336) |
| 2341 | 2024-11-08 | Deconnexion | logout | |
| 2342 | 2024-11-08 | Compte | account | |
| 2343 | 2024-11-08 | Reinitialisation du mot de passe | password-reset | |

### Military-Sensitive Content

**Page 2266 -- FAd'H Training Application:**
> Inscription FAD'H Inscription aux FAD'H pour le corps d'armes. Age maximum : 25 ans.
> Formulaire Inscription pour les cadres -- Age maximum requis : 35 ans.

**Page 1947 -- Eligible Candidates List:**
Links to multiple PDFs with lists of eligible postulants/soldiers for intellectual exams (Sep 1, 2024). PDF documents listed daily from Aug 13-29, 2024.

**Page 2101 -- Employees/Military Newsletter:**
> Acces reserve. Veuillez noter que cette inscription est reservee exclusivement aux employes du Ministere de la Defense et aux membres des Forces Armees d'Haiti (FAd'H).

### WordPress Media (168 total, 2 pages)

**Notable media items:**

| Type | Count | Examples |
|------|-------|---------|
| Images (JPEG/PNG) | ~145 | Military base visits, minister meetings, FAd'H banners, WhatsApp shared images |
| PDFs | ~15 | **Military candidate eligibility lists**, exam schedules, exam instructions |
| Videos (MP4) | 8 | "Visite" series -- Minister visiting military bases (Visite-1 through Visite-7) |

**Critical PDFs exposed:**
- `Liste-de-Postulants-eligibles-pour-prendre-part-aux-examents.pdf` (x4 versions)
- `CONSIGNES-POUR-LE-CONCOURS.pdf`
- Daily deposit lists: Aug 13-29, 2024 (14 PDFs with candidate names)
- `9782379350283.pdf` (ISBN-numbered document)

**Interesting image filenames:**
- `Quartier-general-FADH.jpg` -- Military HQ photo
- `Ministre.jpg` -- Minister's photo
- `banner-fadh.png` -- Official FAd'H banner
- `DSC07*` series -- Professional event photography
- `IMG-20240806-WA00*` series -- WhatsApp-shared military visit photos

### WordPress Categories

| ID | Name | Slug | Count |
|----|------|------|-------|
| 13 | A la Une | a-la-une | 12 |
| 8 | FAd'H | solution-de-fadh | 8 |
| 10 | le ministere | le-peuple | 19 |
| 9 | le ministere evenement | md | 2 |
| 3 | ministere operation | ministere-operation | 1 |
| 1 | Uncategorized | uncategorized | 0 |

### WordPress Tags

| ID | Name | Count |
|----|------|-------|
| 16 | #Defense | 1 |
| 17 | #FAd'H | 2 |
| 15 | #Haiti | 1 |
| 18 | Nomination | 1 |
| 19 | Securite | 1 |

### WordPress Comments (1 total)

| ID | Date | Author | Content |
|----|------|--------|---------|
| 226 | 2024-12-18 | Stanley | "hhh" |

### XMLRPC Methods Available (80+ methods)
Full XMLRPC is enabled. Key dangerous methods:
- `system.multicall` -- Can be used for brute force amplification
- `wp.getUsers` -- User enumeration (with credentials)
- `wp.uploadFile` -- File upload (with credentials)
- `wp.getAuthors` -- Author enumeration
- `pingback.ping` -- SSRF/DDoS amplification

### Key Personnel Identified (from posts)

| Name | Role | Source |
|------|------|--------|
| **Jean-Michel MOISE** | Ministre de la Defense (current, installed Nov 2024) | Posts 2349, 2568 |
| **Jean Marc Berthier ANTOINE** | Ministre de la Defense (former, active Aug-Oct 2024) | Posts 1990, 2064, 2289, 2297, 2302, 2309 |
| **Lt. General Derby GUERRIER** | Commandant en Chef a.i. des Forces Armees d'Haiti | Post 2064 |
| **Jean Guiteau LAFAYE** (ljguy) | WordPress admin / content manager | WP User ID 5 |
| **PRL** (admindev) | WordPress site developer/admin | WP User ID 1 |

---

## DOMAIN 2: pnh.gouv.ht (Police Nationale d'Haiti) -- HIJACKED

### CRITICAL: DOMAIN HAS BEEN HIJACKED

The official Police Nationale d'Haiti domain is **not serving a police website**. Instead, it is running a **cash/advertising scam platform** called "Cash Rocket" by "smocup-cashads".

