{ "schema_version": "2.0", "engine_version": "2.7.1", "pattern_version": "2026.09.4", "scan_id": "b25e15fdd0ebc41c6db17365", "domain": "koperateur.com", "scanned_at": "2026-09-04T23:48:56+00:00", "duration_ms": 511.2, "entity": { "id": "df23caf35b72e210024255bfc2b420ab748b2e20c1355304af2618716ce2b50c", "display_name": "koperateur.com", "slug": "koperateur-com", "entity_type": "domain_subject", "auto_created": true, "primary_asset": "koperateur.com" }, "scope": { "mode": "passive", "coverage": "full", "access_level": "full", "access_reason": "public_document_available", "requests": 2, "homepage_only": true, "javascript_executed": false, "ports_scanned": false, "private_networks_blocked": true, "protection_bypassed": false, "max_body_bytes": 1572864, "scan_budget_seconds": 24, "budget_exhausted": false, "transport": "curl_with_socket_fallback" }, "trust_profile": { "methodology_version": "2.1.0", "knowledge_coverage": 84, "dimensions": { "security": { "quality": 94, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 3, "unknown_count": 0 }, "privacy": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "dependencies_control": { "quality": 82, "coverage": 100, "band": "favorable", "conclusive": true, "evidence_count": 3, "unknown_count": 2 }, "resilience": { "quality": 90, "coverage": 35, "band": "non_conclusive", "conclusive": false, "evidence_count": 1, "unknown_count": 1 }, "transparency": { "quality": 100, "coverage": 70, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "mail": { "quality": 81, "coverage": 100, "band": "favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 } }, "global": { "quality": 91, "coverage": 84, "secondary": true } }, "signals": [ { "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480", "key": "data_location_unknown", "category": "dependencies_control", "importance": "medium", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Localisation effective des données non déterminable", "en": "Effective data location cannot be determined" }, "explanation": { "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.", "en": "Public observations cannot establish where data is actually processed or stored." }, "limitations": { "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.", "en": "A provider headquarters, an IP address, or a CDN is not proof of data location." }, "evidence_ids": [], "change_status": "stable" }, { "id": "0a2723d2736bb4e09578b55efab21ab9fa1504752f98f18bc7505105a8e15f81", "key": "mail_dmarc_policy", "category": "mail", "importance": "low", "direction": "favorable", "state": "observed", "title": { "fr": "Politique DMARC observée", "en": "Observed DMARC policy" }, "explanation": { "fr": "La politique DMARC publiée est quarantine.", "en": "The published DMARC policy is quarantine." }, "limitations": { "fr": "Ce signal ne prouve pas à lui seul l’alignement réel de tous les flux de messagerie.", "en": "This signal alone does not prove actual alignment for every mail flow." }, "evidence_ids": [ "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3" ], "change_status": "stable" }, { "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9", "key": "origin_host_unknown", "category": "dependencies_control", "importance": "low", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Hébergement d’origine non déterminable", "en": "Origin hosting cannot be determined" }, "explanation": { "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.", "en": "An edge service or reverse proxy can hide origin infrastructure." }, "limitations": { "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.", "en": "Edge presence must not be treated as origin hosting." }, "evidence_ids": [], "change_status": "stable" }, { "id": "e1a2353d0588e0b726d75a38f23f25c76e33e8dc84a4d1b8a0fdf358138e15eb", "key": "visible_provider_dependencies", "category": "dependencies_control", "importance": "low", "direction": "neutral", "state": "corroborated", "title": { "fr": "Dépendances fournisseurs visibles", "en": "Visible provider dependencies" }, "explanation": { "fr": "3 fournisseur(s) sont reliés au périmètre observable.", "en": "3 provider(s) are linked to the observable scope." }, "limitations": { "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.", "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location." }, "evidence_ids": [ "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f", "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40", "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161" ], "change_status": "stable" } ], "changes": [ { "id": "b9286b62cc7eb996d8f499190a638209d062694f5ae86155bb7b4624433eca36", "key": "canary_signal|koperateur.com|canary_detection", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "volatile_filtered": false }, { "id": "f7aaa358e939811c4371e381ac54a64de15c274cd1374ef2f149e56ae3c66870", "key": "cookie|koperateur.com|sets_cookie", "status": "stable", "direction": "neutral", "before": { "http_only": true, "name": "kop_lang", "same_site": "strict", "secure": true }, "after": { "http_only": true, "name": "kop_lang", "same_site": "strict", "secure": true }, "volatile_filtered": false }, { "id": "cc6dffde62493c8cde2427189c6807758c363d1603104c8b6eb07576ccda64b3", "key": "csp_evidence|koperateur.com|csp_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "volatile_filtered": false }, { "id": "49f81a678dbd2543f3e18cc8a49a7036766ee5c31b34c2bf7f1faf87118a1954", "key": "dependency_provider|koperateur.com|depends_on_provider|cloudflare", "status": "stable", "direction": "neutral", "before": { "critical": true, "hosts": [ "cloudflare.com", "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }, "after": { "critical": true, "hosts": [ "cloudflare.com", "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }, "volatile_filtered": false }, { "id": "92b6ac0373717cdf252ba59f736c58ea8e5ffd826956c526d783a895d4de975a", "key": "dependency_provider|koperateur.com|depends_on_provider|mail.protonmail.ch", "status": "stable", "direction": "neutral", "before": { "critical": false, "hosts": [ "mail.protonmail.ch" ], "id": "host-d87c7268dbc2", "known": false, "name": "mail.