PUBLIC DOSSIER / DATED OBSERVATION

koperateur.com

Scope completed

Dossier overview

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

8 public observations are documented in this dossier.

3 structuring public dependencies are visible.

8 useful changes are retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Distinct evidence
48
Retained signals
4
Identified products
1

General information

Domain name
koperateur.com
Reading state
Scope completed
Registered on
Not available
Registrar
Undetermined
Stated expiration
Not available
Registry outcome
Not collected in this observation
View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE
koperateur.com2026-09-04 23:48 UTC

Title not collected

Angles
11/12
Evidence
48
Signals
4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →
FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Visible relationships

Explore all →
koperateur.com2606:4700:3031::ac43:b6c0resolves to
koperateur.comcloudflareuses technology
koperateur.comCloudflaredepends on provider
koperateur.commail.protonmail.chuses mail exchanger
The twelve reading angles

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host
koperateur.com
Registry query domain
Not collected
Registered on
Not available
Registrar
Not available
Stated expiration
Not available
Collection outcome
Not collected in this observation

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

FijiTanzaniaWestern SaharaCanadaUnited StatesKazakhstanUzbekistanPapua New GuineaIndonesiaArgentinaChileDemocratic Republic of the CongoSomaliaKenyaSudanChadHaitiDominican RepublicRussiaBahamasFalkland IslandsNorwayGreenlandFrench Southern TerritoriesTimor LesteSouth AfricaLesothoMexicoUruguayBrazilBoliviaPeruColombiaPanamaCosta RicaNicaraguaHondurasEl SalvadorGuatemalaBelizeVenezuelaGuyanaSurinameFranceEcuadorPuerto RicoJamaicaCubaZimbabweBotswanaNamibiaSenegalMaliMauritaniaBeninNigerNigeriaCameroonTogoGhanaIvory CoastGuineaGuinea-BissauLiberiaSierra LeoneBurkina FasoCentral African RepublicRepublic of the CongoGabonEquatorial GuineaZambiaMalawiMozambiqueEswatiniAngolaBurundiIsraelLebanonMadagascarPalestinian TerritoryGambiaTunisiaAlgeriaJordanUnited Arab EmiratesQatarKuwaitIraqOmanVanuatuCambodiaThailandLaosMyanmarVietnamNorth KoreaSouth KoreaMongoliaIndiaBangladeshBhutanNepalPakistanAfghanistanTajikistanKyrgyzstanTurkmenistanIranSyriaArmeniaSwedenBelarusUkrainePolandAustriaHungaryMoldovaRomaniaLithuaniaLatviaEstoniaGermanyBulgariaGreeceTurkeyAlbaniaCroatiaSwitzerlandLuxembourgBelgiumThe NetherlandsPortugalSpainIrelandNew CaledoniaSolomon IslandsNew ZealandAustraliaSri LankaChinaTaiwanItalyDenmarkUnited KingdomIcelandAzerbaijanGeorgiaPhilippinesMalaysiaBruneiSloveniaFinlandSlovakiaCzechiaEritreaJapanParaguayYemenSaudi ArabiaAntarcticaCyprusCyprusMoroccoEgyptLibyaEthiopiaDjiboutiSomaliaUgandaRwandaBosnia and HerzegovinaNorth MacedoniaSerbiaMontenegroKosovoTrinidad and TobagoSouth Sudan

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

cloudflare

Technology fingerprint

HTTP Server header

2026-09-04 23:48 UTC

Rule and scope

Historical rule

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

koperateur.com2606:4700:3031::ac43:b6c0

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"1e82e2cacd3addc36c7f53938564db48b0bb8de0165b60a8eac4afaa85fc51a8","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3031::ac43:b6c0","state":"observed","evidence_ids":["4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.comcloudflare

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"571a9d4177d8697a141c9af44706385652227a15e0dfb57b0ea27e8c8921fa81","subject":"koperateur.com","predicate":"uses_technology","object":"cloudflare","state":"observed","evidence_ids":["30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.comCloudflare

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"62670bba1f22f714872ccf1d40b3632626d76d2dee6cd47fa65c253cc24c8037","subject":"koperateur.com","predicate":"depends_on_provider","object":"Cloudflare","state":"corroborated","evidence_ids":["cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac","9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979","9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.commail.protonmail.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"6ccf6d906f25cab547f4539a129c02b05800e1e1b9900ceca9b6c39d9bacddb7","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mail.protonmail.ch","state":"observed","evidence_ids":["47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.commailsec.protonmail.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"9d6f41a09b9baaab212ffce6d4760a1b3b15beede07b778c16a7e563a5fc3517","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.commail.protonmail.ch