### Evidence of Hijack

| Indicator | Value |
|-----------|-------|
| **Page title** | "Cash Rocket \| smocup-cashads" |
| **SSL Certificate Subject** | `CN=cashads.smocup.site` |
| **SSL Issuer** | Let's Encrypt R13 |
| **SSL Validity** | 2026-01-01 to 2026-04-01 |
| **Session cookie name** | `smocup_cashads_session` |
| **Login panel** | "smocup-cashads Login Panel" |
| **About page** | Generic scam text: "Work with us to play the game & Earning" |
| **Application type** | Survey/referral cash-earning scam |
| **Favicon** | `pnh.gouv.ht/uploads//25/10/1759477795.png` |

### Tech Stack

| Component | Value |
|-----------|-------|
| **Framework** | Laravel (PHP) |
| **Web Server** | nginx |
| **Server IP** | 193.203.165.231 |
| **Session handling** | Laravel with XSRF tokens |
| **SSL** | Let's Encrypt (issued to wrong domain!) |
| **HTTP Headers** | X-Frame-Options: SAMEORIGIN, X-XSS-Protection: 1; mode=block |

### Sensitive File Probes

| Path | Status | Notes |
|------|--------|-------|
| /.git/HEAD | 403 | Git repo present, access denied |
| /.git/config | 403 | Same |
| /.env | 404 | |
| /robots.txt | 200 | "User-agent: *\nDisallow:" (empty, allows all) |
| /login | 200 | **smocup-cashads Login Panel** |
| /admin | 302 | Redirects to /login |
| /uploads/ | 403 | Directory listing denied |
| /assets/ | 403 | Directory listing denied |
| /user | 302 | Redirects (auth required) |
| /password/reset | 200 | Password reset form |
| /custom-login | 405 | POST endpoint only (1MB response) |
| /storage/logs/laravel.log | 404 | |
| /telescope | 404 | |
| /horizon | 404 | |

### Login Form Details
```html
<h2>smocup-cashads Login Panel</h2>
<form method="POST" action="https://pnh.gouv.ht/custom-login">
    <input type="email" name="email" placeholder="Email">
    <input type="password" name="password" placeholder="Password">
    <button type="submit">Login</button>
</form>
```

### Available Pages
- `/` -- Homepage (Cash Rocket landing page)
- `/about-us` -- About Us (generic scam copy-paste text)
- `/faq` -- FAQs
- `/terms-conditions` -- Terms and Conditions
- `/privacy-policy` -- Privacy Policy
- `/contact-us` -- Contact Us
- `/login` -- Admin login panel
- `/password/reset` -- Password reset

---

## DOMAINS 3-9: NON-EXISTENT (NXDOMAIN)

### DNS Resolution Results

| Domain | DNS Result | Google DNS (8.8.8.8) |
|--------|-----------|---------------------|
| cspn.gouv.ht | NXDOMAIN | NXDOMAIN |
| bsap.gouv.ht | NXDOMAIN | NXDOMAIN |
| protection-civile.gouv.ht | NXDOMAIN | NXDOMAIN |
| ema.gouv.ht | SERVFAIL | SERVFAIL |
| securite.gouv.ht | NXDOMAIN | NXDOMAIN |
| fad.gouv.ht | NXDOMAIN | NXDOMAIN |
| justice.gouv.ht | NXDOMAIN | NXDOMAIN |

**Note:** ema.gouv.ht returns SERVFAIL rather than NXDOMAIN, which may indicate the zone exists but the authoritative nameserver is misconfigured or unreachable. All others definitively do not exist in DNS.