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "after": { "critical": false, "hosts": [ "mail.protonmail.ch" ], "id": "host-d87c7268dbc2", "known": false, "name": "mail.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "volatile_filtered": false }, { "id": "6bce54c30fc4ff24d009d33c43c7f5471ab3fc8b5c5b2f4f5160fddaf47b1b17", "key": "dependency_provider|koperateur.com|depends_on_provider|mailsec.protonmail.ch", "status": "stable", "direction": "neutral", "before": { "critical": false, "hosts": [ "mailsec.protonmail.ch" ], "id": "host-795bfed2e90f", "known": false, "name": "mailsec.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "after": { "critical": false, "hosts": [ "mailsec.protonmail.ch" ], "id": "host-795bfed2e90f", "known": false, "name": "mailsec.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "volatile_filtered": false }, { "id": "9432223005cf484b1e905d0825ec6dbc20655c0f28061edb226ba0b3dd9ca53d", "key": "dmarc_policy|koperateur.com|dmarc_policy", "status": "stable", "direction": "neutral", "before": "quarantine", "after": "quarantine", "volatile_filtered": false }, { "id": "eeb6e3fe465008589607c68327c9a50a224aed76e14fc8df8c1c691c8c1f2173", "key": "dmarc_record|koperateur.com|publishes_dmarc", "status": "stable", "direction": "neutral", "before": "v=DMARC1; p=quarantine", "after": "v=DMARC1; p=quarantine", "volatile_filtered": false }, { "id": "0dd5361553a1ec4e55606e6bf5f311ef897b50712b5b3c796e437dd77d6ab4de", "key": "dns_address|koperateur.com|resolves_to|7aa3e09a6373635f765d1534c058548a382e91c3e8be23b0a79dd95a8fa61297", "status": "stable", "direction": "neutral", "before": "104.21.18.166", "after": "104.21.18.166", "volatile_filtered": false }, { "id": "d7bc6e7ee78837a7350a69d3c3cc938f7c993f665ce4d9040667a0d8ebf097cf", "key": "dns_address|koperateur.com|resolves_to|83db9b5978b28501d7517f3bf6b902474cb374a2e7c0a87bc69a3c3872f49847", "status": "stable", "direction": "neutral", "before": "2606:4700:3032::6815:12a6", "after": "2606:4700:3032::6815:12a6", "volatile_filtered": false }, { "id": "e5cc0f90993225e688a7e8c618bec3f5f1813236039714eab2e85a19f921dfbf", "key": "dns_address|koperateur.com|resolves_to|87da4a21eff2ef8c750890eacf11f86545171451635407abb800ec1c465e1a7d", "status": "stable", "direction": "neutral", "before": "2606:4700:3031::ac43:b6c0", "after": "2606:4700:3031::ac43:b6c0", "volatile_filtered": false }, { "id": "13b2554a9bb9cfe192c130249bdde549265898b4b0433268defeb61288adaa44", "key": "dns_address|koperateur.com|resolves_to|f145e382e2c714ae1ccddfab5d3a9f381dfbd655736621348fb0d71d362b01f0", "status": "stable", "direction": "neutral", "before": "172.67.182.192", "after": "172.67.182.192", "volatile_filtered": false }, { "id": "0da4134869bb162447af4f3554e89d456849a69a95400c4f5827d18a0c5708d8", "key": "dns_nameserver|koperateur.com|uses_nameserver|207e9a88a172c8a3c58bc8b60d12017a2661fe83a343f7103358dfbd0bbb2196", "status": "stable", "direction": "neutral", "before": "thea.ns.cloudflare.com", "after": "thea.ns.cloudflare.com", "volatile_filtered": false }, { "id": "5b5ffd26fac8014003a0728aac2cbe1c63e2a1e4a65e5540c29127bf84c24cd5", "key": "dns_nameserver|koperateur.com|uses_nameserver|b1743a8464f52a005771fe8c18815aa45def57034651ae56fc48fd96ed27f46e", "status": "stable", "direction": "neutral", "before": "david.ns.cloudflare.com", "after": "david.ns.cloudflare.com", "volatile_filtered": false }, { "id": "ee756cedbe8797e81fb9dcb21fac4051290773ce7ae50d6aaf9db5cfce72ae5f", "key": "dnssec_evidence|koperateur.com|dnssec_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "volatile_filtered": false }, { "id": "e7ee35fb8f5529c969628f7dbf2f9341f86bf17296c1493f7acb7f8ef0f53141", "key": "http_header|koperateur.com|content-security-policy", "status": "stable", "direction": "neutral", "before": [ "default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'" ], "after": [ "default-src 'none'; script-src 'nonce-E8WKylNukqUORnegKfIbKQ==' 'strict-dynamic'; style-src 'self' 'nonce-E8WKylNukqUORnegKfIbKQ=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'" ], "volatile_filtered": true }, { "id": "a1c00331f66beca7fce11508b2f465921963f7dc5a0d1eefcb533682683d297c", "key": "http_header|koperateur.com|cross-origin-embedder-policy", "status": "stable", "direction": "neutral", "before": [ "require-corp" ], "after": [ "require-corp" ], "volatile_filtered": false }, { "id": "aed8f56a00367a6c051d60ef863e217bbd5ebfad2fc9322751974d4a9c475ec4", "key": "http_header|koperateur.com|cross-origin-opener-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "305a1667724662d3b19af41d2ef112e256083348fd359afd828bd11977f7034a", "key": "http_header|koperateur.com|cross-origin-resource-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "6e770ce2d5bb7a37b3d67aba9f6e7de9a32ce5404caebdcadd9e538f2c5c47f8", "key": "http_header|koperateur.com|permissions-policy", "status": "stable", "direction": "neutral", "before": [ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ], "after": [ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ], "volatile_filtered": false }, { "id": "76f768b4e3c75355700bccb01267dae2fd74922d9b740aa5649334cc023c2370", "key": "http_header|koperateur.com|referrer-policy", "status": "stable", "direction": "neutral", "before": [ "strict-origin-when-cross-origin" ], "after": [ "strict-origin-when-cross-origin" ], "volatile_filtered": false }, { "id": "9a6eca2ed66c91eb8f18df77e14f1c3964bd358371b5005d79ed0d3620223875", "key": "http_header|koperateur.com|server", "status": "stable", "direction": "neutral", "before": [ "cloudflare" ], "after": [ "cloudflare" ], "volatile_filtered": false }, { "id": "8119191e3c114a9403032d2a7315e73ea898ab4d47f17201118013d1947b479b", "key": "http_header|koperateur.com|strict-transport-security", "status": "stable", "direction": "neutral", "before": [ "max-age=63072000; includeSubDomains; preload" ], "after": [ "max-age=63072000; includeSubDomains; preload" ], "volatile_filtered": false }, { "id": "a7d15367de90c4cfa2f04c147d19f056d99c3621c3502dd728f24f05375c5497", "key": "http_header|koperateur.com|x-content-type-options", "status": "stable", "direction": "neutral", "before": [ "nosniff" ], "after": [ "nosniff" ], "volatile_filtered": false }, { "id": "025032e1c42d8f32614a0dff9fe70a0eb8e8b2defd6b43f7841c4611642ed08e", "key": "http_header|koperateur.com|x-frame-options", "status": "stable", "direction": "neutral", "before": [ "DENY" ], "after": [ "DENY" ], "volatile_filtered": false }, { "id": "bf9cabcce60e7fc8d08f71bc3c64328f5c79c7b1cd438ab6c678ca98a9bff5d1", "key": "mail_exchanger|koperateur.com|uses_mail_exchanger|884a425f1e762a3cb2789652a5e2f00f20f4bc6248b4a888d4cd0d681a697ee8", "status": "stable", "direction": "neutral", "before": "mailsec.protonmail.ch", "after": "mailsec.protonmail.ch", "volatile_filtered": false }, { "id": "48ce7471896086addef81fe447949ea32022d62a5a6557b78a4856779daed969", "key": "mail_exchanger|koperateur.com|uses_mail_exchanger|deee7d82b1860a508c8d17c61caa3dd923204cfb28985f698780c00942784578", "status": "stable", "direction": "neutral", "before": "mail.protonmail.ch", "after": "mail.protonmail.ch", "volatile_filtered": false }, { "id": "26e952748e8278d4b8ee67569cd2a8e41958f163832fcb50d6a2975e33da4d74", "key": "mail_policy_flag|koperateur.com|bimi_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "13effcb1242530a4ca18472644b1a1205e1bdd577a12e83f1ad74fabeee48d88", "key": "mail_policy_flag|koperateur.com|mta_sts_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "a155bbf1943a316ba65ef2d5dfbf6d342badc1023a85187d79ed42f692b95a79", "key": "mail_policy_flag|koperateur.com|tls_reporting", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "73e834a12ec868242c55a53da389c33404065f4b3c90a37e1a67bb41bfe3fb89", "key": "mail_transport_evidence|koperateur.com|mail_transport_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "volatile_filtered": false }, { "id": "ea85cd88f7216f2a01dfaac7d03f5113053500ea006c3d76e1d13433ee39ae90", "key": "modern_transport_evidence|koperateur.com|modern_transport", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-16T18:09:20+00:00", "valid_to": "2026-11-14T18:09:19+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.18.166", "172.67.182.192" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3031::ac43:b6c0", "2606:4700:3032::6815:12a6" ], "state": "observed" } }, "volatile_filtered": false }, { "id": "70b0ed052126155e40d5f2198654b1c5494989b415f8e52012b869dfefa4357c", "key": "module_finding|koperateur.com|dependencies:unknown_dependencies", "status": "stable", "direction": "neutral", "before": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "after": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "volatile_filtered": false }, { "id": "5f14790d78475d4cdddc621f43d5371003e7fae09bc77b90ca0f9861e07c4e30", "key": "module_finding|koperateur.com|dns:caa_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "820d2fb94fba4993a1d0754b86636d79ff7fc25408b3c494f66d46e3de7d00c4", "key": "module_finding|koperateur.com|dns:dns_single_provider", "status": "stable", "direction": "neutral", "before": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "low" }, "after": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "low" }, "volatile_filtered": false }, { "id": "eedfcbca2a495221b84b0031c0f2e0299509a11e1c4e17cbf3ef60d91690a80e", "key": "module_finding|koperateur.com|dns:dnssec_not_tested", "status": "modified", "direction": "indeterminate", "before": { "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "volatile_filtered": false }, { "id": "6fb6f02ea3b0422944ecfd877498c5768a8677c8da816131b2c0810501d2b1bf", "key": "module_finding|koperateur.com|mail_trust:mail_mta_sts_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "d6ff407bce9ec3e59574310f34bacabdfd3b8ea59b15a81643d467fe30517715", "key": "module_finding|koperateur.com|mail_trust:mail_tls_rpt_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "519aa5e28ea11b74687c40ca80848a83559b9451ba946600238fdd0adb9754e5", "key": "module_finding|koperateur.com|resilience:dns_concentration", "status": "stable", "direction": "neutral", "before": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "medium" }, "after": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "medium" }, "volatile_filtered": false }, { "id": "d9d11a2e8550facc904c00b909f030cb21a5591c78b931114f5f495fde9aa99d", "key": "module_finding|koperateur.com|sovereignty:jurisdiction_unknown", "status": "stable", "direction": "neutral", "before": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "after": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "volatile_filtered": false }, { "id": "d7dd0b628e5b6252c3377e49bbf1b58ee44dcc3222ef2604c3226f272c76b003", "key": "module_finding|koperateur.com|sovereignty:outside_europe", "status": "stable", "direction": "neutral", "before": { "evidence": [ "Cloudflare" ], "severity": "high" }, "after": { "evidence": [ "Cloudflare" ], "severity": "high" }, "volatile_filtered": false }, { "id": "2717f41f86953a1f24e31a2423464cfd1903196fff294c5020347ccfc46ddb71", "key": "openpgp_discovery|koperateur.com|openpgp", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://koperateur.com/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "volatile_filtered": false }, { "id": "488b4b9dfca774aaabe70dcc53d135c45e49dd31ca7811e03ccf5684c925b1b8", "key": "post_quantum_tls|koperateur.com|post_quantum_tls", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "volatile_filtered": false }, { "id": "8da43a0828af0f97d7d9bac9771eca424e2234dcb63362f46d506d404fc82239", "key": "spf_policy|koperateur.com|spf_policy", "status": "stable", "direction": "neutral", "before": "softfail", "after": "softfail", "volatile_filtered": false }, { "id": "3531f7b65974eccbe8de4e4b767df8fd57ee05f2826988d898cee58860211536", "key": "spf_record|koperateur.com|publishes_spf", "status": "stable", "direction": "neutral", "before": "v=spf1 include:_spf.protonmail.ch ~all", "after": "v=spf1 include:_spf.protonmail.ch ~all", "volatile_filtered": false }, { "id": "bcd89935ea1470d6da6dd1ae7cbb45b010016e4875faa893f16952897a869634", "key": "technology|koperateur.com|uses_technology|baa3d3acb71f45d9309e25bd1a03c76acd50402c63774ab2d39cb712d439988f", "status": "stable", "direction": "neutral", "before": { "name": "cloudflare", "version": "", "version_exposed": false }, "after": { "name": "cloudflare", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "74a62f4b80e31bdd6a9f20a72ee1a1f3d5870d5f027ba62b06119a122e7bc4cc", "key": "tls_issuer|koperateur.com|issuer", "status": "stable", "direction": "neutral", "before": "C = US, O = Let's Encrypt, CN = YE2", "after": "C = US, O = Let's Encrypt, CN = YE2", "volatile_filtered": false }, { "id": "a4d7091e44cd4601acf4a9c6defd32335807c68065f5141d63d03ab1cbe1bf22", "key": "tls_valid_to|koperateur.com|valid_to", "status": "stable", "direction": "neutral", "before": "2026-11-14T18:09:19+00:00", "after": "2026-11-14T18:09:19+00:00", "volatile_filtered": false }, { "id": "7d116e678f684e44f0479296f949efe96a4d7382197180d80a19aeeaad6be063", "key": "scope:coverage", "status": "stable", "direction": "neutral", "before": "full", "after": "full", "volatile_filtered": false } ], "knowledge": { "claims": [ { "id": "0288934bf54857db8d4fb2ab594ce2a1cab424dc6972ea1d07b3d13ad066be11", "subject": "koperateur.com", "predicate": "dmarc_policy", "value": "quarantine", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "219faf6dae8e45991c66ebc316dc06b8927881e41529d69ba5aff923d3a11a58", "subject": "koperateur.com", "predicate": "tls_issuer", "value": "C = US, O = Let's Encrypt, CN = YE2", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "37682b7bb25f106527a3ca231c5af3b3e64b7f936aa8b7b05c9654217c3fce9e", "subject": "koperateur.com", "predicate": "depends_on_provider", "value": "Cloudflare", "state": "corroborated", "rationale": "independent_provider_evidence_converges", "evidence_ids": [ "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "3b0080ad2e9a65618112ad046c4b3edc8b9347285ef3e35fa9dc22947305a8ea", "subject": "koperateur.com", "predicate": "canary_detection", "value": true, "state": "observed", "rationale": "known_passive_signature_observed", "evidence_ids": [ "7aefb826f913805662417733929676617be9a330cdc93d135aa3a94601c25256" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "4c11046ce67cfb758aaf0d32bce513f9a071ddd80fc0f35dcb7c0ee0234a2b78", "subject": "koperateur.com", "predicate": "depends_on_provider", "value": "mailsec.protonmail.ch", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "4f8ab20e725346aa62460fc385616d48d291b3d201f38419200373aace04da43", "subject": "koperateur.com", "predicate": "openpgp", "value": null, "state": "observed", "rationale": "security_txt_encryption_observed", "evidence_ids": [ "bae5f40e3785e8191fd4a0a40ab1b4a8893ce08cb423b8915e1c1f3fc3eaf556" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "573ed9f25ea9e49356e67572a0b390ede1a60a34d67d57941f2408e08f9beb2e", "subject": "koperateur.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf", "subject": "koperateur.