{ "export_type": "scanapse_domain_dossier", "schema_version": "1.0", "domain": "quaric.org", "measured_at": "2026-09-06T01:58:58+00:00", "engine_version": "2.9.2.1", "pattern_version": "2026.09.4", "summary": [ "11 observations publiques sont documentées dans ce dossier.", "6 dépendances publiques structurantes sont visibles.", "8 évolutions utiles sont retenues depuis la lecture précédente.", "2 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 11, "deduced": 0, "to_confirm": 0, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "258a384a9da28c183a8513d9a8c15ce093bd8c92bfa2733b5583ba642713bf2f", "title": "Openpgp", "value": null, "state": "observed", "state_label": "Observé", "evidence_ids": [ "539ee11c3d73fac8d1dac4ec3ff523941bacd1663f4fe3338ff1ebf25ac7e3a7" ], "rationale": "security_txt_encryption_observed" }, { "id": "32a40c71f7deadcf580ba5138958ac2a214e0e77a9173fc76a30242ddd423bbb", "title": "Canary detection", "value": true, "state": "observed", "state_label": "Observé", "evidence_ids": [ "5ac9af3008aee7252e368d0c98c75d147994b95f72a2834a8f6995a3a75bf4b5" ], "rationale": "known_passive_signature_observed" }, { "id": "dacb4424fb9f45b5d89b3d3c59cc8fb9368e0ccff0a49b6c2c49394d3da659f8", "title": "Depends on provider", "value": "Cloudflare", "state": "observed", "state_label": "Observé", "evidence_ids": [ "a5bdaaf48de917917156556752d718fa8141901d5e660d6a51b329302d7d9514", "ed74f622d6628b99a7138dc5c46b8dbe2382e2b56b8398ab08f41ad414de45b4", "e19e0b0f292f89d76219cd917109394b962a6c08ae17d44dd2d7182fe44af5c6" ], "rationale": "independent_provider_evidence_converges" } ], "states": { "observed": 3, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "742ff9f5d8be27b086cf5521ab6f82e5e1bda9195e32a63cdbba42352da1fe87", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "3afbc94d7e529655954931d6f8a5a21e786112d83efa469737b8b3a851e42ab2" ], "rationale": "client_capability_unavailable" }, { "id": "b959bc38770c7422f6f32080ebb36fbdb64d3c725d27b7649f780f2b31620329", "title": "Tls issuer", "value": "C = US, O = Let's Encrypt, CN = YE2", "state": "observed", "state_label": "Observé", "evidence_ids": [ "e8001318f27a4be64973a88bc3cf352a8c486ea85b60e3976f23134dcc133c01" ], "rationale": "certificate_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "0d1bf13ea45e9c0b51245509ef5bd46e8e4bf1cd6b68b364bc2c342f6b9a7b84", "title": "Dmarc policy", "value": "quarantine", "state": "observed", "state_label": "Observé", "evidence_ids": [ "1f1d5c7f2f6110162452da2a2292b2da2428763a5f1bffb2518d7c18d21d494a" ], "rationale": "mail_policy_observed" }, { "id": "64e913f481d941c460ab958e94850b0d823b09f019b79317441bdc9f0c83fb5a", "title": "Spf policy", "value": "softfail", "state": "observed", "state_label": "Observé", "evidence_ids": [ "bd029a386f383e52be11ddaeaf2aa847bad313d1ef958e512bca1c8f46b2807b" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 2, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "80d89bde873919ceb775f62fe45e2fdb3b4c2cd652ebae87ee7359b2d02b8e83", "title": "Depends on provider", "value": "mail.protonmail.ch", "state": "observed", "state_label": "Observé", "evidence_ids": [ "2410eac1dc42672e786b1f86e4e941fd17aa103910a23b126bcd4fefe61ea17b" ], "rationale": "provider_observed_once" }, { "id": "842adef22d7933f32b59103fe48d5d2930b5dae2ff5a8a66d7491519a15fcd73", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" }, { "id": "8479d821d4072f50da2e09372d73af8f8df6a75947e82a8db5346cab959185da", "title": "Depends on provider", "value": "mailsec.protonmail.ch", "state": "observed", "state_label": "Observé", "evidence_ids": [ "a0d27d77cdcaea0adfaf0c4afb3eb05d65e3cc4a1f56e4cee620e2f412322755" ], "rationale": "provider_observed_once" } ], "states": { "observed": 5, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "timeline": { "first_observed_at": "2026-09-04T19:30:36+00:00", "last_observed_at": "2026-09-06T01:58:58+00:00", "reference_state": "compared", "message": "Comparé à la lecture précédente conservée", "counts": { "appeared": 7, "modified": 1, "stable": 45, "disappeared": 0 }, "meaningful_change_count": 8, "change_summary": { "appeared": 7, "modified": 1, "disappeared": 0, "stable": 45, "meaningful": 8, "volatile_filtered": 1, "unresolved": 0 }, "changes": [ { "status": "appeared", "label": "Nouveau", "title": "Canary signal", "before": null, "after": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Csp evidence", "before": null, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Dnssec evidence", "before": null, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Mail transport evidence", "before": null, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": { "max_age": "604800", "mode": "enforce", "mx": [ "*.protonmail.ch", "mail.protonmail.ch", "mailsec.protonmail.ch" ], "version": "STSv1" }, "policy_state": "observed", "records": [ "v=STSv1; id=202605032030" ], "state": "observed" }, "tls_rpt": { "records": [ "v=TLSRPTv1; rua=mailto:dpo@quaric.org" ], "state": "observed" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Modern transport evidence", "before": null, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-22T02:33:06+00:00", "valid_to": "2026-10-20T02:33:05+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.6.240", "172.67.135.121" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3032::6815:6f0", "2606:4700:3037::ac43:8779" ], "state": "observed" } }, "direction": "indeterminate" }, { "status": "modified", "label": "Modifié", "title": "Module finding", "before": { "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Openpgp discovery", "before": null, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://quaric.org/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Post quantum tls", "before": null, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "direction": "indeterminate" } ], "history_count": 2 }, "observations": [ { "id": "0113e7e91245a1dffc7eca1ac4ad8ca9b3009fa71f6967ae1826e02a76699c11", "type": "http_header", "subject": "quaric.org", "predicate": "server", "value": [ "cloudflare" ], "source": "header_server", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "02bf78f5c750b3df89299513fed622d4fa9561e7fd3dd2af824f121f4ce5ccd6", "type": "dnssec_evidence", "subject": "quaric.org", "predicate": "dnssec_depth", "value": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "source": "advanced_dnssec", "collector": "dnssec_depth", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "0398f1b20ab69f4efba6c03b63839c42476284cbfd78586379b667607c6abe94", "type": "http_header", "subject": "quaric.org", "predicate": "content-security-policy", "value": [ "default-src 'none'; script-src 'nonce-afVEBRXaqO8OXpNrYccORg==' 'strict-dynamic'; style-src 'self' 'nonce-afVEBRXaqO8OXpNrYccORg=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'" ], "source": "header_content-security-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "05ef64b9456272c7335a5aae2b8aff359bfeec651ccb3fbf2f0c5fb0c846f682", "type": "dns_nameserver", "subject": "quaric.org", "predicate": "uses_nameserver", "value": "lochlan.ns.cloudflare.com", "source": "dns_ns", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "05f5df4ea158fb879628b56217dcd33b163b4adae79d329f7b6b7b4e4bbbe388", "type": "technology", "subject": "quaric.org", "predicate": "uses_technology", "value": { "name": "cloudflare", "version": "", "version_exposed": false }, "source": "technology_detected", "collector": "technology", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "0e4349376400177a6119b9470b102f2a5f22c55582aedd48920344f28df34f2a", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issuewild", "value": "pki.goog; cansignhttpexchanges=yes" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "1fb3bae9e7f32c7940d12ed0b3ca2c8a1173a3c2ba18ce0aafbfe5ccf02f8185", "type": "modern_transport_evidence", "subject": "quaric.org", "predicate": "modern_transport", "value": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-22T02:33:06+00:00", "valid_to": "2026-10-20T02:33:05+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.6.240", "172.67.135.121" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3032::6815:6f0", "2606:4700:3037::ac43:8779" ], "state": "observed" } }, "source": "advanced_modern_transport", "collector": "modern_transport", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "269a793af2d83297564b8251b8ffddde1f01e4ea6590624a69e3bc5b5d3c7fcb", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issuewild", "value": "digicert.com; cansignhttpexchanges=yes" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "29d8c4444b6cb2767848bca5997f16127f32f10fd7db89fae8d51ab4f4b0dd3e", "type": "dmarc_policy", "subject": "quaric.org", "predicate": "dmarc_policy", "value": "quarantine", "source": "mail_dmarc_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "29dc836ef8e4842c284de7baab9493c308798e8f8fe00e828afbc3078f9e9cfa", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issuewild", "value": "ssl.com" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "2a03cd3a21b438d9825a603f05963b010225f3d11706158899777d9ef7a30304", "type": "dns_address", "subject": "quaric.org", "predicate": "resolves_to", "value": "2606:4700:3032::6815:6f0", "source": "dns_aaaa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "2d5b0e678f3ddd6689e9722ec057ccba158fe1adc931ead8d26b62a2c7a13062", "type": "dns_nameserver", "subject": "quaric.org", "predicate": "uses_nameserver", "value": "kinsley.ns.cloudflare.com", "source": "dns_ns", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "360b2c1b65a40e3f030bbaf7e84a30b6e10c7a872ddd9bed345adb0dfc71b168", "type": "http_header", "subject": "quaric.org", "predicate": "strict-transport-security", "value": [ "max-age=63072000; includeSubDomains; preload" ], "source": "header_strict-transport-security", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "3d1156f64c991a2e901f60728bfc2fdfa76a13bd1a26ff93a9685d7b4dac03f1", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issuewild", "value": "comodoca.com" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "457d2054006d494deb9456395a63e85f3d7ca7f5b250c8ddfb1f1b14cdb0f141", "type": "mail_policy_flag", "subject": "quaric.org", "predicate": "bimi_declared", "value": false, "source": "mail_bimi_declared", "collector": "mail_trust", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "4623313c6b63f64012aa38b7b895f0bd056f2b820f3cefb46026ec5ed5737cbc", "type": "http_header", "subject": "quaric.org", "predicate": "cross-origin-embedder-policy", "value": [ "require-corp" ], "source": "header_cross-origin-embedder-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "50bbbf2c1aed922eb3e9b3e8763dee6757bffc8e04c3cb49171297616a526ec9", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "iodef", "value": "mailto:security@quaric.org" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "510cbd202e2edcf58057ed687492a9c13b8b57cbdce54f2ca6469227ae52ac7f", "type": "post_quantum_tls", "subject": "quaric.org", "predicate": "post_quantum_tls", "value": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "source": "advanced_post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "607a7e448e33938708660b126cb7a928cff595773f288800291c13bf3ae4ce8d", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": false, "hosts": [ "mail.protonmail.ch" ], "id": "host-d87c7268dbc2", "known": false, "name": "mail.