PUBLIC DOSSIER / DATED OBSERVATION

empreinte.live

Scope completed

Dossier overview

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

No useful change is retained since the previous reading.

4 points still require confirmation or cannot be observed from outside.

Distinct evidence
53
Retained signals
4
Identified products
3

General information

Domain name
empreinte.live
Reading state
Scope completed
Registered on
Not available
Registrar
Undetermined
Stated expiration
Not available
Registry outcome
Source unavailable
View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE
empreinte.live2026-09-20 20:57 UTC

Visioconférence gratuite, réunions sécurisées - empreinte.live

Angles
11/12
Evidence
53
Signals
4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →
FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

  • 104.21.61.8CanadaConnected IP
  • 172.67.204.132CanadaDNS only
  • 2606:4700:3037::ac43:cc84CanadaDNS only
  • 2606:4700:3031::6815:3d08CanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Visible relationships

Explore all →
empreinte.livecloudflareuses technology
empreinte.livekay.ns.cloudflare.comuses nameserver
empreinte.liveGoogledepends on provider
empreinte.livealt1.aspmx.l.google.comuses mail exchanger
The twelve reading angles

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host
empreinte.live
Registry query domain
empreinte.live
Registered on
Not available
Registrar
Not available
Stated expiration
Not available
Collection outcome
Source unavailable

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

  • 104.21.61.8CanadaConnected IP
  • 172.67.204.132CanadaDNS only
  • 2606:4700:3037::ac43:cc84CanadaDNS only
  • 2606:4700:3031::6815:3d08CanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

WordPress 7.1.1

Technology fingerprint

HTML generator metadata

2026-09-20 20:57 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

WordPress

Technology fingerprint

WordPress generator or resource path

2026-09-20 20:57 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

Cloudflare

Referenced service

Cloudflare response marker

2026-09-20 20:57 UTC

Clue source ↗
Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

empreinte.livecloudflare

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"00dc2930afe692e06984c48359fe4fdafb896d60dc985de2cc62ee976f0be392","subject":"empreinte.live","predicate":"uses_technology","object":"cloudflare","state":"observed","evidence_ids":["6d2c20f70043bfda5134f2fe27535e82a723e44447fb18fd11ddcb3d8eb96162"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.livekay.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"06214a1883972a7d4d72587676d776a68f2ab4ef9e40e4ec882f0d2384fcedfa","subject":"empreinte.live","predicate":"uses_nameserver","object":"kay.ns.cloudflare.com","state":"observed","evidence_ids":["46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.liveGoogle

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"06533147e93607773982457550ad175b8a5a8f7dd3cdaf5db00510ffdc86c469","subject":"empreinte.live","predicate":"depends_on_provider","object":"Google","state":"observed","evidence_ids":["f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.livealt1.aspmx.l.google.com

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"0ed9e2681a88a59243f33f044618a927c38b264db70c62fa39f7f52d58735c3b","subject":"empreinte.live","predicate":"uses_mail_exchanger","object":"alt1.aspmx.l.google.com","state":"observed","evidence_ids":["9a05e5d189b611a4a4b1c54d7d5de165df30ab231ead9f35e90d0626daee713f"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.live104.21.61.8

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"0ffb337dc226e74f23d9b26358849b120609296aa89c54ead30939e8d6b6eebf","subject":"empreinte.live","predicate":"resolves_to","object":"104.21.61.8","state":"observed","evidence_ids":["834dd17c9c7514c472ddf31af18c25a90bbdc7c0662f5e43b8c60dbbf0bafa55"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.live2606:4700:3031::6815:3d08

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"1687cc7780e9983dccfc86c6547019e331d8fdb4bd854c10e3fb5c7586d7d919","subject":"empreinte.live","predicate":"resolves_to","object":"2606:4700:3031::6815:3d08","state":"observed","evidence_ids":["f2aaeee8122d25566900cc620f4dbf1876e65302935c81058cee724c51f1af23"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.livealt2.aspmx.l.google.com

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"443eb98a8e0f626774e248ce1530076f28c88d22efa21e3a1c5fd387a411b941","subject":"empreinte.live","predicate":"uses_mail_exchanger","object":"alt2.aspmx.l.google.com","state":"observed","evidence_ids":["dd282980e60aec1f91df9b286a9487ad2e80925ed8312bc539c109fe20bb177a"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.livealt3.aspmx.l.google.com

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"5c9fb95c583e362285cdf796dcc7cce8243e0420684cca41862c569cc01e6a23","subject":"empreinte.live","predicate":"uses_mail_exchanger","object":"alt3.aspmx.l.google.com","state":"observed","evidence_ids":["33a1b10b9d2c8a950c41477e6476fb6c35980a829bc3c7bf00b848a7292e857a"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.live172.67.204.132