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "9b12f4ce9965092ad7e5019cd689d7c6cdc993b266a85e6a387d9ca9e0ca7163", "subject": "koperateur.com", "predicate": "depends_on_provider", "value": "mail.protonmail.ch", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "a578071a0dee2865b7600d44c6738dc477b367d0d801292fbb88ff5e3b3d369d", "subject": "koperateur.com", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "73f0532b06d2cbae42cac314e0629487b00251089cce16781a19e770f4877726" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "bf75249d62b111805545da810cadc7a0ba34d478b9dbb073247de28710cb2d44", "subject": "koperateur.com", "predicate": "spf_policy", "value": "softfail", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true } ], "relations": [ { "id": "1e82e2cacd3addc36c7f53938564db48b0bb8de0165b60a8eac4afaa85fc51a8", "subject": "koperateur.com", "predicate": "resolves_to", "object": "2606:4700:3031::ac43:b6c0", "state": "observed", "evidence_ids": [ "4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "571a9d4177d8697a141c9af44706385652227a15e0dfb57b0ea27e8c8921fa81", "subject": "koperateur.com", "predicate": "uses_technology", "object": "cloudflare", "state": "observed", "evidence_ids": [ "30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "62670bba1f22f714872ccf1d40b3632626d76d2dee6cd47fa65c253cc24c8037", "subject": "koperateur.com", "predicate": "depends_on_provider", "object": "Cloudflare", "state": "corroborated", "evidence_ids": [ "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "6ccf6d906f25cab547f4539a129c02b05800e1e1b9900ceca9b6c39d9bacddb7", "subject": "koperateur.com", "predicate": "uses_mail_exchanger", "object": "mail.protonmail.ch", "state": "observed", "evidence_ids": [ "47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "9d6f41a09b9baaab212ffce6d4760a1b3b15beede07b778c16a7e563a5fc3517", "subject": "koperateur.com", "predicate": "uses_mail_exchanger", "object": "mailsec.protonmail.ch", "state": "observed", "evidence_ids": [ "586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "a4ec0648a88f33e6131d4d12578007b368c81b032d74a163bd52624a93cedeb6", "subject": "koperateur.com", "predicate": "depends_on_provider", "object": "mail.protonmail.ch", "state": "observed", "evidence_ids": [ "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "bdbee3762d72fd041bffb1a068b20359312dde434c848bdd71468c3b3fa714ff", "subject": "koperateur.com", "predicate": "depends_on_provider", "object": "mailsec.protonmail.ch", "state": "observed", "evidence_ids": [ "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "beec5199a3bb51bc124c28bd9128b9fd8a2351e99f2c4b8807e13c675978fb85", "subject": "koperateur.com", "predicate": "uses_nameserver", "object": "david.ns.cloudflare.com", "state": "observed", "evidence_ids": [ "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "c0545d3f2aaead8c12014b632ccd8ed21ee66f4f45c5a368590c30dc62445273", "subject": "koperateur.com", "predicate": "uses_nameserver", "object": "thea.ns.cloudflare.com", "state": "observed", "evidence_ids": [ "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "c1a9a7aebf2030cc8ace0ca3d1be52ba14b41c5d6f80042a647212b0acd2d51c", "subject": "koperateur.com", "predicate": "resolves_to", "object": "172.67.182.192", "state": "observed", "evidence_ids": [ "20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "cdaf2a173c68e8e867f4f7ed67c58dd936c80b2c3375154f866064f105a91757", "subject": "koperateur.com", "predicate": "resolves_to", "object": "2606:4700:3032::6815:12a6", "state": "observed", "evidence_ids": [ "601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "d7b11a5ec7e504dff62b6bf9a9a3e7f2cb0ab869a421706853acdafd9ed473c0", "subject": "koperateur.com", "predicate": "resolves_to", "object": "104.21.18.166", "state": "observed", "evidence_ids": [ "807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" } ], "unknowns": [ { "id": "573ed9f25ea9e49356e67572a0b390ede1a60a34d67d57941f2408e08f9beb2e", "subject": "koperateur.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf", "subject": "koperateur.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true } ], "evidence": [ { "id": "9e522881db02d698a81feca18e41ef7f5f10553fcd84ac006825b66d47bb487d", "observation_ids": [ "0aaeeb34a50afb0337978f150e81b4a3a5c794259604e062f5a66a3640f6703c" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "DENY" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "e96a5f0706b6aa901fb6e64e944d8f4977fa9563f2ac16536a58d8e10f216593", "observation_ids": [ "12122f28da50bca98b94c0a968c45b9f9cf2d1a68eb13387b650dfcb80596519" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "e2e3d580bb168e0a5d1adeda32b5076552f09ad33858fdcaf9a88d90cf284115", "observation_ids": [ "147cec655efe8198783c12f714c8db635fba34c2d09231fb1a194329b73cd33e" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "e88b9310b49920cba6ec60661d60eaab0d9f6dd8446ab425d67fecb59a9c98ca", "observation_ids": [ "153959bb8517f4787abd9a97d44759adeec1183ea2aa5524b61768edb4691e5b" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "cloudflare" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "b8b5109292dc28ce2c567ea28d41fa28744bfb3df13d2431f632f1a8bd571295", "observation_ids": [ "1c4dcd8d4ed826aa68868c0ade1cbc69057f48b08498859f98c8b599590fad55" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161", "observation_ids": [ "23d0240ab2f025523b620c19cafc959e28d45f398420febf36f9a04ca018b930" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "mail.protonmail.ch" ], "id": "host-d87c7268dbc2", "known": false, "name": "mail.