PUBLIC DOSSIER / DATED OBSERVATION

koperateur.com

2026-09-20 19:12 UTC Scope completed

Compare Export PDF ↗New reading

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

7 public observations are documented in this dossier.

3 structuring public dependencies are visible.

4 useful changes are retained since the previous reading.

3 points still require confirmation or cannot be observed from outside.

Distinct evidence: 47
Retained signals: 4
Identified products: 1

General information

Domain name: koperateur.com
Reading state: Scope completed
Registered on: 2026-01-26 11:42 UTC
Registrar: Infomaniak Network SA
Stated expiration: 2030-01-26 11:42 UTC
Registry outcome: Observed

View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE

koperateur.com2026-09-20 19:12 UTC

Cabinet de conseil IT et ingénierie | Koperateur Consulting

Angles: 11/12
Evidence: 47
Signals: 4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

104.21.18.166CanadaConnected IP
172.67.182.192CanadaDNS only
2606:4700:3032::6815:12a6CanadaDNS only
2606:4700:3031::ac43:b6c0CanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Technologies and services

View all (1) →

CloudflareReferenced service

Key signals

Inspect →

Critical function concentrationView

Each finding remains linked to its scope, evidence and limitations.

Visible relationships

Explore all →

koperateur.com2606:4700:3031::ac43:b6c0resolves to

koperateur.comcloudflareuses technology

koperateur.comCloudflaredepends on provider

koperateur.commail.protonmail.chuses mail exchanger

Retained evidence

Open the record →

2026-09-20 19:12 UTChttp_header 2026-09-20 19:12 UTCmail_policy_flag 2026-09-20 19:12 UTChttp_header 2026-09-20 19:12 UTCdnssec_evidence

Domain timeline

View history →

2026-09-04 19:29 UTCRetained observation 2026-09-04 23:48 UTCRetained observation 2026-09-20 19:12 UTCRetained observation

Only retained observations are shown. No earlier event is reconstructed.

The twelve reading angles

Domain identityObserved InfrastructureReview needed Encryption and transportObserved Mail and trustObserved DNS and governanceObserved External dependenciesReview needed Observable technologiesObserved Public exposureObserved Documentary trustObserved Security signalsObserved Evolution over timeUndetermined Evidence and traceabilityReview needed

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host: koperateur.com
Registry query domain: koperateur.com
Registered on: 2026-01-26 11:42 UTC
Registrar: Infomaniak Network SA
Stated expiration: 2030-01-26 11:42 UTC
Collection outcome: Observed

Read RDAP source ↗

2026-09-20 19:12 UTC

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

4 recorded IP address(es) / 1 country estimate(s) available

104.21.18.166CanadaConnected IP
172.67.182.192CanadaDNS only
2606:4700:3032::6815:12a6CanadaDNS only
2606:4700:3031::ac43:b6c0CanadaDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

Cloudflare

Referenced service

Cloudflare response marker

2026-09-20 19:12 UTC

Clue source ↗

Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

koperateur.com2606:4700:3031::ac43:b6c0

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

4a2551ad69ebd25a0b78 →

Retained structured value

{"id":"1e82e2cacd3addc36c7f53938564db48b0bb8de0165b60a8eac4afaa85fc51a8","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3031::ac43:b6c0","state":"observed","evidence_ids":["4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.comcloudflare

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

30d41cdcd4587277c7bd →

Retained structured value

{"id":"571a9d4177d8697a141c9af44706385652227a15e0dfb57b0ea27e8c8921fa81","subject":"koperateur.com","predicate":"uses_technology","object":"cloudflare","state":"observed","evidence_ids":["30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.comCloudflare

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

cfe5c446492810f8aa27 →9df779d617943404989e →9cc6396ee04b23b878b7 →

Retained structured value

{"id":"62670bba1f22f714872ccf1d40b3632626d76d2dee6cd47fa65c253cc24c8037","subject":"koperateur.com","predicate":"depends_on_provider","object":"Cloudflare","state":"corroborated","evidence_ids":["cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac","9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979","9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.commail.protonmail.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

47ad219f7e6763d2f460 →

Retained structured value

{"id":"6ccf6d906f25cab547f4539a129c02b05800e1e1b9900ceca9b6c39d9bacddb7","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mail.protonmail.ch","state":"observed","evidence_ids":["47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.commailsec.protonmail.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

586cc29afd1d2f565bda →

Retained structured value

{"id":"9d6f41a09b9baaab212ffce6d4760a1b3b15beede07b778c16a7e563a5fc3517","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.commail.protonmail.ch