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "6208b2d49270cc2a24d791bea48a8a836416c02c920cbe0d6bcbe00f74113d67", "type": "csp_evidence", "subject": "quaric.org", "predicate": "csp_depth", "value": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "source": "advanced_csp", "collector": "csp_depth", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "64f220721d4e5ded019bd95eadd0bda2c185e05a665665c31ef3bfef64f125f1", "type": "openpgp_discovery", "subject": "quaric.org", "predicate": "openpgp", "value": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://quaric.org/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "source": "advanced_openpgp", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "66858d13cb601a3667c73f103f1e8470c571504946b7738779bfc7e31061c14c", "type": "http_header", "subject": "quaric.org", "predicate": "cross-origin-opener-policy", "value": [ "same-origin" ], "source": "header_cross-origin-opener-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "673f09429105ccd7cd889953d5136977c5c33fcb318b0d176772e3b2f8700140", "type": "http_header", "subject": "quaric.org", "predicate": "cross-origin-resource-policy", "value": [ "same-origin" ], "source": "header_cross-origin-resource-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "68a55618195059de09754f8abb3dbf7fd2b1db97d815e80fc422ae1bbfde04d6", "type": "http_header", "subject": "quaric.org", "predicate": "x-content-type-options", "value": [ "nosniff" ], "source": "header_x-content-type-options", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "6a66586bf50f65e882b461052277e6af89789574b7ee73cab01eca4d6d85170b", "type": "spf_record", "subject": "quaric.org", "predicate": "publishes_spf", "value": "v=spf1 include:_spf.protonmail.ch ~all", "source": "dns_spf", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "6df22f638e7c441fa9c9782b0aba695341f84268b50ddf03f7469c6eb24c0706", "type": "canary_signal", "subject": "quaric.org", "predicate": "canary_detection", "value": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "source": "advanced_canary", "collector": "canary_passive", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "6e1dabe2edf213c52f87d0c993e8541d0eb3d3d915cf9251f3844f69a916552e", "type": "module_finding", "subject": "quaric.org", "predicate": "dependencies:unknown_dependencies", "value": { "evidence": [ "0bla.com", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "source": "finding_unknown_dependencies", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "6ea5f0ff9c1cb0c1125615ca1114789202db75ba797f619bb2acee8a4075e510", "type": "dns_address", "subject": "quaric.org", "predicate": "resolves_to", "value": "172.67.135.121", "source": "dns_a", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "74bf0f5ef2bf2ef4d938d5585da9155d62d2ca7632f4e4bb7b08be29f7701523", "type": "module_finding", "subject": "quaric.org", "predicate": "dns:dnssec_not_tested", "value": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "source": "finding_dnssec_not_tested", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "77521bf097a804b18ad6a9ba459641074dc3b729923931ed3bea60033b6801ad", "type": "http_header", "subject": "quaric.org", "predicate": "referrer-policy", "value": [ "strict-origin-when-cross-origin" ], "source": "header_referrer-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "7a0d2e642c174a404f65db4b7803bd5e6fedcc3417d3f9ab17f45203e05b55c3", "type": "http_header", "subject": "quaric.org", "predicate": "x-frame-options", "value": [ "DENY" ], "source": "header_x-frame-options", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "7d9ee3f0f9c7c089f9d70842e8ffa380589696db690a37f0bf0ce6280784b870", "type": "tls_valid_to", "subject": "quaric.org", "predicate": "valid_to", "value": "2026-10-20T02:33:05+00:00", "source": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "878b374e08a5a3a97e86cd6a551f31ef3de7abf0fe369399260c0d2420dace17", "type": "tracker_provider", "subject": "quaric.org", "predicate": "loads_tracker", "value": "LinkedIn", "source": "privacy_tracker", "collector": "privacy", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "8e9cd26d1a82d27356df016f0baf6fcaa8de5f93da77a7aebc1f211777d25b2b", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": false, "hosts": [ "static.cloudflareinsights.com" ], "id": "host-d15afad5fd0c", "known": false, "name": "static.cloudflareinsights.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "8f43590be12eb0ef31e3601fbaf0373f817c4903ae45e9ff805d190b18dbd250", "type": "module_finding", "subject": "quaric.org", "predicate": "sovereignty:outside_europe", "value": { "evidence": [ "Cloudflare", "LinkedIn" ], "severity": "high" }, "source": "finding_outside_europe", "collector": "sovereignty", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "92155c96a9dc4ad038853746b05711b5bc6de30bf18c4193de3e4196d745cf88", "type": "cookie", "subject": "quaric.org", "predicate": "sets_cookie", "value": { "http_only": true, "name": "quaric_lang", "same_site": "strict", "secure": true }, "source": "privacy_cookie", "collector": "privacy", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "92e44c146ad703d23efb6a1cafe1bb74d0b1b98976912dccbae5e92b54ea795d", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issue", "value": "ssl.com" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "9d46c5819b86b784fc136cf291c82c4d3dbe7d52af58621914caaa7b6357ef97", "type": "mail_exchanger", "subject": "quaric.org", "predicate": "uses_mail_exchanger", "value": "mail.protonmail.ch", "source": "dns_mx", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "a2e215e28e5d95df03471a661a127c4e9700b608a46cc1a2ab767e31d6eed606", "type": "http_header", "subject": "quaric.org", "predicate": "permissions-policy", "value": [ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ], "source": "header_permissions-policy", "collector": "headers", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "a454d27e71e32240058523ff806676f6cd967389cf9842517baee92a4aa9bb78", "type": "module_finding", "subject": "quaric.org", "predicate": "resilience:dns_concentration", "value": { "evidence": [ "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "severity": "medium" }, "source": "finding_dns_concentration", "collector": "resilience", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "aa23c976ce8e25f8ca462a90d0cd84ca5ec5d7002d15fd5ae921cdfd19617ee0", "type": "spf_policy", "subject": "quaric.org", "predicate": "spf_policy", "value": "softfail", "source": "mail_spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "b2c51de059b62cbd8d72ea9c679564c53c50b4a28cc2700250734ed069d52d87", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issue", "value": "digicert.com; cansignhttpexchanges=yes" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "ba286cf7124ca22ba9299529c0e5ced1346067842852b5888a7de77ff83567b6", "type": "mail_transport_evidence", "subject": "quaric.org", "predicate": "mail_transport_depth", "value": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": { "max_age": "604800", "mode": "enforce", "mx": [ "*.protonmail.ch", "mail.protonmail.ch", "mailsec.protonmail.ch" ], "version": "STSv1" }, "policy_state": "observed", "records": [ "v=STSv1; id=202605032030" ], "state": "observed" }, "tls_rpt": { "records": [ "v=TLSRPTv1; rua=mailto:dpo@quaric.org" ], "state": "observed" } }, "source": "advanced_mail_transport", "collector": "mail_transport", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "c0644485290bcc46aa27967515cf7cb2261cc07d231ae60273c6d4548a37e30f", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": false, "hosts": [ "0bla.com" ], "id": "host-d60d939674d6", "known": false, "name": "0bla.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "c55f7bf9923aeb1711002e139eb13c8f0fb464a8ac179a2933129883dc79688e", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issuewild", "value": "letsencrypt.org" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "cbf91806041f41848a6edc7da2ce03df566e79f6bea7d0ce304faf6ce4b9390a", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issue", "value": "comodoca.com" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "ce7de0433209126722e8e43be2cc7af2529e26b2afe84f75e1c3e883ad696ebe", "type": "dmarc_record", "subject": "quaric.org", "predicate": "publishes_dmarc", "value": "v=DMARC1; p=quarantine; sp=quarantine; adkim=s; aspf=s; pct=100; rua=mailto:dpo@quaric.org; ruf=mailto:dpo@quaric.org; fo=1; ri=86400", "source": "dns_dmarc", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "cf5562c00417537dc7d1e21dab76019def5fbccafc9c4dcd93ee5a8950749677", "type": "dns_address", "subject": "quaric.org", "predicate": "resolves_to", "value": "104.21.6.240", "source": "dns_a", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "d12ecf5aac413511b04951354458ca92d27cdb2586fa618978c7481a3c9c1399", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": false, "hosts": [ "www.linkedin.com" ], "id": "linkedin", "known": true, "name": "LinkedIn", "observation_count": 1, "services": [ "advertising", "social" ], "tracker": true }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "d78ced672acd6cc13abd41f32581e4eadcfe1e5c595abc7a64601a57ec0f2111", "type": "module_finding", "subject": "quaric.org", "predicate": "privacy:trackers_detected", "value": { "evidence": [ "LinkedIn" ], "severity": "medium" }, "source": "finding_trackers_detected", "collector": "privacy", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "d990bf826d2b352e3769f8661fe74b1bb8c2204eb90105e979dbc8fef7f4a233", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": false, "hosts": [ "mailsec.protonmail.ch" ], "id": "host-795bfed2e90f", "known": false, "name": "mailsec.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "da8bd09184e3521e4ffd7fe789834a763166812c69f1d7b58dc6adab433a8b32", "type": "module_finding", "subject": "quaric.org", "predicate": "dns:dns_single_provider", "value": { "evidence": [ "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "severity": "low" }, "source": "finding_dns_single_provider", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "dde58bb1f979fd00ad66d630cfe1883b527b6ea038f3f8b75a10d581d9565fdd", "type": "mail_policy_flag", "subject": "quaric.org", "predicate": "mta_sts_declared", "value": true, "source": "mail_mta_sts_declared", "collector": "mail_trust", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "de2b1ed23a6d7ab3fcb8ec7f10227734b9d0fe3e7e2c9c67ab04d468bce043b6", "type": "module_finding", "subject": "quaric.org", "predicate": "dependencies:dependency_count", "value": { "evidence": [ "0bla.com", "Cloudflare", "LinkedIn", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "source": "finding_dependency_count", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "e51709e2e6ef088aa34dc422b3870c55c2e7e74f435c227c1f367ae4d5067a23", "type": "dns_address", "subject": "quaric.org", "predicate": "resolves_to", "value": "2606:4700:3037::ac43:8779", "source": "dns_aaaa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "e8ec783ac149bec790f2cd92727d114934ea18c066a7a445e33471a27d55c518", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issue", "value": "letsencrypt.org" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "f26a69ae7e30f1feb938c17b62b6274e114b5d80a1032ca75fe9b62f3593af6c", "type": "tls_issuer", "subject": "quaric.org", "predicate": "issuer", "value": "C = US, O = Let's Encrypt, CN = YE2", "source": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "f28e592ddb2e60155460ddc9304bd6adc7d13e79efb23fc534883d2de981a5c7", "type": "caa_record", "subject": "quaric.org", "predicate": "publishes_caa", "value": { "flags": 0, "tag": "issue", "value": "pki.goog; cansignhttpexchanges=yes" }, "source": "dns_caa", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "f8a44369e5718174a8e110ecfa1b67dbbea6e12c1f57fdb5acc036cd28d21aa6", "type": "mail_exchanger", "subject": "quaric.org", "predicate": "uses_mail_exchanger", "value": "mailsec.protonmail.ch", "source": "dns_mx", "collector": "dns", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "fb9e55ea277e5f0ec8ae19c0437a36de9a4373bcfffb2aaff419fa0b32f782e5", "type": "dependency_provider", "subject": "quaric.org", "predicate": "depends_on_provider", "value": { "critical": true, "hosts": [ "cloudflare.com", "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }, "source": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "fd99a195a607d83e2e0dd80cb0d713c8c13b3e7c951c84ce4bde1f5dfc129567", "type": "module_finding", "subject": "quaric.org", "predicate": "sovereignty:jurisdiction_unknown", "value": { "evidence": [ "0bla.com", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "source": "finding_jurisdiction_unknown", "collector": "sovereignty", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" }, { "id": "ff9d2f5e56b67cc236b7dba3dfb67ff9abd171b52c1344ee05f62eb5fd710b2c", "type": "mail_policy_flag", "subject": "quaric.org", "predicate": "tls_reporting", "value": true, "source": "mail_tls_reporting", "collector": "mail_trust", "rule_version": "2026.09.4", "observed_at": "2026-09-06T01:58:58+00:00" } ], "claims": [ { "id": "0d1bf13ea45e9c0b51245509ef5bd46e8e4bf1cd6b68b364bc2c342f6b9a7b84", "subject": "quaric.org", "predicate": "dmarc_policy", "value": "quarantine", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "1f1d5c7f2f6110162452da2a2292b2da2428763a5f1bffb2518d7c18d21d494a" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "258a384a9da28c183a8513d9a8c15ce093bd8c92bfa2733b5583ba642713bf2f", "subject": "quaric.org", "predicate": "openpgp", "value": null, "state": "observed", "rationale": "security_txt_encryption_observed", "evidence_ids": [ "539ee11c3d73fac8d1dac4ec3ff523941bacd1663f4fe3338ff1ebf25ac7e3a7" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "32a40c71f7deadcf580ba5138958ac2a214e0e77a9173fc76a30242ddd423bbb", "subject": "quaric.org", "predicate": "canary_detection", "value": true, "state": "observed", "rationale": "known_passive_signature_observed", "evidence_ids": [ "5ac9af3008aee7252e368d0c98c75d147994b95f72a2834a8f6995a3a75bf4b5" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "64e913f481d941c460ab958e94850b0d823b09f019b79317441bdc9f0c83fb5a", "subject": "quaric.org", "predicate": "spf_policy", "value": "softfail", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "bd029a386f383e52be11ddaeaf2aa847bad313d1ef958e512bca1c8f46b2807b" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "742ff9f5d8be27b086cf5521ab6f82e5e1bda9195e32a63cdbba42352da1fe87", "subject": "quaric.org", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "3afbc94d7e529655954931d6f8a5a21e786112d83efa469737b8b3a851e42ab2" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "80d89bde873919ceb775f62fe45e2fdb3b4c2cd652ebae87ee7359b2d02b8e83", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "mail.protonmail.ch", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "2410eac1dc42672e786b1f86e4e941fd17aa103910a23b126bcd4fefe61ea17b" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "842adef22d7933f32b59103fe48d5d2930b5dae2ff5a8a66d7491519a15fcd73", "subject": "quaric.org", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "8479d821d4072f50da2e09372d73af8f8df6a75947e82a8db5346cab959185da", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "mailsec.protonmail.ch", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "a0d27d77cdcaea0adfaf0c4afb3eb05d65e3cc4a1f56e4cee620e2f412322755" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "886e560af5889ad506caf1738ce6de0451eb771df7f31c3f7dc099b256f91817", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "static.cloudflareinsights.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "310be4a06eec394cc123749cf3d92be973d817624bf8bcd8239ba5a1d074213a" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "b959bc38770c7422f6f32080ebb36fbdb64d3c725d27b7649f780f2b31620329", "subject": "quaric.org", "predicate": "tls_issuer", "value": "C = US, O = Let's Encrypt, CN = YE2", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "e8001318f27a4be64973a88bc3cf352a8c486ea85b60e3976f23134dcc133c01" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "c11c414a98f10e27997f2de4999c25c40da261bcf63d2b7cf43dea753fbfe608", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "0bla.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "e9bf6ed5dceacb82e9f1e3f4cecbfdee0b9f4849a09e80bd7818ea719eb0660d" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "d2ea79e4ffd3cab8ec9ee8382d2638ed5495d8569bc0169658b09adb75c84ba8", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "LinkedIn", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "2537091bb3acaa61f675d5e3c8d461d56293217ea69c9d0541239d84cbe3fe2f" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "dacb4424fb9f45b5d89b3d3c59cc8fb9368e0ccff0a49b6c2c49394d3da659f8", "subject": "quaric.org", "predicate": "depends_on_provider", "value": "Cloudflare", "state": "corroborated", "rationale": "independent_provider_evidence_converges", "evidence_ids": [ "a5bdaaf48de917917156556752d718fa8141901d5e660d6a51b329302d7d9514", "ed74f622d6628b99a7138dc5c46b8dbe2382e2b56b8398ab08f41ad414de45b4", "e19e0b0f292f89d76219cd917109394b962a6c08ae17d44dd2d7182fe44af5c6" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true }, { "id": "efce9298ef708a038c960c90e98881912ee88b3c836db4d342b4b440614379ae", "subject": "quaric.org", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00", "active": true } ], "evidence": [ { "id": "57aad1a4a88fba45de43724d58fc31870caa27d4f7814912fab5b5b5baaba195", "observation_ids": [ "0113e7e91245a1dffc7eca1ac4ad8ca9b3009fa71f6967ae1826e02a76699c11" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "cloudflare" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "55ef9fa4999bad334a54f7ecbdbc9fdc50da62e176bed5c2387c51c1f1ed081a", "observation_ids": [ "02bf78f5c750b3df89299513fed622d4fa9561e7fd3dd2af824f121f4ce5ccd6" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "599a23590675dc4a31697bbb679dc2f1967ffc5042db812566b5e004b4da9c75", "observation_ids": [ "0398f1b20ab69f4efba6c03b63839c42476284cbfd78586379b667607c6abe94" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "default-src 'none'; script-src 'nonce-afVEBRXaqO8OXpNrYccORg==' 'strict-dynamic'; style-src 'self' 'nonce-afVEBRXaqO8OXpNrYccORg=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "a5bdaaf48de917917156556752d718fa8141901d5e660d6a51b329302d7d9514", "observation_ids": [ "05ef64b9456272c7335a5aae2b8aff359bfeec651ccb3fbf2f0c5fb0c846f682" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "lochlan.ns.cloudflare.com", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e335cf6879ae65078bdd1271fba6076100f3de3e390f97c4bdfbe1f2612b7dd8", "observation_ids": [ "05f5df4ea158fb879628b56217dcd33b163b4adae79d329f7b6b7b4e4bbbe388" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "cloudflare", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "31b3930e64d85ca9b6f4cbac6fc044c6bbc64435ae92999a6b280dd4ab22fdef", "observation_ids": [ "0e4349376400177a6119b9470b102f2a5f22c55582aedd48920344f28df34f2a" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issuewild", "value": "pki.goog; cansignhttpexchanges=yes" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "ace806a21cd6b676406503c8b8e5c1aa65c17278f7d768b28eccc9a64f0dd711", "observation_ids": [ "1fb3bae9e7f32c7940d12ed0b3ca2c8a1173a3c2ba18ce0aafbfe5ccf02f8185" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YE2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-22T02:33:06+00:00", "valid_to": "2026-10-20T02:33:05+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.6.240", "172.67.135.121" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3032::6815:6f0", "2606:4700:3037::ac43:8779" ], "state": "observed" } }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "43afedb069af882bb41bed3277d080423f6f75b45e894666fd5aa917807a6656", "observation_ids": [ "269a793af2d83297564b8251b8ffddde1f01e4ea6590624a69e3bc5b5d3c7fcb" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issuewild", "value": "digicert.com; cansignhttpexchanges=yes" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "1f1d5c7f2f6110162452da2a2292b2da2428763a5f1bffb2518d7c18d21d494a", "observation_ids": [ "29d8c4444b6cb2767848bca5997f16127f32f10fd7db89fae8d51ab4f4b0dd3e" ], "evidence_type": "dmarc_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "quarantine", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "42176c14d8d7f52539f2927eef6f3ea81ceb1ad4311d7ad83c911584d3517e8a", "observation_ids": [ "29dc836ef8e4842c284de7baab9493c308798e8f8fe00e828afbc3078f9e9cfa" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issuewild", "value": "ssl.com" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "c5d042a89a2e6f28831296b5c779d4d39615b0fb4649e1d7c729f841ef8e57ee", "observation_ids": [ "2a03cd3a21b438d9825a603f05963b010225f3d11706158899777d9ef7a30304" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2606:4700:3032::6815:6f0", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "ed74f622d6628b99a7138dc5c46b8dbe2382e2b56b8398ab08f41ad414de45b4", "observation_ids": [ "2d5b0e678f3ddd6689e9722ec057ccba158fe1adc931ead8d26b62a2c7a13062" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "kinsley.ns.cloudflare.com", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "d03e4514720d8f3526d6e8c2ab6850c78a91ac5077e530832fbaf506e3d15594", "observation_ids": [ "360b2c1b65a40e3f030bbaf7e84a30b6e10c7a872ddd9bed345adb0dfc71b168" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=63072000; includeSubDomains; preload" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "bb652a3dd9cf0505c360a61f7446456be06a4b6e97d43a2013b15162dad8588d", "observation_ids": [ "3d1156f64c991a2e901f60728bfc2fdfa76a13bd1a26ff93a9685d7b4dac03f1" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issuewild", "value": "comodoca.com" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "7f593ab554380a051911f8ec30d701ba196b8f100e6c34f4585ce9e98d5a3311", "observation_ids": [ "457d2054006d494deb9456395a63e85f3d7ca7f5b250c8ddfb1f1b14cdb0f141" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "6987b9f10d386f65b7423bda86ce164480db7c2449e8c4ce79f8bbec0ae24668", "observation_ids": [ "4623313c6b63f64012aa38b7b895f0bd056f2b820f3cefb46026ec5ed5737cbc" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "require-corp" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "3fc9d422d060e23b4c25c806bd7cde5233306cc0cb57bf40e88dba813c0f43cc", "observation_ids": [ "50bbbf2c1aed922eb3e9b3e8763dee6757bffc8e04c3cb49171297616a526ec9" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "iodef", "value": "mailto:security@quaric.org" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "3afbc94d7e529655954931d6f8a5a21e786112d83efa469737b8b3a851e42ab2", "observation_ids": [ "510cbd202e2edcf58057ed687492a9c13b8b57cbdce54f2ca6469227ae52ac7f" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "2410eac1dc42672e786b1f86e4e941fd17aa103910a23b126bcd4fefe61ea17b", "observation_ids": [ "607a7e448e33938708660b126cb7a928cff595773f288800291c13bf3ae4ce8d" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "mail.protonmail.ch" ], "id": "host-d87c7268dbc2", "known": false, "name": "mail.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "941fc40f7c9f0a37705dc88f11f36fb4b3d37052d8fea2884bbc8ff2f3c3ef7d", "observation_ids": [ "6208b2d49270cc2a24d791bea48a8a836416c02c920cbe0d6bcbe00f74113d67" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": true, "trusted_types": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "539ee11c3d73fac8d1dac4ec3ff523941bacd1663f4fe3338ff1ebf25ac7e3a7", "observation_ids": [ "64f220721d4e5ded019bd95eadd0bda2c185e05a665665c31ef3bfef64f125f1" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://quaric.org/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "5b9836e7ecf8959e39e4e251fa8d2721a8311e80ce12fe620d56ce6f685c529f", "observation_ids": [ "66858d13cb601a3667c73f103f1e8470c571504946b7738779bfc7e31061c14c" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "8a723f17a5d9501dcb737e510043356249ef117f39c7fa046a816e19396eefde", "observation_ids": [ "673f09429105ccd7cd889953d5136977c5c33fcb318b0d176772e3b2f8700140" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "f419b192ef165cfe5faa25c8df250113fb2d01c0ecf09190ed1c5c45c4561ba8", "observation_ids": [ "68a55618195059de09754f8abb3dbf7fd2b1db97d815e80fc422ae1bbfde04d6" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "nosniff" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "032417bf1fe16ba08f844286c8e20d774d7252bcf50fd929ada69cf498dfddaf", "observation_ids": [ "6a66586bf50f65e882b461052277e6af89789574b7ee73cab01eca4d6d85170b" ], "evidence_type": "spf_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=spf1 