---

## VULNERABILITY ASSESSMENT

### md.gouv.ht

| Vulnerability | Risk | Description |
|--------------|------|-------------|
| WP REST API User Enumeration | MEDIUM | Both users (admindev, ljguy) fully exposed with Gravatar hashes |
| XMLRPC Enabled (system.multicall) | HIGH | Enables credential brute-force amplification attacks |
| Application Passwords Enabled | MEDIUM | OAuth-like token auth available for API access |
| Code Snippets Plugin | HIGH | If compromised, allows arbitrary PHP execution |
| Ultimate Member Registration | MEDIUM | Public user registration enabled -- could allow account creation |
| 168 Media Files Publicly Indexed | LOW | Military photos, candidate lists, exam PDFs all accessible |
| Military Candidate PDFs | HIGH | PII exposure -- lists of military candidates with names |
| Newsletter/Employee System | MEDIUM | Internal employee system exposed on public-facing site |
| WP-Cron Publicly Accessible | LOW | Could be used for timing-based reconnaissance |
| iThemes Security RPC Endpoints | LOW | Ban endpoint, detect-IP endpoint exposed (auth required) |
| Hub Connector (WPMU DEV) | LOW | Sync and logout endpoints visible |

### pnh.gouv.ht

| Vulnerability | Risk | Description |
|--------------|------|-------------|
| **Domain Hijacked** | **CRITICAL** | Government police domain serving scam/adware platform |
| SSL Certificate Mismatch | CRITICAL | Cert issued to cashads.smocup.site, not pnh.gouv.ht |
| Git Repository Present | MEDIUM | /.git/HEAD returns 403 (exists but protected) |
| Scam Platform Active | HIGH | Citizens may trust this domain as official police website |

---

## INTELLIGENCE SUMMARY

### Organizational Structure (from md.gouv.ht content)

- **Current Minister of Defense:** Jean-Michel MOISE (installed Nov 28, 2024)
- **Former Minister of Defense:** Jean Marc Berthier ANTOINE (active until at least Oct 2024)
- **FAd'H Commander:** Lt. General Derby GUERRIER (installed Aug 2024)
- **Diplomatic contacts mentioned:** France Ambassador, Mexico Charge d'Affaires, Taiwan (China) Ambassador
- **Military expansion:** Haiti plans to train 20,000 military personnel over 5 years (Post 2314)
- **Recent nominations:** 341 new soldiers nominated Feb 2026 (Post 2568)
- **Military bases referenced:** Grand Quartier General, Base de Clercine
- **International engagement:** 16th Conference of Defense Ministers of the Americas (CMDA), Inter-American Defense Board (JID) in Washington

### Infrastructure Notes

- md.gouv.ht is hosted on Hostinger (budget hosting) with LiteSpeed web server
- Site built with Elementor page builder on Astra theme
- WPMU DEV Hub Connector suggests managed via WPMU DEV dashboard
- pnh.gouv.ht is on a different infrastructure entirely (nginx, 193.203.165.231) -- likely a completely separate server controlled by the scammers
- 7 expected military/security domains simply do not exist in Haiti's DNS zone

### OPSEC Observations

- Media uploads contain WhatsApp metadata in filenames (timestamps, device info)
- Professional photography series (DSC07xxx) from military events
- Cabinet page has placeholder "Lorem ipsum" text -- site is partially incomplete
- Forminator forms embedded but not rendering in REST API responses (may use JavaScript lazy-loading)
- Two separate enrollment tracks: corps d'armes (age max 25) and cadres (age max 35)