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

327333cf78a603d15b57 →

Retained structured value

{"id":"a4ec0648a88f33e6131d4d12578007b368c81b032d74a163bd52624a93cedeb6","subject":"koperateur.com","predicate":"depends_on_provider","object":"mail.protonmail.ch","state":"observed","evidence_ids":["327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.commailsec.protonmail.ch

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

cd16e7c5c8949377bd25 →

Retained structured value

{"id":"bdbee3762d72fd041bffb1a068b20359312dde434c848bdd71468c3b3fa714ff","subject":"koperateur.com","predicate":"depends_on_provider","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.comdavid.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

9cc6396ee04b23b878b7 →

Retained structured value

{"id":"beec5199a3bb51bc124c28bd9128b9fd8a2351e99f2c4b8807e13c675978fb85","subject":"koperateur.com","predicate":"uses_nameserver","object":"david.ns.cloudflare.com","state":"observed","evidence_ids":["9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.comthea.ns.cloudflare.com

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

9df779d617943404989e →

Retained structured value

{"id":"c0545d3f2aaead8c12014b632ccd8ed21ee66f4f45c5a368590c30dc62445273","subject":"koperateur.com","predicate":"uses_nameserver","object":"thea.ns.cloudflare.com","state":"observed","evidence_ids":["9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.com172.67.182.192

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

20d02003850a7f7a66ed →

Retained structured value

{"id":"c1a9a7aebf2030cc8ace0ca3d1be52ba14b41c5d6f80042a647212b0acd2d51c","subject":"koperateur.com","predicate":"resolves_to","object":"172.67.182.192","state":"observed","evidence_ids":["20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.com2606:4700:3032::6815:12a6

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

601673b6035e77d795d4 →

Retained structured value

{"id":"cdaf2a173c68e8e867f4f7ed67c58dd936c80b2c3375154f866064f105a91757","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3032::6815:12a6","state":"observed","evidence_ids":["601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

koperateur.com104.21.18.166

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

807735673bc55952f1ed →

Retained structured value

{"id":"d7b11a5ec7e504dff62b6bf9a9a3e7f2cb0ab869a421706853acdafd9ed473c0","subject":"koperateur.com","predicate":"resolves_to","object":"104.21.18.166","state":"observed","evidence_ids":["807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583"],"first_seen_at":"2026-09-20T19:12:46+00:00","last_seen_at":"2026-09-20T19:12:46+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓

All retained signals (4)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["thea.ns.cloudflare.com","david.ns.cloudflare.com"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

TLS transport

Security headers

Third-party resource control

Dependencies

Unattributed providers Some external hosts do not yet match the provider catalog.

["mail.protonmail.ch","mailsec.protonmail.ch"]

Privacy

Technology footprint

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Cloudflare"]

Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.

["mail.protonmail.ch","mailsec.protonmail.ch"]

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["thea.ns.cloudflare.com","david.ns.cloudflare.com"]

Transparency

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title: Cabinet de conseil IT et ingénierie | Koperateur Consulting
Description: Cabinet français de conseil IT et d’ingénierie : logiciel, IA, cybersécurité et infrastructure, du cadrage à l’exploitation. Maîtrise et souveraineté numérique.
Declared structured-data types: Answer, ContactPoint, EducationalOccupationalCredential, FAQPage, ImageObject, Organization, Person, PostalAddress, Question, WebPage, WebSite

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

security.txt

Response observed

https://koperateur.com/.well-known/security.txt

2026-09-20 19:12 UTC

09 / TIME CHANGES THE READING

The domain timeline

Comparison with the previous stored reading.

2026-09-20 19:12 UTC
Displayed reading
Open →
2026-09-04 23:48 UTC
Retained observation
Open →Compare
2026-09-04 19:29 UTC
Retained observation
Open →Compare

Open dedicated history →

Modified

Canary signal

{"matches":[{"name":"canary_field","source":"security_txt"}],"reason":"known_passive_signature_observed","signature_version":"2026.09.1","state":"observed"} → {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}

Disappeared

Cookie

{"http_only":true,"name":"kop_lang","same_site":"strict","secure":true} →

Modified

Http header

["default-src 'none'; script-src 'nonce-E8WKylNukqUORnegKfIbKQ==' 'strict-dynamic'; style-src 'self' 'nonce-E8WKylNukqUORnegKfIbKQ=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'"] → ["default-src 'none'; script-src 'nonce-5HnciGN73l3vpW1nRsYseg==' 'strict-dynamic'; style-src 'self' 'nonce-5HnciGN73l3vpW1nRsYseg=='; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'"]

Modified

Http header

["accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"] → ["accelerometer=(), autoplay=(self), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"]