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "fa4ba54f253ce0c8b0d41a4646e96707f171d3eb93807f73442b074098a9075d", "observation_ids": [ "26adaa68ad9bdd57270ff7da4294f50eed8a86f07fc89b7094817d79c9130ef3" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3", "observation_ids": [ "2cd8527f1c7ee423f3400700e87f89b8b0175740c8e105f52ce1217121500ff7" ], "evidence_type": "dmarc_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "quarantine", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "47931ebf44efdadbd76a3e50c2cd7cc5d1eca481fd4daced04363885fb6f9fdf", "observation_ids": [ "2f4fd943c7dedd4060f7c342d8fc0c42a388ac891ae388c4b6094e267d40250a" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "73f0532b06d2cbae42cac314e0629487b00251089cce16781a19e770f4877726", "observation_ids": [ "31c22f6eac96436d54418696b2560c103a62ea2c72a71ae0f98bc69386586cce" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "9e696184e69f243b0530c8cda73b5248f862c2642d023a90cc51a59621bb43cf", "observation_ids": [ "3288678d34277d0cf973d1633d62ff9a6b376fd3143407637df4f9aa02d9084a" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2026-11-14T18:09:19+00:00", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "27cbed45c14fd53f5408cd5eab1cf8eb2e8e8e9cf4d2c60188e17924dc8c7b03", "observation_ids": [ "39dbdcc3224852ad36e966c247c26de86a4a5ae32b24b795c62f17d26382f631" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "observation_ids": [ "3b0064d4294ebb03ac9e7281c1605f23fd919d52caca39cbc5c45d2b856311df" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": true, "hosts": [ "cloudflare.com", "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46", "observation_ids": [ "3e6687ef1582879be16cc6981d6a93f7a40d8892e985e75fad91d0c83abd1d7c" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "172.67.182.192", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "f8ee1ee15b6a6d63c30edd1c010f032b335573d749b9a96a984b06a3047ad101", "observation_ids": [ "3fbedc4f52fe0fff38fcef25ed37b9df39be1d6ea73ce983884e2ef7a3230d09" ], "evidence_type": "dmarc_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=DMARC1; p=quarantine", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "bed6ce4662d60187ce4d027423d7d4841dc87ed606920fc795a8f6ded1cb8633", "observation_ids": [ "4198be99a22412819d63f1db861078e3cb51025634712068c54ef2794e8a8bf4" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb", "observation_ids": [ "45a2fff912dc3e36ddf5fa5ad0993492212cc538f19130ee50b2bf5266cb57af" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2606:4700:3032::6815:12a6", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "180db483b973a3d95ba0f441c66d3e66ebde4336b9f7a55953a7c79746eb4ccd", "observation_ids": [ "4a56fa08f54258c292f83b3c71e7d5ea68435a144189ebd5bb7f217edcfab917" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "be11843b5f75867a76573afb80f207f7e5ce864fd841bb3f1dc049db70c6db65", "observation_ids": [ "5314bf6fe1b9e2c4f81fe81b4f48aff3aacadf166bc87e7b9491bfff629db293" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "nosniff" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583", "observation_ids": [ "62d07c27fd88e1c4e5e9ff418aa31c4f2449c7ea5d8af0da8de6bbefb21284ae" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "104.21.18.166", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "c0ce6bc3d8a83f2280fcfdcbaec9a1795da3f57e5db1e44c5dfb0dd15f66b3a3", "observation_ids": [ "65460c3298211277c41cf40a522249a1b521d72fa4a9fbfda820824cee47e213" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508", "observation_ids": [ "7379d30e396b53cd6b432240b7f216d43e356f3fe851319869c384977256c934" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "cloudflare", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "observation_ids": [ "73e18ac556ef9cebd5dc19cad1eccc2927952716464b8529bbadda252106a554" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "thea.ns.cloudflare.com", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "6ec3200db21f245623cfbb911d69707f72435d417c3eca1c354225efbdc3247e", "observation_ids": [ "74b317134bb05e2b631f8f80ba18762a8f39c68ca39671638e5da62474336991" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "strict-origin-when-cross-origin" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74", "observation_ids": [ "7667709d5acd0aaeb928a7b9efb17dd871c832715fbb4fecd221d85b65ccf7b8" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2606:4700:3031::ac43:b6c0", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "11bfb3e74a62ef368ad26a89eb7ea3540e5d0a67f8f341ed996e3dbd58f751a2", "observation_ids": [ "7ad34b6dc95a3dd4ad536df97358b3970426d5053a86de5f56f29a7fe93f6d84" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=63072000; includeSubDomains; preload" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "56ef91218f9301d9daea6f4cc3a197d8176fc1acf12ee30cf118c05c75142310", "observation_ids": [ "888e3b22ce835091be2cdc7e1eeefe8fdcaa73253c8c6db0a5ef65e959c844b1" ], "evidence_type": "spf_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=spf1 include:_spf.protonmail.ch ~all", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "e43d9458950959cbd9bf0cdec69c675b3e5267fada052531b1669926de849dbf", "observation_ids": [ "8fddb7d2d3b22b811d765804c8c0ac7005368993d4f3fc1e7bc542c7557511db" ], "evidence_type": "module_finding", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "mail.protonmail.ch", "mailsec.protonmail.ch" ], "severity": "medium" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "403effa25117bbf727157ce0e040e0ce407bad47413eadf91e3104e31ce79218", "observation_ids": [ "95f70befa1d71ebcf6da6116178f8ee3bbcf5f13a67baab848dd129809dfccc0" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "default-src 'none'; script-src 'nonce-E8WKylNukqUORnegKfIbKQ==' 'strict-dynamic'; style-src 'self' 'nonce-E8WKylNukqUORnegKfIbKQ=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "4ac2335f6f0140d4ba2c2764678bf6d7aab2aea4bd32842fda118fcab90b4c53", "observation_ids": [ "973030585e95ee113159492205fa962c124149682a5e5ee15e25981ded21d8f2" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "require-corp" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "e529b11141a57da498701c2ae23a1b7335b2ee8846cdabb03e9e360c6ce57f09", "observation_ids": [ "9a5d77c9478462279ba8106328aec7a2f6c4e8aed1b92f02261406462df3a00b" ], "evidence_type": "cookie", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": { "http_only": true, "name": "kop_lang", "same_site": "strict", "secure": true }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4", "observation_ids": [ "a4dfb5f1e56ede6310d5221839f026cb442fab9bc8562f468c03aef223894ccc" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mailsec.protonmail.ch", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "7aefb826f913805662417733929676617be9a330cdc93d135aa3a94601c25256", "observation_ids": [ "a5c7e7552c423b374ec508f343b62b4ee7d2ea351d2154a458faeadef135120d" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "bae5f40e3785e8191fd4a0a40ab1b4a8893ce08cb423b8915e1c1f3fc3eaf556", "observation_ids": [ "b45dbfbdb41dabf8ce86f2121c91be00c8774c07afc2985de3f3c2abd1f5011f" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://koperateur.com/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "9846a919ebe56476ee6a67844a56486f2d3de8cc3a25b7cb3d812fbea497de5a", "observation_ids": [ "bc3e9c26724c08a7280d88371e163cee489184e5d58c646ab217ced74f56e392" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166", "observation_ids": [ "beb2be6aded1248d95cead6b502a950e79ed3b1ec23105bec8e8a4a4eb8929fb" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = US, O = Let's Encrypt, CN = YE2", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "90210d8dc4e84b0eef6614179f1493f3ba80d0293e87a2975267c0d40dbc1152", "observation_ids": [ "c40acf1b1b2a81da77ff2ae215fb0c61783b0178af7ba2dd84262f8b8a57a15c" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "2eee442974fd20f86510dfe3b97b543650318e967e3998e0c3d5e3dbb78f4799", "observation_ids": [ "c82ed014f4a15c9a3082b877cfb9963b11c383d4adaf0fdfa543820582a3f486" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "101442bcbb655db69755c542ecd1d9f2a5615c5f5648ca6062af8e0c3bc9a27f", "observation_ids": [ "c8bc92a8d560b04b9be4be8009fc1ecdf5eb08869269ea805f3457633e9187cd" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "medium" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40", "observation_ids": [ "d376ffa507c24143874dfe818ed66ddbfa5c6a74f283bc77164ec4fdacdd01f7" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "mailsec.protonmail.ch" ], "id": "host-795bfed2e90f", "known": false, "name": "mailsec.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "40e2b31190343f4f5dc87b37de24d8f198fa2722b212ceef93fd5eba590abe39", "observation_ids": [ "d5620dcac876aa1874eaa9331665058e8f11598f693280b50b44b195ec0ace60" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d", "observation_ids": [ "dacdfe0977167e70f3a96c694c9844d23366765862a70a672c3b1576d4cd6603" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "softfail", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f", "observation_ids": [ "dadeca8c6bc1ea9d7618bfe70b9fbc96764c4dd7d79185d7ae4f07b9712b264b" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mail.protonmail.ch", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "0c5dc11a182892af697bdf0ed6ed8d615ac52c424a30c78638b9a5de1d28d832", "observation_ids": [ "e27f49918cc375af20096928e62c0faa63f78c4b6139633bafa642d7c4b580de" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "Cloudflare" ], "severity": "high" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "864c5a1c7cd3c379c20194695a937b5d758013649a650b9099bfa2e7c018ad26", "observation_ids": [ "e7852629fc87307c18a1ded64dea314b571b80196b10b81399cb187e8c31664c" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "low" }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f", "observation_ids": [ "ef92d3136c728887e25dd8dd66cb63b313548943d4ad4ccfd80875197896b524" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "david.ns.cloudflare.com", "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "bc5faf07a779f8c95aa77b358216440fb8ec7877c98ace907eb92ff183505957", "observation_ids": [ "f58390c2198d0e2646a2aab0eb2e6d5783acf8cddcf46ffdc5d5ec47147ca341" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-16T18:09:20+00:00", "valid_to": "2026-11-14T18:09:19+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.18.166", "172.67.182.192" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3031::ac43:b6c0", "2606:4700:3032::6815:12a6" ], "state": "observed" } }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" }, { "id": "86bb0fc12e54c5454026b2729cbb58a5a3ff321fed20ad1770fe57db2d7d8261", "observation_ids": [ "ffb6db10f88d920e6bbceeb835dead604a7e32ea3aa6804f58ca1d27a598247b" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00" } ] }, "dossier": { "executive_summary": [ "8 observations publiques sont documentées dans ce dossier.", "3 dépendances publiques structurantes sont visibles.", "8 évolutions utiles sont retenues depuis la lecture précédente.", "2 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 8, "deduced": 0, "to_confirm": 0, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "37682b7bb25f106527a3ca231c5af3b3e64b7f936aa8b7b05c9654217c3fce9e", "title": "Depends on provider", "value": "Cloudflare", "state": "observed", "state_label": "Observé", "evidence_ids": [ "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f" ], "rationale": "independent_provider_evidence_converges" }, { "id": "3b0080ad2e9a65618112ad046c4b3edc8b9347285ef3e35fa9dc22947305a8ea", "title": "Canary