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"a4ec0648a88f33e6131d4d12578007b368c81b032d74a163bd52624a93cedeb6","subject":"koperateur.com","predicate":"depends_on_provider","object":"mail.protonmail.ch","state":"observed","evidence_ids":["327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.commailsec.protonmail.ch

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"bdbee3762d72fd041bffb1a068b20359312dde434c848bdd71468c3b3fa714ff","subject":"koperateur.com","predicate":"depends_on_provider","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.comdavid.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"beec5199a3bb51bc124c28bd9128b9fd8a2351e99f2c4b8807e13c675978fb85","subject":"koperateur.com","predicate":"uses_nameserver","object":"david.ns.cloudflare.com","state":"observed","evidence_ids":["9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.comthea.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"c0545d3f2aaead8c12014b632ccd8ed21ee66f4f45c5a368590c30dc62445273","subject":"koperateur.com","predicate":"uses_nameserver","object":"thea.ns.cloudflare.com","state":"observed","evidence_ids":["9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.com172.67.182.192

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"c1a9a7aebf2030cc8ace0ca3d1be52ba14b41c5d6f80042a647212b0acd2d51c","subject":"koperateur.com","predicate":"resolves_to","object":"172.67.182.192","state":"observed","evidence_ids":["20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.com2606:4700:3032::6815:12a6

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"cdaf2a173c68e8e867f4f7ed67c58dd936c80b2c3375154f866064f105a91757","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3032::6815:12a6","state":"observed","evidence_ids":["601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}
koperateur.com104.21.18.166

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

Retained structured value
{"id":"d7b11a5ec7e504dff62b6bf9a9a3e7f2cb0ab869a421706853acdafd9ed473c0","subject":"koperateur.com","predicate":"resolves_to","object":"104.21.18.166","state":"observed","evidence_ids":["807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583"],"first_seen_at":"2026-09-04T23:48:56+00:00","last_seen_at":"2026-09-04T23:48:56+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓
All retained signals (4)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["thea.ns.cloudflare.com","david.ns.cloudflare.com"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

TLS transport

Security headers

Third-party resource control

Dependencies

Unattributed providers Some external hosts do not yet match the provider catalog.

["mail.protonmail.ch","mailsec.protonmail.ch"]

Privacy

Technology footprint

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Cloudflare"]

Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.

["mail.protonmail.ch","mailsec.protonmail.ch"]

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["thea.ns.cloudflare.com","david.ns.cloudflare.com"]

Transparency

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title
Not collected
Description
Not collected
Declared structured-data types
Not documented

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

No enriched document in this observation. Historical evidence remains accessible below.

09 / TIME CHANGES THE READING

The domain timeline

Comparison with the previous stored reading.

  1. Retained observation

  2. Displayed reading

  3. Retained observation

Open dedicated history →

New

Canary signal

→ {"matches":[{"name":"canary_field","source":"security_txt"}],"reason":"known_passive_signature_observed","signature_version":"2026.09.1","state":"observed"}

New

Csp evidence

→ {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":false,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":true,"trusted_types":false}

New

Dnssec evidence

→ {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}

New

Mail transport evidence

→ {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}

New

Modern transport evidence

→ {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YE2","protocol":"","san_count":0,"state":"observed","valid_from":"2026-08-16T18:09:20+00:00","valid_to":"2026-11-14T18:09:19+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"h3=\":443\"; ma=86400","state":"observed"},"ipv4":{"addresses":["104.21.18.166","172.67.182.192"],"state":"observed"},"ipv6":{"addresses":["2606:4700:3031::ac43:b6c0","2606:4700:3032::6815:12a6"],"state":"observed"}}

Modified

Module finding

{"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"} → {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}

New

Openpgp discovery

→ {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":["https://koperateur.com/assets/koperateur-pubkey.asc"],"reason":"security_txt_encryption_observed","state":"observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}

New

Post quantum tls

→ {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Technical finding : Signal importance : low / Observed : Technical finding : Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns address Observed

172.67.182.192

dns

Dmarc record Observed

v=DMARC1; p=quarantine

dns

Dns address Observed

2606:4700:3032::6815:12a6

dns

Dns address Observed

104.21.18.166

dns

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Provider dependency Observed

mailsec.protonmail.ch

provider_observed_once

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Provider dependency Observed

mail.protonmail.ch

provider_observed_once

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YE2 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YE2

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Http header Observed

cloudflare

headers

Http header Observed

same-origin

headers

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : DMARC policy : quarantine / Observed : SPF policy : softfail

DMARC policy Observed

quarantine

mail_policy_observed

SPF policy Observed

softfail

mail_policy_observed

Mail policy flag Observed

No

mail_trust

DMARC policy Observed

quarantine

mail_trust

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Mail policy flag : No / Observed : DMARC policy : quarantine