include:_spf.protonmail.ch ~all", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "5ac9af3008aee7252e368d0c98c75d147994b95f72a2834a8f6995a3a75bf4b5", "observation_ids": [ "6df22f638e7c441fa9c9782b0aba695341f84268b50ddf03f7469c6eb24c0706" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "0311e77a94e31ccdf10b1c72e20c1da92ffc8e2d95f74a77f6ae9d3c53343c33", "observation_ids": [ "6e1dabe2edf213c52f87d0c993e8541d0eb3d3d915cf9251f3844f69a916552e" ], "evidence_type": "module_finding", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "0bla.com", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "38080fffafccb8028ad5f608e5bb90234e80bb38693da5df562954873de308a9", "observation_ids": [ "6ea5f0ff9c1cb0c1125615ca1114789202db75ba797f619bb2acee8a4075e510" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "172.67.135.121", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "2cc1ace1e7542746d11afdbe7c38e268bedd676983ef914956c073f434c3eaa3", "observation_ids": [ "74bf0f5ef2bf2ef4d938d5585da9155d62d2ca7632f4e4bb7b08be29f7701523" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "8e0c2066bd0ca3b2c1a724c56ce8f947e15ac28e042a032a10b663eb1efc8993", "observation_ids": [ "77521bf097a804b18ad6a9ba459641074dc3b729923931ed3bea60033b6801ad" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "strict-origin-when-cross-origin" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "8daf20b5918a68496c669c68a694d32a26c662f0ac8402c1ed09d5dad46111d2", "observation_ids": [ "7a0d2e642c174a404f65db4b7803bd5e6fedcc3417d3f9ab17f45203e05b55c3" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "DENY" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "75a55965f5d8c4116f48e399bf46fcd026aff87289351432ef4a10286820f911", "observation_ids": [ "7d9ee3f0f9c7c089f9d70842e8ffa380589696db690a37f0bf0ce6280784b870" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2026-10-20T02:33:05+00:00", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "bc75c474b16c72c5345f67da52e8b4175a7af3c271bd4c8ef2bd968544207fac", "observation_ids": [ "878b374e08a5a3a97e86cd6a551f31ef3de7abf0fe369399260c0d2420dace17" ], "evidence_type": "tracker_provider", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": "LinkedIn", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "310be4a06eec394cc123749cf3d92be973d817624bf8bcd8239ba5a1d074213a", "observation_ids": [ "8e9cd26d1a82d27356df016f0baf6fcaa8de5f93da77a7aebc1f211777d25b2b" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "static.cloudflareinsights.com" ], "id": "host-d15afad5fd0c", "known": false, "name": "static.cloudflareinsights.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "b50de5e622559b2b101766602f67c59e67a9402265b8deae875cbf687901cade", "observation_ids": [ "8f43590be12eb0ef31e3601fbaf0373f817c4903ae45e9ff805d190b18dbd250" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "Cloudflare", "LinkedIn" ], "severity": "high" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "783549f369748dea7e9fdf5da3531321e07fdede0d39b6dffe5c746c07cda621", "observation_ids": [ "92155c96a9dc4ad038853746b05711b5bc6de30bf18c4193de3e4196d745cf88" ], "evidence_type": "cookie", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": { "http_only": true, "name": "quaric_lang", "same_site": "strict", "secure": true }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "6038adb4d86f995624d947416c460b4cbe27a4381ac61be6de7d41cbc1518110", "observation_ids": [ "92e44c146ad703d23efb6a1cafe1bb74d0b1b98976912dccbae5e92b54ea795d" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issue", "value": "ssl.com" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "d63c06e93dd3da43ac36a7c191a094dbf82893dc96cbb459ddb998d4d8c55e99", "observation_ids": [ "9d46c5819b86b784fc136cf291c82c4d3dbe7d52af58621914caaa7b6357ef97" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mail.protonmail.ch", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "66fb7eb90179bcb215a2aa6719176e4d0cc48744b2441be41cd31e7a7d1cee27", "observation_ids": [ "a2e215e28e5d95df03471a661a127c4e9700b608a46cc1a2ab767e31d6eed606" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ], "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "b266261606fc4fb730ec34aa349a5d755f26bad5465688c89cb8c9b9fb83b931", "observation_ids": [ "a454d27e71e32240058523ff806676f6cd967389cf9842517baee92a4aa9bb78" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "bd029a386f383e52be11ddaeaf2aa847bad313d1ef958e512bca1c8f46b2807b", "observation_ids": [ "aa23c976ce8e25f8ca462a90d0cd84ca5ec5d7002d15fd5ae921cdfd19617ee0" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "softfail", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "1ebea9a82118a5ce82628954e746d84aacf7786911ce39d13077d70fb3ced239", "observation_ids": [ "b2c51de059b62cbd8d72ea9c679564c53c50b4a28cc2700250734ed069d52d87" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issue", "value": "digicert.com; cansignhttpexchanges=yes" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "7f56a1830d71ed6f0bfd37d89d328a39042374a4b4501ddbd2ece7469ecf5e1c", "observation_ids": [ "ba286cf7124ca22ba9299529c0e5ced1346067842852b5888a7de77ff83567b6" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": { "max_age": "604800", "mode": "enforce", "mx": [ "*.protonmail.ch", "mail.protonmail.ch", "mailsec.protonmail.ch" ], "version": "STSv1" }, "policy_state": "observed", "records": [ "v=STSv1; id=202605032030" ], "state": "observed" }, "tls_rpt": { "records": [ "v=TLSRPTv1; rua=mailto:dpo@quaric.org" ], "state": "observed" } }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e9bf6ed5dceacb82e9f1e3f4cecbfdee0b9f4849a09e80bd7818ea719eb0660d", "observation_ids": [ "c0644485290bcc46aa27967515cf7cb2261cc07d231ae60273c6d4548a37e30f" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "0bla.com" ], "id": "host-d60d939674d6", "known": false, "name": "0bla.