PUBLIC DOSSIER / DATED OBSERVATION
Scope completed
Documented angles
Reading coverage, not a security grade.
6 public observations are documented in this dossier.
3 structuring public dependencies are visible.
No useful change is retained since the previous reading.
2 points still require confirmation or cannot be observed from outside.
Domain registration, not the website or company creation date.
Title not collected
Preview of the retained dossier, not a screenshot of the target.
View observed content →Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Each finding remains linked to its scope, evidence and limitations.
Only retained observations are shown. No earlier event is reconstructed.
02 / IDENTITY & CONTEXT
Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.
Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.
The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.
Applicability requires review; not a legal determination.
Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
The applicable jurisdiction requires additional public or organisational evidence.
03 / TECHNICAL CLUES
A resource or response header is a public clue, not a server inspection.
HTTP Server header
2026-09-04 19:29 UTC
Historical rule
Does not establish effective execution or a server technology that is not exposed.
04 / WHAT CONNECTS
Technical relationships, not ownership links or assumed partnerships.
resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"1e82e2cacd3addc36c7f53938564db48b0bb8de0165b60a8eac4afaa85fc51a8","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3031::ac43:b6c0","state":"observed","evidence_ids":["4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}uses technology
Recorded technical relationship, not a partnership or ownership link.
{"id":"571a9d4177d8697a141c9af44706385652227a15e0dfb57b0ea27e8c8921fa81","subject":"koperateur.com","predicate":"uses_technology","object":"cloudflare","state":"observed","evidence_ids":["30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"62670bba1f22f714872ccf1d40b3632626d76d2dee6cd47fa65c253cc24c8037","subject":"koperateur.com","predicate":"depends_on_provider","object":"Cloudflare","state":"corroborated","evidence_ids":["cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac","9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979","9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}uses mail exchanger
Recorded technical relationship, not a partnership or ownership link.
{"id":"6ccf6d906f25cab547f4539a129c02b05800e1e1b9900ceca9b6c39d9bacddb7","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mail.protonmail.ch","state":"observed","evidence_ids":["47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}uses mail exchanger
Recorded technical relationship, not a partnership or ownership link.
{"id":"9d6f41a09b9baaab212ffce6d4760a1b3b15beede07b778c16a7e563a5fc3517","subject":"koperateur.com","predicate":"uses_mail_exchanger","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"a4ec0648a88f33e6131d4d12578007b368c81b032d74a163bd52624a93cedeb6","subject":"koperateur.com","predicate":"depends_on_provider","object":"mail.protonmail.ch","state":"observed","evidence_ids":["327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"bdbee3762d72fd041bffb1a068b20359312dde434c848bdd71468c3b3fa714ff","subject":"koperateur.com","predicate":"depends_on_provider","object":"mailsec.protonmail.ch","state":"observed","evidence_ids":["cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"beec5199a3bb51bc124c28bd9128b9fd8a2351e99f2c4b8807e13c675978fb85","subject":"koperateur.com","predicate":"uses_nameserver","object":"david.ns.cloudflare.com","state":"observed","evidence_ids":["9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"c0545d3f2aaead8c12014b632ccd8ed21ee66f4f45c5a368590c30dc62445273","subject":"koperateur.com","predicate":"uses_nameserver","object":"thea.ns.cloudflare.com","state":"observed","evidence_ids":["9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"c1a9a7aebf2030cc8ace0ca3d1be52ba14b41c5d6f80042a647212b0acd2d51c","subject":"koperateur.com","predicate":"resolves_to","object":"172.67.182.192","state":"observed","evidence_ids":["20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"cdaf2a173c68e8e867f4f7ed67c58dd936c80b2c3375154f866064f105a91757","subject":"koperateur.com","predicate":"resolves_to","object":"2606:4700:3032::6815:12a6","state":"observed","evidence_ids":["601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"d7b11a5ec7e504dff62b6bf9a9a3e7f2cb0ab869a421706853acdafd9ed473c0","subject":"koperateur.com","predicate":"resolves_to","object":"104.21.18.166","state":"observed","evidence_ids":["807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583"],"first_seen_at":"2026-09-04T19:29:35+00:00","last_seen_at":"2026-09-04T19:29:35+00:00"}05 / POINTS TO EXAMINE
Cloudflare is associated with 3 critical function(s) or observations in the visible scope.
This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.
Inspect evidence ↓A provider headquarters, an IP address, or a CDN is not proof of data location.
This signal alone does not prove actual alignment for every mail flow.
Edge presence must not be treated as origin hosting.
Provider visibility does not describe contracts, subprocessors, or actual processing location.
Single DNS provider The name servers appear to belong to the same provider domain.
["david.ns.cloudflare.com","thea.ns.cloudflare.com"]
CAA not published No authorized certificate authority is declared in DNS.
DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.
{"status":"not_tested","reason":"No external validating resolver is used; DS validation is intentionally not inferred."}TLS reporting not declared No TLS-RPT record was observed.
MTA-STS not declared The MTA-STS version DNS signal was not observed.
Unattributed providers Some external hosts do not yet match the provider catalog.
["mail.protonmail.ch","mailsec.protonmail.ch"]
Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.