Mail policy flag Observed

No

mail_trust

DMARC policy Observed

quarantine

mail_trust

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns address Observed

172.67.182.192

dns

Dmarc record Observed

v=DMARC1; p=quarantine

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Provider dependency Observed

mailsec.protonmail.ch

provider_observed_once

Provider dependency Observed

mail.protonmail.ch

provider_observed_once

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Http header Observed

cloudflare

headers

Http header Observed

same-origin

headers

Http header Observed

nosniff

headers

Technology Observed

Name : cloudflare ; Version exposed : No

technology

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

Observed : Canary statement detected : Yes / Observed : Http header : DENY

Canary statement detected Observed

Yes

known_passive_signature_observed

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Http header Observed

cloudflare

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Http header Observed

cloudflare

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Security signalsObserved

Which protections or situations deserve particular attention?

Observed : Canary statement detected : Yes / Not tested : Post-quantum TLS negotiation : No measurement performed

Canary statement detected Observed

Yes

known_passive_signature_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Mail policy flag Observed

No

mail_trust

Http header Observed

cloudflare

headers

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

Http header Observed

DENY

headers

Http header Observed

accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Mail policy flag Observed

No

mail_trust

Http header Observed

cloudflare

headers

Dnssec evidence Observed

Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested

dnssec_depth

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Evidence record

The filter changes the display. Exports retain all evidence.

module_findingc0ce6bc3d8a83f2280
Observed value
{"evidence":["mail.protonmail.ch","mailsec.protonmail.ch"],"severity":"medium"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
sovereignty
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
technology30d41cdcd4587277c7
Observed value
{"name":"cloudflare","version":"","version_exposed":false}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
technology
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dns_nameserver9df779d61794340498
Observed value
thea.ns.cloudflare.com
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
http_header6ec3200db21f245623
Observed value
["strict-origin-when-cross-origin"]
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
dns_address4a2551ad69ebd25a0b
Observed value
2606:4700:3031::ac43:b6c0
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
http_header11bfb3e74a62ef368a
Observed value
["max-age=63072000; includeSubDomains; preload"]
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
spf_record56ef91218f9301d9da
Observed value
v=spf1 include:_spf.protonmail.ch ~all
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
module_findinge43d9458950959cbd9
Observed value
{"evidence":["mail.protonmail.ch","mailsec.protonmail.ch"],"severity":"medium"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
http_header403effa25117bbf727
Observed value
["default-src 'none'; script-src 'nonce-E8WKylNukqUORnegKfIbKQ==' 'strict-dynamic'; style-src 'self' 'nonce-E8WKylNukqUORnegKfIbKQ=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'"]
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
http_header4ac2335f6f0140d4ba
Observed value
["require-corp"]
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
cookiee529b11141a57da498
Observed value
{"http_only":true,"name":"kop_lang","same_site":"strict","secure":true}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
privacy
Method
Visible cookies and tracker signatures on the public response
Limitations
This observation is never a GDPR audit and does not reveal every purpose or internal processing activity.
mail_exchanger586cc29afd1d2f565b
Observed value
mailsec.protonmail.ch
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dns
Method
Standard DNS resolution and record parsing
Limitations
Public DNS does not prove physical server location, contracts, or global availability.
canary_signal7aefb826f913805662
Observed value
{"matches":[{"name":"canary_field","source":"security_txt"}],"reason":"known_passive_signature_observed","signature_version":"2026.09.1","state":"observed"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
canary_passive
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
openpgp_discoverybae5f40e3785e8191f
Observed value
{"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":["https://koperateur.com/assets/koperateur-pubkey.asc"],"reason":"security_txt_encryption_observed","state":"observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
openpgp_discovery
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
module_finding9846a919ebe56476ee
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
tls_issuer3d89728a0b9250859c
Observed value
C = US, O = Let's Encrypt, CN = YE2
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
tls
Method
TLS handshake and public certificate inspection
Limitations
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.
module_finding90210d8dc4e84b0eef
Observed value
{"evidence":null,"severity":"low"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
mail_trust
Method
Public DNS and policy endpoint inspection
Limitations
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.
http_header2eee442974fd20f865
Observed value
["same-origin"]
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
headers
Method
HTTP response-header inspection
Limitations
A header being present does not prove it is optimal or that the application has no vulnerabilities.
module_finding101442bcbb655db697
Observed value
{"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"medium"}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
resilience
Method
Public observation
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
dependency_providercd16e7c5c8949377bd
Observed value
{"critical":false,"hosts":["mailsec.protonmail.ch"],"id":"host-795bfed2e90f","known":false,"name":"mailsec.protonmail.ch","observation_count":1,"services":["unknown"],"tracker":false}
Source
release_fallback
Date
2026-09-04T23:48:56+00:00
Collector
dependencies
Method
Public HTML/resource dependency extraction and provider matching
Limitations
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.
An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