---

## RAW DATA APPENDICES

### A. md.gouv.ht Full HTTP Response Headers
```
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
X-Powered-By: PHP/8.2.28
Content-Type: text/html; charset=UTF-8
Permissions-Policy: private-state-token-redemption=(self "https://www.google.com" ...)
Link: <https://md.gouv.ht/wp-json/>; rel="https://api.w.org/"
Link: <https://md.gouv.ht/wp-json/wp/v2/pages/4>; rel="alternate"
Link: <https://md.gouv.ht/>; rel=shortlink
Server: LiteSpeed
platform: hostinger
panel: hpanel
Content-Security-Policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000
```

### B. md.gouv.ht Sitemap Structure
```xml
<sitemapindex>
  <sitemap><loc>https://md.gouv.ht/wp-sitemap-posts-post-1.xml</loc></sitemap>
  <sitemap><loc>https://md.gouv.ht/wp-sitemap-posts-page-1.xml</loc></sitemap>
  <sitemap><loc>https://md.gouv.ht/wp-sitemap-taxonomies-category-1.xml</loc></sitemap>
  <sitemap><loc>https://md.gouv.ht/wp-sitemap-taxonomies-post_tag-1.xml</loc></sitemap>
  <sitemap><loc>https://md.gouv.ht/wp-sitemap-users-1.xml</loc></sitemap>
</sitemapindex>
```

### C. md.gouv.ht WP REST API Namespaces (Full List)
```
ithemes-security/rpc
ithemes-security/v1
oembed/1.0
code-snippets/v1
elementor-one/v1
zipwp/v1
brave/v1
astra/v1
elementor/v1/documents
elementor/v1
elementor-ai/v1
elementor/v1/feedback
hub-connector/v1
one-onboarding/v1
forminator/v1
wpmudev_pcs/v1
getting-started/v1
zipwp-images/v1
nps-survey/v1
gutenberg-templates/v1
bsf-core/v1
wp/v2
wp-site-health/v1
wp-block-editor/v1
wp-abilities/v1
```

### D. md.gouv.ht PDF Documents (Military Recruitment)
```
https://md.gouv.ht/wp-content/uploads/2024/08/Liste-de-Postulants-eligibles-pour-prendre-part-aux-examents.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Liste-de-Postulants-eligibles-pour-prendre-part-aux-examents1.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Liste-de-Postulants-eligibles-pour-prendre-part-aux-examents2.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Liste-de-Postulants-eligibles-pour-prendre-part-aux-examents2-1.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/CONSIGNES-POUR-LE-CONCOURS.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Jeudi-29-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Mardi-27-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Lundi-26-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Samedi_24_Aout_2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Vendredi_23_Aout_2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Jeudi-22-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Mercredi-21-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Mardi-20-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/08/Lundi-19-Aout-2024.pdf
https://md.gouv.ht/wp-content/uploads/2024/06/9782379350283.pdf
```

### E. md.gouv.ht Gravatar Hashes
```
User 1 (admindev/PRL):  33e54dec0cd79fc4b5e911c15f836c46ec8d0e452ecd3ca5f707bce0a3540a3b
User 5 (ljguy/LAFAYE): 6b4719d9a34c5d7ba29291ddeeb52119771098992822832fb2cdee5b384422bb
```

### F. pnh.gouv.ht Full HTTP Response Headers
```
HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Cache-Control: private, must-revalidate
Set-Cookie: XSRF-TOKEN=...; path=/; secure; samesite=lax
Set-Cookie: smocup_cashads_session=...; path=/; httponly; samesite=lax
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: master-only
Referrer-Policy: same-origin
alt-svc: h3=":443"; ma=86400
```

### G. pnh.gouv.ht SSL Certificate
```
Subject: CN=cashads.smocup.site
Issuer: C=US, O=Let's Encrypt, CN=R13
Not Before: Jan  1 21:22:42 2026 GMT
Not After:  Apr  1 21:22:41 2026 GMT
Public Key: RSA 4096-bit
```

---

*End of report. Generated 2026-03-04 via passive OSINT reconnaissance.*