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Export evidence JSON Full JSON report Methodology

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Technical finding : Signal importance : low / Observed : Technical finding : Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns address Observed

172.67.182.192

dns

Dmarc record Observed

v=DMARC1; p=quarantine

dns

Dns address Observed

2606:4700:3032::6815:12a6

dns

Dns address Observed

104.21.18.166

dns

20d02003850a7f7a66ed 27cbed45c14fd53f5408 47931ebf44efdadbd76a 47ad219f7e6763d2f460 4a2551ad69ebd25a0b78 56ef91218f9301d9daea 586cc29afd1d2f565bda 601673b6035e77d795d4 807735673bc55952f1ed 864c5a1c7cd3c379c201 9cc6396ee04b23b878b7 9df779d617943404989e f8ee1ee15b6a6d63c30e

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Provider dependency Observed

mailsec.protonmail.ch

provider_observed_once

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Provider dependency Observed

mail.protonmail.ch

provider_observed_once

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YE2 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YE2

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Http header Observed

DENY

headers

Http header Observed

cloudflare

headers

Http header Observed

accelerometer=(), autoplay=(self), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()

headers

Http header Observed

same-origin

headers

11bfb3e74a62ef368ad2 2eee442974fd20f86510 34cfce02704c356e3f8d 3a479f8f6896c0170528 3d89728a0b9250859c5e 4ac2335f6f0140d4ba2c 6ec3200db21f245623cf 9e522881db02d698a81f 9e696184e69f243b0530 be11843b5f75867a7657 e88b9310b49920cba6ec fa4ba54f253ce0c8b0d4

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : DMARC policy : quarantine / Observed : SPF policy : softfail

DMARC policy Observed

quarantine

mail_policy_observed

SPF policy Observed

softfail

mail_policy_observed

Mail policy flag Observed

mail_trust

DMARC policy Observed

quarantine

mail_trust

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Mail policy flag : No / Observed : DMARC policy : quarantine

Mail policy flag Observed

mail_trust

DMARC policy Observed

quarantine

mail_trust

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns address Observed

172.67.182.192

dns

Dmarc record Observed

v=DMARC1; p=quarantine

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch

Provider dependency Undetermined

Cloudflare

independent_provider_evidence_converges

Provider dependency Observed

mailsec.protonmail.ch

provider_observed_once

Provider dependency Observed

mail.protonmail.ch

provider_observed_once

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

0c5dc11a182892af697b 20d02003850a7f7a66ed 27cbed45c14fd53f5408 327333cf78a603d15b57 47931ebf44efdadbd76a 47ad219f7e6763d2f460 4a2551ad69ebd25a0b78 56ef91218f9301d9daea 586cc29afd1d2f565bda 601673b6035e77d795d4 807735673bc55952f1ed 864c5a1c7cd3c379c201 9cc6396ee04b23b878b7 9df779d617943404989e c0ce6bc3d8a83f2280fc cd16e7c5c8949377bd25 cfe5c446492810f8aa27 e43d9458950959cbd9bf f8ee1ee15b6a6d63c30e

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Http header : DENY / Observed : Http header : cloudflare

Http header Observed

DENY

headers

Http header Observed

cloudflare

headers

Http header Observed

headers

Http header Observed

same-origin

headers

Http header Observed

nosniff

headers

Technology Observed

Name : cloudflare ; Version exposed : No

technology

11bfb3e74a62ef368ad2 2eee442974fd20f86510 30d41cdcd4587277c7bd 34cfce02704c356e3f8d 3a479f8f6896c0170528 4ac2335f6f0140d4ba2c 6ec3200db21f245623cf 9e522881db02d698a81f be11843b5f75867a7657 e88b9310b49920cba6ec fa4ba54f253ce0c8b0d4

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Http header : DENY

Canary statement detected To confirm

no_known_passive_signature_observed

Http header Observed

DENY

headers

Http header Observed

cloudflare

headers

Http header Observed

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

0c5dc11a182892af697b 101442bcbb655db69755 11bfb3e74a62ef368ad2 27cbed45c14fd53f5408 2eee442974fd20f86510 34cfce02704c356e3f8d 3a479f8f6896c0170528 47931ebf44efdadbd76a 4ac2335f6f0140d4ba2c 6ec3200db21f245623cf 864c5a1c7cd3c379c201 90210d8dc4e84b0eef66 9846a919ebe56476ee6a 9e522881db02d698a81f be11843b5f75867a7657 c0ce6bc3d8a83f2280fc e43d9458950959cbd9bf e88b9310b49920cba6ec fa4ba54f253ce0c8b0d4

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Observed : Http header : DENY / Observed : Http header : cloudflare

Http header Observed

DENY

headers

Http header Observed

cloudflare

headers

Http header Observed

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Security signalsObserved

Which protections or situations deserve particular attention?

