PUBLIC DOSSIER / DATED OBSERVATION

claudealexis.fr

Scope completed

Dossier overview

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

6 public observations are documented in this dossier.

1 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Distinct evidence
42
Retained signals
4
Identified products
1

General information

Domain name
claudealexis.fr
Reading state
Scope completed
Registered on
2026-07-03 13:25 UTC
Registrar
IONOS SE
Stated expiration
2027-07-03 13:25 UTC
Registry outcome
Observed
View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE
claudealexis.fr2026-09-20 19:15 UTC

Claude Alexis Voyant - Sa philosophie de la voyance

Angles
11/12
Evidence
42
Signals
4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →
FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

  • 104.21.43.126CanadaConnected IP
  • 172.67.179.134CanadaDNS only
  • 2606:4700:3037::ac43:b386CanadaDNS only
  • 2606:4700:3035::6815:2b7eCanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Visible relationships

Explore all →
claudealexis.frcloudflareuses technology
claudealexis.frthea.ns.cloudflare.comuses nameserver
claudealexis.fr2606:4700:3035::6815:2b7eresolves to
claudealexis.fr2606:4700:3037::ac43:b386resolves to
The twelve reading angles

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host
claudealexis.fr
Registry query domain
claudealexis.fr
Registered on
2026-07-03 13:25 UTC
Registrar
IONOS SE
Stated expiration
2027-07-03 13:25 UTC
Collection outcome
Observed
Read RDAP source ↗

2026-09-20 19:15 UTC

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

  • 104.21.43.126CanadaConnected IP
  • 172.67.179.134CanadaDNS only
  • 2606:4700:3037::ac43:b386CanadaDNS only
  • 2606:4700:3035::6815:2b7eCanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

GDPR

The observed territorial context links the domain to the European Union. Public privacy signals increase the relevance of this framework without proving internal processing practices.

Applicability requires review; not a legal determination.

Documentary source ↗

NIS2

The directive may apply to some entities depending on sector, size and role. Scanapse does not infer those conditions from a domain alone.

Applicability requires review; not a legal determination.

Documentary source ↗

Cyber Resilience Act

This regulation applies to products with digital elements under specific conditions. A public website alone cannot establish whether an entity or product falls within scope.

Applicability requires review; not a legal determination.

Documentary source ↗

DORA

DORA targets financial entities and certain ICT providers within its scope. Without evidence of sector or status, Scanapse keeps it as context only.

Applicability requires review; not a legal determination.

Documentary source ↗

French Data Protection Act

A French context makes this national data-protection law, complementary to GDPR, potentially relevant to personal-data processing.

Applicability requires review; not a legal determination.

Documentary source ↗

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

A country-code domain is only a contextual clue and does not prove where the organisation is legally established.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

Cloudflare

Referenced service

Cloudflare response marker

2026-09-20 19:15 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

claudealexis.frcloudflare

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"4b59b6a96535107bb0f0932dd2e7ac6d907f71aea7bb30f332555164e11a6fe1","subject":"claudealexis.fr","predicate":"uses_technology","object":"cloudflare","state":"observed","evidence_ids":["718d847b1240db37170c6d2fba688d2a98acd9b12421da9f5ac17e131c016e39"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.frthea.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"6919b3ea932cb163ec3b132555e054ac997e13b5915e028bbdf4c34237584a80","subject":"claudealexis.fr","predicate":"uses_nameserver","object":"thea.ns.cloudflare.com","state":"observed","evidence_ids":["af8f831748d777d82d81f473e997732e67766f580eba9541a6cd98091e180d53"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.fr2606:4700:3035::6815:2b7e

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"72740a474333e1aae04b67598a45ab7411428c0f3b752bcdb4a7b0ef37fa1be0","subject":"claudealexis.fr","predicate":"resolves_to","object":"2606:4700:3035::6815:2b7e","state":"observed","evidence_ids":["fa61da06a86479a736e1455957f658d836976366309e43a0e8b1a4f140a62607"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.fr2606:4700:3037::ac43:b386

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"7ad0844db1fa76e1590e38401243b36c45869490dfced976e3e0dfa88e437142","subject":"claudealexis.fr","predicate":"resolves_to","object":"2606:4700:3037::ac43:b386","state":"observed","evidence_ids":["42efa68111ebd8305caa35813525fc23fd031a60b35b1043831322b97a1ca92f"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.frdavid.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"a0968aedcec78c6e7822fad489ae266b78a3bce15e0589898542a7e571c5c03d","subject":"claudealexis.fr","predicate":"uses_nameserver","object":"david.ns.cloudflare.com","state":"observed","evidence_ids":["8fe7689f1e60b21613f6ac3f5a40fb4b2c82b0d41e3c32be13e455bcdec958df"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.frCloudflare