["Cloudflare"]
Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.
["mail.protonmail.ch","mailsec.protonmail.ch"]
Concentrated DNS All observed name servers appear to depend on the same operator domain.
["david.ns.cloudflare.com","thea.ns.cloudflare.com"]
Full structured details remain in the JSON report. Missing information is not reconstructed.
06 / THE INSPECTED PAGE
The target’s JavaScript is not executed. A website declaration does not certify its identity.
07 / REVIEWED REFERENCES
Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.
No reviewed external reference recorded.
08 / PUBLIC RESOURCES
No enriched document in this observation. Historical evidence remains accessible below.
09 / TIME CHANGES THE READING
Initial reference point for this reading.
Retained observation
Retained observation
Displayed reading
10 / KEEP THE READING VERIFIABLE
The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.
What is being observed and which public markers identify it?
Observed : Technical finding : Signal importance : low / Observed : Dns address : 172.67.182.192
Technical finding Observed
Signal importance : low
dns
Dns address Observed
172.67.182.192
dns
Dmarc record Observed
v=DMARC1; p=quarantine
dns
Dns address Observed
2606:4700:3032::6815:12a6
dns
Dns address Observed
104.21.18.166
dns
Dns nameserver Observed
thea.ns.cloudflare.com
dns
Which public infrastructures appear to serve the service?
Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Provider dependency Observed
mailsec.protonmail.ch
provider_observed_once
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Provider dependency Observed
mail.protonmail.ch
provider_observed_once
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
How are public exchanges protected and presented?
Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YE2 / Not tested : Post-quantum TLS negotiation : No measurement performed
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YE2
certificate_observed
Post-quantum TLS negotiation Not tested
No measurement performed
pq_tls_client_not_enabled
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Which mail protections and policies are publicly observable?
Observed : DMARC policy : quarantine / Observed : SPF policy : softfail
DMARC policy Observed
quarantine
mail_policy_observed
SPF policy Observed
softfail
mail_policy_observed
Mail policy flag Observed
No
mail_trust
DMARC policy Observed
quarantine
mail_trust
Technical finding Observed
Signal importance : low
dns
Dns address Observed
172.67.182.192
dns
Which public DNS controls are visible and what remains undetermined?
Observed : Mail policy flag : No / Observed : DMARC policy : quarantine
Mail policy flag Observed
No
mail_trust
DMARC policy Observed
quarantine
mail_trust
Technical finding Observed
Signal importance : low
dns
Dns address Observed
172.67.182.192
dns
Dmarc record Observed
v=DMARC1; p=quarantine
dns
Mail policy flag Observed
No
mail_trust
Which external domains, providers or resources does the site visibly depend on?
Undetermined : Provider dependency : Cloudflare / Observed : Provider dependency : mailsec.protonmail.ch
Provider dependency Undetermined
Cloudflare
independent_provider_evidence_converges
Provider dependency Observed
mailsec.protonmail.ch
provider_observed_once
Provider dependency Observed
mail.protonmail.ch
provider_observed_once
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
Technical finding Observed
Signal importance : low
dns
Dependency provider Observed
Critical : Yes ; Hosts : cloudflare.com ; david.ns.cloudflare.com ; thea.ns.cloudflare.com ; Id : cloudflare ; Known : Yes ; Name : Cloudflare ; Observation count : 3 ; Services : cdn ; security ; Tracker : No
dependencies
Which technologies can reasonably be inferred from public traces?
Observed : Http header : default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self' / Observed : Http header : DENY
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Http header Observed
nosniff
headers
Which elements, endpoints or artefacts are publicly exposed?
Not tested : Canary statement detected : No measurement performed / Observed : Http header : default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
Canary statement detected Not tested
No measurement performed
canary_detection_not_enabled
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Which public documents and transparency mechanisms are present?
Observed : Http header : default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self' / Observed : Http header : DENY
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Http header Observed
cloudflare
headers
Http header Observed
same-origin
headers
Technical finding Observed
Signal importance : low
dns
Which protections or situations deserve particular attention?
Not tested : Post-quantum TLS negotiation : No measurement performed / Not tested : Canary statement detected : No measurement performed
Post-quantum TLS negotiation Not tested
No measurement performed
pq_tls_client_not_enabled
Canary statement detected Not tested
No measurement performed
canary_detection_not_enabled
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Mail policy flag Observed
No
mail_trust
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Http header : default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self' / Observed : Http header : DENY
Http header Observed
default-src 'none'; script-src 'nonce-v8jap+dYXTm7GQ6hNB3tRA==' 'strict-dynamic'; style-src 'self' 'nonce-v8jap+dYXTm7GQ6hNB3tRA=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'
headers
Http header Observed
DENY
headers
Http header Observed
accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()
headers
Mail policy flag Observed
No
mail_trust
Http header Observed
cloudflare
headers
Dependency provider Observed
Critical : No ; Hosts : mail.protonmail.ch ; Id : host-d87c7268dbc2 ; Known : No ; Name : mail.protonmail.ch ; Observation count : 1 ; Services : unknown ; Tracker : No
dependencies
The filter changes the display. Exports retain all evidence.
9cc6396ee04b23b878Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.
Report an error or request clarification ↗