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"5d872636dbbb0e2f3373e9b4ae27ad8605b968de0d33acdd1b0888d1ae642987","subject":"empreinte.live","predicate":"resolves_to","object":"172.67.204.132","state":"observed","evidence_ids":["fd856ebf91f47872019b88599860f46efe3566306072f3fc4fd0adba8f87d601"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.livealt4.aspmx.l.google.com

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"69829f80e4a1019e96ac8505bace7bd992872cd8b76f44c745451eb999134da7","subject":"empreinte.live","predicate":"uses_mail_exchanger","object":"alt4.aspmx.l.google.com","state":"observed","evidence_ids":["69593342de950adc541a9fa3f5f343b97fad79a41b9367cf5ccc4501d03f71a4"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.liveCloudflare

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"76c465d4904133d1af4558907e34872ed994480e5d58be37e9e9cdb6e0e9433f","subject":"empreinte.live","predicate":"depends_on_provider","object":"Cloudflare","state":"corroborated","evidence_ids":["f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b","46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f","0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}
empreinte.liveaspmx.l.google.com

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"76f8d46df7662a6c295fa8e68559e225b7435fb6b5aaf4b5da6dc4625641dbc7","subject":"empreinte.live","predicate":"uses_mail_exchanger","object":"aspmx.l.google.com","state":"observed","evidence_ids":["f1ddab1fa556a11696d48884f2bf4a8d4804787dfd131be9fc2cc7f8b766356e"],"first_seen_at":"2026-09-20T20:57:40+00:00","last_seen_at":"2026-09-20T20:57:40+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓
All retained signals (4)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["theo.ns.cloudflare.com","kay.ns.cloudflare.com"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

DMARC monitoring only The p=none policy collects reports but requests neither quarantine nor rejection.

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

TLS transport

Security headers

Content-Security-Policy missing The browser receives no explicit resource loading policy.

HSTS missing The browser is not instructed to return exclusively over HTTPS.

nosniff missing The browser may try to interpret a content type differently from the declared type.

Anti-framing protection missing The page may potentially be embedded in a hostile iframe.

Referrer-Policy missing Referrer URLs may be transmitted with uncontrolled granularity.

Permissions-Policy missing Unused browser capabilities are not explicitly disabled.

COOP isolation missing The browsing context is not isolated from cross-origin windows.

CORP missing The cross-origin resource sharing policy is not explicit.

COEP missing Embedded resource isolation is not enabled.

Third-party resource control

External links without explicit isolation Links opened in a new tab do not declare rel=noopener or noreferrer.

3

Dependencies

Privacy

Technology footprint

Technical versions exposed Headers or metadata reveal precise software versions.

["WordPress 7.1.1"]

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Cloudflare","Google"]

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["theo.ns.cloudflare.com","kay.ns.cloudflare.com"]

Transparency

security.txt missing or incomplete No usable /.well-known/security.txt file with a Contact field was observed.

403
origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title
Visioconférence gratuite, réunions sécurisées - empreinte.live
Description
Visioconférence gratuite avec Empreinte LIVE : solution souveraine, sécurisée bout en bout. Organisez vos réunions en ligne dès maintenant !
Declared structured-data types
BreadcrumbList, EntryPoint, ImageObject, ListItem, Organization, PropertyValueSpecification, ReadAction, SearchAction, WebPage, WebSite

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

09 / TIME CHANGES THE READING

The domain timeline

Initial reference point for this reading.

  1. Displayed reading

Open dedicated history →

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Dmarc record : v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com / Observed : Spf record : v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Mail exchanger Observed

alt3.aspmx.l.google.com

dns

Dns address Observed

172.67.204.132

dns

Mail exchanger Observed

alt2.aspmx.l.google.com

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Provider dependency : Cloudflare / Undetermined : Data location : Value not available

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Provider dependency Observed

Google

provider_observed_once

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = Google Trust Services, CN = WE1 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = Google Trust Services, CN = WE1

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : high

headers

Tls valid to Observed

2026-11-22T06:37:45+00:00

tls

Http header Observed

cloudflare

headers

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : DMARC policy : none / Observed : SPF policy : softfail

DMARC policy Observed

none

mail_policy_observed

SPF policy Observed

softfail

mail_policy_observed

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Mail exchanger Observed

alt3.aspmx.l.google.com

dns

Technical finding Observed

Signal importance : low

mail_trust

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Dmarc record : v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com / Observed : Spf record : v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Mail exchanger Observed

alt3.aspmx.l.google.com

dns

Technical finding Observed

Signal importance : low

mail_trust

Dns address Observed

172.67.204.132

dns

Mail exchanger Observed

alt2.aspmx.l.google.com

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : Google

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Provider dependency Observed