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"b74bb43933f21ecb6a7fec1917b39a8f3cb22dfb423e4b5cb9138a1aee264036","subject":"claudealexis.fr","predicate":"depends_on_provider","object":"Cloudflare","state":"corroborated","evidence_ids":["e9271a57d62da69ab1b799b7ac35d6ccb7020aeb575674a4a1f4b95b6ad281cc","8fe7689f1e60b21613f6ac3f5a40fb4b2c82b0d41e3c32be13e455bcdec958df","af8f831748d777d82d81f473e997732e67766f580eba9541a6cd98091e180d53"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.fr172.67.179.134

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"dcfc6e0794291d3ec1624fb03d6e3f55ac041663d43c530cf5c1b47f4d88f643","subject":"claudealexis.fr","predicate":"resolves_to","object":"172.67.179.134","state":"observed","evidence_ids":["35db243c7955f6c6110faa1abde5bbebddfa554d9cf8344b427cec7555eb9e98"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}
claudealexis.fr104.21.43.126

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"e3e051b1e82af2a863ce9b9a9e0e9d6748c5be30ebaeb566ab158e783e39a1ad","subject":"claudealexis.fr","predicate":"resolves_to","object":"104.21.43.126","state":"observed","evidence_ids":["e8f1ebf11b50a70ee5f7432404ec48c8feddabe63f61a6c73d00fa87f436488a"],"first_seen_at":"2026-09-20T19:15:57+00:00","last_seen_at":"2026-09-20T19:15:57+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓
All retained signals (4)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["david.ns.cloudflare.com","thea.ns.cloudflare.com"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

Email not advertised No public MX record was detected.

TLS transport

Security headers

COEP missing Embedded resource isolation is not enabled.

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Cloudflare"]

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["david.ns.cloudflare.com","thea.ns.cloudflare.com"]

Transparency

Privacy information not found No obvious link to a privacy policy was identified on the page.

Contact point not found No obvious contact link was identified.

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title
Claude Alexis Voyant - Sa philosophie de la voyance
Description
Site officiel de Claude Alexis, voyant et médium. Horoscope, son oracle de 42 cartes, cartomancie et consultations sur rendez-vous.
Declared structured-data types
Person, WebPage, WebSite

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

09 / TIME CHANGES THE READING

The domain timeline

Initial reference point for this reading.

  1. Displayed reading

Open dedicated history →

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Dns address : 2606:4700:3037::ac43:b386 / Observed : Technical finding : Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low

Dns address Observed

2606:4700:3037::ac43:b386

dns

Technical finding Observed

Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low

dns

Spf record Observed

v=spf1 -all

dns

Technical finding Observed

Signal importance : low

dns

Dns address Observed

2606:4700:3035::6815:2b7e

dns

Dns nameserver Observed

david.ns.cloudflare.com

dns

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Origin host : Value not available / Undetermined : Data location : Value not available

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Dependency provider Observed

Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No

dependencies

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Dns address Observed

2606:4700:3037::ac43:b386

dns

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = Google Trust Services, CN = WE1 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = Google Trust Services, CN = WE1

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Technical finding Observed

Signal importance : info

headers

Tls valid to Observed

2026-11-29T18:45:51+00:00

tls

Http header Observed

same-origin

headers

Tls issuer Observed

C = US, O = Google Trust Services, CN = WE1

tls

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : SPF policy : hardfail / Observed : DMARC policy : none

SPF policy Observed

hardfail

mail_policy_observed

DMARC policy Observed

none

mail_policy_observed

Technical finding Observed

Signal importance : info

mail_trust

Mail policy flag Observed

No

mail_trust

Dns address Observed

2606:4700:3037::ac43:b386

dns

Technical finding Observed

Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low

dns

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Technical finding : Signal importance : info / Observed : Mail policy flag : No

Technical finding Observed

Signal importance : info

mail_trust

Mail policy flag Observed

No

mail_trust

Dns address Observed

2606:4700:3037::ac43:b386

dns

Technical finding Observed

Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low

dns

Spf record Observed

v=spf1 -all

dns

Technical finding Observed

Signal importance : low

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Cloudflare / Observed : Dependency provider : Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Dependency provider Observed

Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No

dependencies

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Dns address Observed

2606:4700:3037::ac43:b386

dns

Technical finding Observed

Evidence : david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Signal importance : low

dns

Spf record Observed

v=spf1 -all

dns

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Technical finding : Signal importance : info / Observed : Http header : same-origin