Not tested : Post-quantum TLS negotiation : No measurement performed / To confirm : Canary statement detected : No

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Canary statement detected To confirm

no_known_passive_signature_observed

Http header Observed

DENY

headers

Mail policy flag Observed

mail_trust

Http header Observed

cloudflare

headers

Http header Observed

headers

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Http header : DENY / Observed : Mail policy flag : No

Http header Observed

DENY

headers

Mail policy flag Observed

mail_trust

Http header Observed

cloudflare

headers

Dnssec evidence Observed

Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested

dnssec_depth

Http header Observed

headers

Dependency provider Observed

Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

0c5dc11a182892af697b 101442bcbb655db69755 11bfb3e74a62ef368ad2 180db483b973a3d95ba0 20d02003850a7f7a66ed 27cbed45c14fd53f5408 2eee442974fd20f86510 30d41cdcd4587277c7bd 327333cf78a603d15b57 34cfce02704c356e3f8d 3a479f8f6896c0170528 3d89728a0b9250859c5e 40e2b31190343f4f5dc8 47931ebf44efdadbd76a 47ad219f7e6763d2f460 4a2551ad69ebd25a0b78 4ac2335f6f0140d4ba2c 56ef91218f9301d9daea 586cc29afd1d2f565bda 601673b6035e77d795d4 6ec3200db21f245623cf 73f0532b06d2cbae42ca 807735673bc55952f1ed 864c5a1c7cd3c379c201 86bb0fc12e54c5454026 8995de9ec6179be245ad 90210d8dc4e84b0eef66 9846a919ebe56476ee6a 9cc6396ee04b23b878b7 9df779d617943404989e 9e522881db02d698a81f 9e696184e69f243b0530 a48140fb2f05d193607f b8b5109292dc28ce2c56 bae5f40e3785e8191fd4 bc5faf07a779f8c95aa7 be11843b5f75867a7657 bed6ce4662d60187ce4d c0ce6bc3d8a83f2280fc cd16e7c5c8949377bd25 cfe5c446492810f8aa27 e2e3d580bb168e0a5d1a e43d9458950959cbd9bf e88b9310b49920cba6ec f8ee1ee15b6a6d63c30e fa4ba54f253ce0c8b0d4 fc831c1e4054fedbf872

Evidence record

The filter changes the display. Exports retain all evidence.

spf_policy8995de9ec6179be245

Observed value: softfail
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

mail_exchanger47ad219f7e6763d2f4

Observed value: mail.protonmail.ch
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

module_finding0c5dc11a182892af69

Observed value: {"evidence":["Cloudflare"],"severity":"high"}
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: sovereignty
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_finding864c5a1c7cd3c379c2

Observed value: {"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"low"}
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

dns_nameserver9cc6396ee04b23b878

Observed value: david.ns.cloudflare.com
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

modern_transport_evidencebc5faf07a779f8c95a

Observed value: {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YE2","protocol":"","san_count":0,"state":"observed","valid_from":"2026-08-16T18:09:20+00:00","valid_to":"2026-11-14T18:09:19+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"h3=\":443\"; ma=86400","state":"observed"},"ipv4":{"addresses":["104.21.18.166","172.67.182.192"],"state":"observed"},"ipv6":{"addresses":["2606:4700:3031::ac43:b6c0","2606:4700:3032::6815:12a6"],"state":"observed"}}
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: modern_transport
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

csp_evidence86bb0fc12e54c54540

Observed value: {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":false,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":true,"trusted_types":false}
Source: release_fallback
Date: 2026-09-20T19:12:46+00:00
Collector: csp_depth
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗

Dossier overview

Summary

General information

Documentary footprint

Estimated countries of observed IPs

Technologies and services

Key signals

Visible relationships

Retained evidence

Domain timeline

The domain, without assumptions

Domain registration

Estimated countries of observed IPs

Regulatory context to determine

Visible technologies and services

Cloudflare

Visible domain relationships

Signals, context and limitations

Critical function concentration

Effective data location cannot be determined

Observed DMARC policy

Origin hosting cannot be determined

Visible provider dependencies

Network reachability

DNS and email

Email trust

TLS transport

Security headers

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Transparency

Declared public content

Reviewed external references

Documents and references

security.txt

The domain timeline

Canary signal

Cookie

Http header

Http header

Evidence, not a score

Evidence record