10 / KEEP THE READING VERIFIABLE
Evidence, not a score
The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.
Domain identityObserved
What is being observed and which public markers identify it?
Observed : Dns address : 2606:4700:3037::ac43:b386 / Observed : Technical finding : Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low
Dns address Observed
2606:4700:3037::ac43:b386
dns
Technical finding Observed
Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low
dns
Spf record Observed
v=spf1 -all
dns
Technical finding Observed
Signal importance : low
dns
Dns address Observed
2606:4700:3035::6815:2b7e
dns
Dns nameserver Observed
david.ns.cloudflare.com
dns
InfrastructureReview needed
Which public infrastructures appear to serve the service?
Undetermined : Origin host : Value not available / Undetermined : Data location : Value not available
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Dependency provider Observed
Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No
dependencies
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
Dns address Observed
2606:4700:3037::ac43:b386
dns
Encryption and transportObserved
How are public exchanges protected and presented?
Observed : Tls issuer : C = US, O = Google Trust Services, CN = WE1 / Not tested : Post-quantum TLS negotiation : No measurement performed
Tls issuer Observed
C = US, O = Google Trust Services, CN = WE1
certificate_observed
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Technical finding Observed
Signal importance : info
headers
Tls valid to Observed
2026-11-29T18:45:51+00:00
tls
Http header Observed
same-origin
headers
Tls issuer Observed
C = US, O = Google Trust Services, CN = WE1
tls
Mail and trustObserved
Which mail protections and policies are publicly observable?
Observed : SPF policy : hardfail / Observed : DMARC policy : none
SPF policy Observed
hardfail
mail_policy_observed
DMARC policy Observed
none
mail_policy_observed
Technical finding Observed
Signal importance : info
mail_trust
Mail policy flag Observed
No
mail_trust
Dns address Observed
2606:4700:3037::ac43:b386
dns
Technical finding Observed
Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low
dns
DNS and governanceObserved
Which public DNS controls are visible and what remains undetermined?
Observed : Technical finding : Signal importance : info / Observed : Mail policy flag : No
Technical finding Observed
Signal importance : info
mail_trust
Mail policy flag Observed
No
mail_trust
Dns address Observed
2606:4700:3037::ac43:b386
dns
Technical finding Observed
Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low
dns
Spf record Observed
v=spf1 -all
dns
Technical finding Observed
Signal importance : low
dns
External dependenciesReview needed
Which external domains, providers or resources does the site visibly depend on?
Undetermined : Provider dependency : Cloudflare / Observed : Dependency provider : Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Dependency provider Observed
Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No
dependencies
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
Dns address Observed
2606:4700:3037::ac43:b386
dns
Technical finding Observed
Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low
dns
Spf record Observed
v=spf1 -all
dns
Observable technologiesObserved
Which technologies can reasonably be inferred from public traces?
Observed : Technical finding : Signal importance : info / Observed : Http header : same-origin
Technical finding Observed
Signal importance : info
headers
Http header Observed
same-origin
headers
Http header Observed
max-age=63072000; includeSubDomains; preload
headers
Http header Observed
DENY
headers
Http header Observed
same-origin
headers
Http header Observed
strict-origin-when-cross-origin
headers
Public exposureObserved
Which elements, endpoints or artefacts are publicly exposed?
Observed : Canary statement detected : Yes / Observed : Technical finding : Signal importance : info
Canary statement detected Observed
Yes
known_passive_signature_observed
Technical finding Observed
Signal importance : info
headers
Technical finding Observed
Signal importance : info
mail_trust
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
Http header Observed
same-origin
headers
Http header Observed
max-age=63072000; includeSubDomains; preload
headers
Documentary trustObserved
Which public documents and transparency mechanisms are present?
Observed : Technical finding : Signal importance : info / Observed : Technical finding : Signal importance : info
Technical finding Observed
Signal importance : info
headers
Technical finding Observed
Signal importance : info
mail_trust
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
Http header Observed
same-origin
headers
Http header Observed
max-age=63072000; includeSubDomains; preload
headers
Http header Observed
DENY
headers
Security signalsObserved
Which protections or situations deserve particular attention?
Not tested : Post-quantum TLS negotiation : No measurement performed / Observed : Canary statement detected : Yes
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Canary statement detected Observed
Yes
known_passive_signature_observed
Technical finding Observed
Signal importance : info
headers
Tls valid to Observed
2026-11-29T18:45:51+00:00
tls
Technical finding Observed
Signal importance : info
mail_trust
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
Evolution over timeUndetermined
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Evidence and traceabilityReview needed
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Canary signal : Matches : Name : canary_field ; Source : security_txt ; Reason : known_passive_signature_observed ; Signature version : 2026.09.1 ; State : observed / Observed : Technical finding : Signal importance : info
Canary signal Observed
Matches : Name : canary_field ; Source : security_txt ; Reason : known_passive_signature_observed ; Signature version : 2026.09.1 ; State : observed
canary_passive
Technical finding Observed
Signal importance : info
headers
Tls valid to Observed
2026-11-29T18:45:51+00:00
tls
Technical finding Observed
Signal importance : info
mail_trust
Dependency provider Observed
Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No
dependencies
Technical finding Observed
Evidence : Cloudflare ; Signal importance : high
sovereignty
The filter changes the display. Exports retain all evidence.