Technical finding Observed

Signal importance : info

headers

Http header Observed

same-origin

headers

Http header Observed

max-age=63072000; includeSubDomains; preload

headers

Http header Observed

DENY

headers

Http header Observed

same-origin

headers

Http header Observed

strict-origin-when-cross-origin

headers

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

Observed : Canary statement detected : Yes / Observed : Technical finding : Signal importance : info

Canary statement detected Observed

Yes

known_passive_signature_observed

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

Signal importance : info

mail_trust

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Http header Observed

same-origin

headers

Http header Observed

max-age=63072000; includeSubDomains; preload

headers

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Observed : Technical finding : Signal importance : info / Observed : Technical finding : Signal importance : info

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

Signal importance : info

mail_trust

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Http header Observed

same-origin

headers

Http header Observed

max-age=63072000; includeSubDomains; preload

headers

Http header Observed

DENY

headers

Security signalsObserved

Which protections or situations deserve particular attention?

Not tested : Post-quantum TLS negotiation : No measurement performed / Observed : Canary statement detected : Yes

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Canary statement detected Observed

Yes

known_passive_signature_observed

Technical finding Observed

Signal importance : info

headers

Tls valid to Observed

2026-11-29T18:45:51+00:00

tls

Technical finding Observed

Signal importance : info

mail_trust

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Canary signal : Matches : Name : canary_field ; Source : security_txt ; Reason : known_passive_signature_observed ; Signature version : 2026.09.1 ; State : observed / Observed : Technical finding : Signal importance : info

Canary signal Observed

Matches : Name : canary_field ; Source : security_txt ; Reason : known_passive_signature_observed ; Signature version : 2026.09.1 ; State : observed

canary_passive

Technical finding Observed

Signal importance : info

headers

Tls valid to Observed

2026-11-29T18:45:51+00:00

tls

Technical finding Observed

Signal importance : info

mail_trust

Dependency provider Observed

Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No

dependencies

Technical finding Observed

Evidence : Cloudflare ; Signal importance : high

sovereignty

Evidence record

The filter changes the display. Exports retain all evidence.

canary_signal300f122288981b217b
Observed value
{"matches":[{"name":"canary_field","source":"security_txt"}],"reason":"known_passive_signature_observed","signature_version":"2026.09.1","state":"observed"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
canary_passive
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_finding4a01a67cc7b1fc8dda
Observed value
{"evidence":null,"severity":"info"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
tls_valid_to25a1b788e0305ece52
Observed value
2026-11-29T18:45:51+00:00
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
tls
Method
TLS handshake and public certificate inspection
Limitations
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.
module_finding3233aad1bb957b3c17
Observed value
{"evidence":null,"severity":"info"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
dependency_providere9271a57d62da69ab1
Observed value
{"critical":true,"hosts":["cloudflare.com","david.ns.cloudflare.com","thea.ns.cloudflare.com"],"id":"cloudflare","known":true,"name":"Cloudflare","observation_count":3,"services":["cdn","security"],"tracker":false}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_finding96edcdc73ac429340b
Observed value
{"evidence":["Cloudflare"],"severity":"high"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
sovereignty
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
http_header789585f79b2c20f12b
Observed value
["same-origin"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
tls_issuer9a48490f04d0fa4469
Observed value
C = US, O = Google Trust Services, CN = WE1
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
tls
Method
TLS handshake and public certificate inspection
Limitations
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.
mail_policy_flagc15ba5edf30f95a130
Observed value
false
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
http_header02360a2defa4671724
Observed value
["max-age=63072000; includeSubDomains; preload"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
http_header999e5afc8b665717ae
Observed value
["DENY"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
mail_transport_evidencec82d463cca8dbb7460
Observed value
{"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
mail_transport
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dns_address42efa68111ebd8305c
Observed value
2606:4700:3037::ac43:b386
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
module_finding1aa8e98cf3b0f585f0
Observed value
{"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"low"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
http_headercbcc344d953ca5086f
Observed value
["same-origin"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
post_quantum_tlsc722c9ab561ed891b9
Observed value
{"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
pq_tls_probe
Method
Public observation
Limitations
A positive result does not make a site “post-quantum”, and a negative result does not prove no other client could negotiate it.
module_findingf0cb88d0b07cb6475d
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
transparency
Method
Public transparency artefact inspection
Limitations
A file being present does not prove response speed or overall organizational maturity.
http_header52ba2194dfc9a2330a
Observed value
["strict-origin-when-cross-origin"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
http_header18ae73a0b3e354d143
Observed value
["cloudflare"]
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
spf_record80a0562029ed3f5040
Observed value
v=spf1 -all
Source
release_fallback
Date
2026-09-20T19:15:57+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