Domain identityObserved
What is being observed and which public markers identify it?
Observed : Technical finding : Signal importance : low / Observed : Technical finding : Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Dns address Observed
172.67.182.192
dns
Dmarc record Observed
v=DMARC1; p=quarantine
dns
Dns address Observed
2606:4700:3032::6815:12a6
dns
Dns address Observed
104.21.18.166
dns
InfrastructureReview needed
Which public infrastructures appear to serve the service?
Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Provider dependency Observed
mailsec.protonmail.ch
provider_observed_once
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Provider dependency Observed
mail.protonmail.ch
provider_observed_once
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
Encryption and transportObserved
How are public exchanges protected and presented?
Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YE2 / Not tested : Post-quantum TLS negotiation : No measurement performed
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YE2
certificate_observed
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Mail and trustObserved
Which mail protections and policies are publicly observable?
Observed : DMARC policy : quarantine / Observed : SPF policy : softfail
DMARC policy Observed
quarantine
mail_policy_observed
SPF policy Observed
softfail
mail_policy_observed
Mail policy flag Observed
No
mail_trust
DMARC policy Observed
quarantine
mail_trust
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
DNS and governanceObserved
Which public DNS controls are visible and what remains undetermined?
Observed : Mail policy flag : No / Observed : DMARC policy : quarantine
Mail policy flag Observed
No
mail_trust
DMARC policy Observed
quarantine
mail_trust
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Dns address Observed
172.67.182.192
dns
Dmarc record Observed
v=DMARC1; p=quarantine
dns
External dependenciesReview needed
Which external domains, providers or resources does the site visibly depend on?
Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Provider dependency Observed
mailsec.protonmail.ch
provider_observed_once
Provider dependency Observed
mail.protonmail.ch
provider_observed_once
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Observable technologiesObserved
Which technologies can reasonably be inferred from public traces?
Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Http header Observed
nosniff
headers
Technology Observed
Name : cloudflare ; Version exposed : No
technology
Public exposureObserved
Which elements, endpoints or artefacts are publicly exposed?
Observed : Canary statement detected : Yes / Observed : Http header : DENY
Canary statement detected Observed
Yes
known_passive_signature_observed
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Technical finding Observed
Signal importance : low
dns
Documentary trustObserved
Which public documents and transparency mechanisms are present?
Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Security signalsObserved
Which protections or situations deserve particular attention?
Observed : Canary statement detected : Yes / Not tested : Post-quantum TLS negotiation : No measurement performed
Canary statement detected Observed
Yes
known_passive_signature_observed
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Mail policy flag Observed
No
mail_trust
Http header Observed
cloudflare
headers
Evolution over timeUndetermined
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Evidence and traceabilityReview needed
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Http header : DENY / Observed : Http header : accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Mail policy flag Observed
No
mail_trust
Http header Observed
cloudflare
headers
Dnssec evidence Observed
Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested
dnssec_depth
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
The filter changes the display. Exports retain all evidence.