Google

provider_observed_once

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Mail exchanger Observed

alt3.aspmx.l.google.com

dns

Dns address Observed

172.67.204.132

dns

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Technical finding : Signal importance : low / Observed : Technical finding : Signal importance : high

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : high

headers

Http header Observed

cloudflare

headers

Technical finding Observed

Signal importance : medium

headers

Technology Observed

Name : cloudflare ; Version exposed : No

technology

Technical finding Observed

Signal importance : info

headers

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Technical finding : Signal importance : low

Canary statement detected To confirm

No

no_known_passive_signature_observed

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : high

headers

Technical finding Observed

Signal importance : low

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

cloudflare

headers

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Observed : Technical finding : Signal importance : low / Observed : Technical finding : Signal importance : high

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : high

headers

Technical finding Observed

Signal importance : low

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

cloudflare

headers

Technical finding Observed

Evidence : 403 ; Signal importance : medium

transparency

Security signalsObserved

Which protections or situations deserve particular attention?

To confirm : Canary statement detected : No / Not tested : Post-quantum TLS negotiation : No measurement performed

Canary statement detected To confirm

No

no_known_passive_signature_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Technical finding Observed

Signal importance : low

headers

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Technical finding Observed

Signal importance : high

headers

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Dmarc record : v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com / Observed : Technical finding : Signal importance : low

Dmarc record Observed

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

dns

Technical finding Observed

Signal importance : low

headers

Spf record Observed

v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all

dns

Technical finding Observed

Signal importance : high

headers

Canary signal Observed

Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed

canary_passive

Tls valid to Observed

2026-11-22T06:37:45+00:00

tls

Evidence record

The filter changes the display. Exports retain all evidence.

mail_transport_evidence02d7fd4e03ffb5d0b4
Observed value
{"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
mail_transport
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_finding9edaad3381a7a8edeb
Observed value
{"evidence":3,"severity":"low"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
supply_chain
Method
Public page resource and integrity-attribute inspection
Limitations
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.
modern_transport_evidencebe624e546849f75dbe
Observed value
{"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Google Trust Services, CN = WE1","protocol":"","san_count":0,"state":"observed","valid_from":"2026-08-24T05:37:50+00:00","valid_to":"2026-11-22T06:37:45+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"h3=\":443\"; ma=86400","state":"observed"},"ipv4":{"addresses":["104.21.61.8","172.67.204.132"],"state":"observed"},"ipv6":{"addresses":["2606:4700:3031::6815:3d08","2606:4700:3037::ac43:cc84"],"state":"observed"}}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
modern_transport
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dns_address85c0017f52a3022ee6
Observed value
2606:4700:3037::ac43:cc84
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
dns_address834dd17c9c7514c472
Observed value
104.21.61.8
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
dependency_providerf3b4b9d929132396ad
Observed value
{"critical":false,"hosts":["alt1.aspmx.l.google.com","alt2.aspmx.l.google.com","alt3.aspmx.l.google.com","alt4.aspmx.l.google.com","aspmx.l.google.com"],"id":"google","known":true,"name":"Google","observation_count":5,"services":["analytics","captcha","fonts","maps","video"],"tracker":false}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
mail_exchanger9a05e5d189b611a4a4
Observed value
alt1.aspmx.l.google.com
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
technology6d2c20f70043bfda51
Observed value
{"name":"cloudflare","version":"","version_exposed":false}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_finding4200c601a26842ff59
Observed value
{"evidence":null,"severity":"info"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
technology4ea3366cd51015ef6a
Observed value
{"name":"WordPress 7.1.1","version":"","version_exposed":true}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
mail_policy_flagbb1e2fde54e9e97718
Observed value
false
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
module_findingbbf1408b1d2eb17fad
Observed value
{"evidence":null,"severity":"high"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
mail_policy_flagc90b293a5bcf3976dd
Observed value
false
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
module_finding15c585f350308d0d49
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
module_finding5a0e061fe00b8f9488
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
mail_exchangerf1ddab1fa556a11696
Observed value
aspmx.l.google.com
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
technology9c37b177ff6d7707b2
Observed value
{"name":"WordPress","version":"","version_exposed":false}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dns_nameserverf2c325b500e1c63b12
Observed value
theo.ns.cloudflare.com
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
module_findingda6fd6aa7bd8c56883
Observed value
{"evidence":null,"severity":"critical"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
module_finding02e7e627e5ce3a52d0
Observed value
{"evidence":["WordPress 7.1.1"],"severity":"medium"}
Source
release_fallback
Date
2026-09-20T20:57:40+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