detection", "value": true, "state": "observed", "state_label": "Observé", "evidence_ids": [ "7aefb826f913805662417733929676617be9a330cdc93d135aa3a94601c25256" ], "rationale": "known_passive_signature_observed" }, { "id": "4f8ab20e725346aa62460fc385616d48d291b3d201f38419200373aace04da43", "title": "Openpgp", "value": null, "state": "observed", "state_label": "Observé", "evidence_ids": [ "bae5f40e3785e8191fd4a0a40ab1b4a8893ce08cb423b8915e1c1f3fc3eaf556" ], "rationale": "security_txt_encryption_observed" } ], "states": { "observed": 3, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "219faf6dae8e45991c66ebc316dc06b8927881e41529d69ba5aff923d3a11a58", "title": "Tls issuer", "value": "C = US, O = Let's Encrypt, CN = YE2", "state": "observed", "state_label": "Observé", "evidence_ids": [ "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166" ], "rationale": "certificate_observed" }, { "id": "a578071a0dee2865b7600d44c6738dc477b367d0d801292fbb88ff5e3b3d369d", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "73f0532b06d2cbae42cac314e0629487b00251089cce16781a19e770f4877726" ], "rationale": "client_capability_unavailable" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "0288934bf54857db8d4fb2ab594ce2a1cab424dc6972ea1d07b3d13ad066be11", "title": "Dmarc policy", "value": "quarantine", "state": "observed", "state_label": "Observé", "evidence_ids": [ "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3" ], "rationale": "mail_policy_observed" }, { "id": "bf75249d62b111805545da810cadc7a0ba34d478b9dbb073247de28710cb2d44", "title": "Spf policy", "value": "softfail", "state": "observed", "state_label": "Observé", "evidence_ids": [ "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 2, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "4c11046ce67cfb758aaf0d32bce513f9a071ddd80fc0f35dcb7c0ee0234a2b78", "title": "Depends on provider", "value": "mailsec.protonmail.ch", "state": "observed", "state_label": "Observé", "evidence_ids": [ "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40" ], "rationale": "provider_observed_once" }, { "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" }, { "id": "9b12f4ce9965092ad7e5019cd689d7c6cdc993b266a85e6a387d9ca9e0ca7163", "title": "Depends on provider", "value": "mail.protonmail.ch", "state": "observed", "state_label": "Observé", "evidence_ids": [ "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161" ], "rationale": "provider_observed_once" } ], "states": { "observed": 2, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "structuring_dependencies": [ { "label": "Cloudflare", "state": "observed", "evidence_ids": [ "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac", "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979", "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f" ] }, { "label": "mail.protonmail.ch", "state": "observed", "evidence_ids": [ "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161" ] }, { "label": "mailsec.protonmail.ch", "state": "observed", "evidence_ids": [ "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40" ] } ], "open_questions": [ { "id": "573ed9f25ea9e49356e67572a0b390ede1a60a34d67d57941f2408e08f9beb2e", "subject": "koperateur.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true }, { "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf", "subject": "koperateur.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-04T23:48:56+00:00", "last_seen_at": "2026-09-04T23:48:56+00:00", "active": true } ], "evidence_count": 48, "meaningful_change_count": 8 }, "timeline": { "first_observed_at": "2026-09-04T19:29:35+00:00", "last_observed_at": "2026-09-20T19:12:46+00:00", "reference_state": "compared", "message": "Comparé à la lecture précédente conservée", "counts": { "appeared": 7, "modified": 1, "stable": 41, "disappeared": 0 }, "changes": [ { "status": "appeared", "label": "Nouveau", "title": "Canary signal", "before": null, "after": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Csp evidence", "before": null, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Dnssec evidence", "before": null, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Mail transport evidence", "before": null, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Modern transport evidence", "before": null, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-16T18:09:20+00:00", "valid_to": "2026-11-14T18:09:19+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.18.166", "172.67.182.192" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3031::ac43:b6c0", "2606:4700:3032::6815:12a6" ], "state": "observed" } }, "direction": "indeterminate" }, { "status": "modified", "label": "Modifié", "title": "Module finding", "before": { "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Openpgp discovery", "before": null, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://koperateur.com/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Post quantum tls", "before": null, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "direction": "indeterminate" } ], "history_count": 3 }, "methodology": { "version": "2.3.1", "model": "evidence_first", "principles": [ "absence_of_evidence_is_not_evidence_of_absence", "unknown_remains_unknown", "provider_metadata_is_not_data_location", "edge_provider_is_not_origin_host", "single_snapshot_does_not_prove_resilience" ] } }