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "4188992e189503d1f3ca892df018c67f3d26952f393b02c38c52fc457ad34b97", "observation_ids": [ "c55f7bf9923aeb1711002e139eb13c8f0fb464a8ac179a2933129883dc79688e" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issuewild", "value": "letsencrypt.org" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "c6d262349d04485cbf3f761648bf33aa6cc7c913acab627ffeb488c647db6c9c", "observation_ids": [ "cbf91806041f41848a6edc7da2ce03df566e79f6bea7d0ce304faf6ce4b9390a" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issue", "value": "comodoca.com" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "8ade5af8fd0ad8bcfa31dedb8f3b3c8fd0e65823d047458ef3de48bb18ded493", "observation_ids": [ "ce7de0433209126722e8e43be2cc7af2529e26b2afe84f75e1c3e883ad696ebe" ], "evidence_type": "dmarc_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=DMARC1; p=quarantine; sp=quarantine; adkim=s; aspf=s; pct=100; rua=mailto:dpo@quaric.org; ruf=mailto:dpo@quaric.org; fo=1; ri=86400", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e2164db8e5e19b66aabd6f86d08be14853643566218743ff0eb3b6663289b060", "observation_ids": [ "cf5562c00417537dc7d1e21dab76019def5fbccafc9c4dcd93ee5a8950749677" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "104.21.6.240", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "2537091bb3acaa61f675d5e3c8d461d56293217ea69c9d0541239d84cbe3fe2f", "observation_ids": [ "d12ecf5aac413511b04951354458ca92d27cdb2586fa618978c7481a3c9c1399" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "www.linkedin.com" ], "id": "linkedin", "known": true, "name": "LinkedIn", "observation_count": 1, "services": [ "advertising", "social" ], "tracker": true }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "61363889297bbeb4c3eab1879f955530dfd9336a02685ae91d4fb991f6de27be", "observation_ids": [ "d78ced672acd6cc13abd41f32581e4eadcfe1e5c595abc7a64601a57ec0f2111" ], "evidence_type": "module_finding", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "LinkedIn" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "a0d27d77cdcaea0adfaf0c4afb3eb05d65e3cc4a1f56e4cee620e2f412322755", "observation_ids": [ "d990bf826d2b352e3769f8661fe74b1bb8c2204eb90105e979dbc8fef7f4a233" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "mailsec.protonmail.ch" ], "id": "host-795bfed2e90f", "known": false, "name": "mailsec.protonmail.ch", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "68a98840f5138ee57f48cc4f6a7ce6fea46efd7a226f6bff0de02af2a01ff86d", "observation_ids": [ "da8bd09184e3521e4ffd7fe789834a763166812c69f1d7b58dc6adab433a8b32" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "severity": "low" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "13b5a8050693a251a402c202f9cda0a977db996e8704e9f0f1c321c96759b9b0", "observation_ids": [ "dde58bb1f979fd00ad66d630cfe1883b527b6ea038f3f8b75a10d581d9565fdd" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": true, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "199323c393970a60f6c0bc8fd5f11f5bb32acf421d4a6c17805ab1e5a223cfaf", "observation_ids": [ "de2b1ed23a6d7ab3fcb8ec7f10227734b9d0fe3e7e2c9c67ab04d468bce043b6" ], "evidence_type": "module_finding", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "0bla.com", "Cloudflare", "LinkedIn", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "19630cbd19863b675e62956d5620431382426c727f318ed337d946a70b9fda82", "observation_ids": [ "e51709e2e6ef088aa34dc422b3870c55c2e7e74f435c227c1f367ae4d5067a23" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2606:4700:3037::ac43:8779", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e1837e1ab7abc9b1ab5444c7c37ac3a21faff97da1684e9c985b79626d6f3c40", "observation_ids": [ "e8ec783ac149bec790f2cd92727d114934ea18c066a7a445e33471a27d55c518" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issue", "value": "letsencrypt.org" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e8001318f27a4be64973a88bc3cf352a8c486ea85b60e3976f23134dcc133c01", "observation_ids": [ "f26a69ae7e30f1feb938c17b62b6274e114b5d80a1032ca75fe9b62f3593af6c" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = US, O = Let's Encrypt, CN = YE2", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "2e914e199c7acea361d4a7b700484aa209c75ebccab3a3ae9ea0b6689550aae9", "observation_ids": [ "f28e592ddb2e60155460ddc9304bd6adc7d13e79efb23fc534883d2de981a5c7" ], "evidence_type": "caa_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "flags": 0, "tag": "issue", "value": "pki.goog; cansignhttpexchanges=yes" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e572a630ab65d0500bc0d9927be87d12edc0506640443a69891ad3af6b6c52f3", "observation_ids": [ "f8a44369e5718174a8e110ecfa1b67dbbea6e12c1f57fdb5acc036cd28d21aa6" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mailsec.protonmail.ch", "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "e19e0b0f292f89d76219cd917109394b962a6c08ae17d44dd2d7182fe44af5c6", "observation_ids": [ "fb9e55ea277e5f0ec8ae19c0437a36de9a4373bcfffb2aaff419fa0b32f782e5" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": true, "hosts": [ "cloudflare.com", "kinsley.ns.cloudflare.com", "lochlan.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "073967e288f35d43a91cfdf2ed4c87309eea2e9561d9aa2313c56a1d5981956e", "observation_ids": [ "fd99a195a607d83e2e0dd80cb0d713c8c13b3e7c951c84ce4bde1f5dfc129567" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "0bla.com", "mail.protonmail.ch", "mailsec.protonmail.ch", "static.cloudflareinsights.com" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" }, { "id": "9afc0e70b44bfeb024b1a8758789f1bb94a381c6e4237588345153e35e85015e", "observation_ids": [ "ff9d2f5e56b67cc236b7dba3dfb67ff9abd171b52c1344ee05f62eb5fd710b2c" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": true, "first_seen_at": "2026-09-06T01:58:58+00:00", "last_seen_at": "2026-09-06T01:58:58+00:00" } ], "limitations": [ "public_edge_does_not_reveal_origin", "provider_metadata_does_not_prove_processing_location" ], "evidence_qualification": "preuve technique horodatée et vérifiable", "sha256": "b9709a3df1e8137eabf98d3dac0ea446d535bb307205992a928a2b918f1d27e4" }