# Scanapse - 0bla.com

Mesuré : 2026-09-04T22:03:56+00:00

## Résumé
- 5 observations publiques sont documentées dans ce dossier.
- 2 dépendances publiques structurantes sont visibles.
- 2 évolutions utiles sont retenues depuis la lecture précédente.
- 2 points restent à confirmer ou ne sont pas observables de l’extérieur.

## Évolution
- Modifié : Http header
- Modifié : Module finding

## Preuves
_preuve technique horodatée et vérifiable_
- caa_record - {"flags":0,"tag":"issue","value":"ssl.com"}
- tls_valid_to - 2026-11-14T14:07:24+00:00
- module_finding - {"evidence":[{"host":"mta-gw.infomaniak.ch","priority":5}],"severity":"low"}
- dns_address - 2606:4700:3031::ac43:831e
- caa_record - {"flags":0,"tag":"iodef","value":"mailto:security@0bla.com"}
- module_finding - {"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"low"}
- dns_address - 172.67.131.30
- http_header - ["max-age=63072000; includeSubDomains; preload"]
- caa_record - {"flags":0,"tag":"issuewild","value":"pki.goog; cansignhttpexchanges=yes"}
- mail_exchanger - mta-gw.infomaniak.ch
- dependency_provider - {"critical":true,"hosts":["cloudflare.com","david.ns.cloudflare.com","thea.ns.cloudflare.com"],"id":"cloudflare","known":true,"name":"Cloudflare","observation_count":3,"services":["cdn","security"],"tracker":false}
- dependency_provider - {"critical":false,"hosts":["mta-gw.infomaniak.ch"],"id":"infomaniak","known":true,"name":"Infomaniak","observation_count":1,"services":["dns","hosting","mail"],"tracker":false}
- dmarc_policy - reject
- http_header - ["same-origin"]
- caa_record - {"flags":0,"tag":"issuewild","value":"ssl.com"}
- caa_record - {"flags":0,"tag":"issuewild","value":"letsencrypt.org"}
- mail_policy_flag - 
- tls_issuer - C = US, O = Let's Encrypt, CN = YE2
- module_finding - {"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
- caa_record - {"flags":0,"tag":"issuewild","value":"digicert.com; cansignhttpexchanges=yes"}
- module_finding - {"evidence":null,"severity":"low"}
- caa_record - {"flags":0,"tag":"issue","value":"pki.goog; cansignhttpexchanges=yes"}
- caa_record - {"flags":0,"tag":"issue","value":"digicert.com; cansignhttpexchanges=yes"}
- http_header - ["DENY"]
- http_header - ["accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"]
- technology - {"name":"cloudflare","version":"","version_exposed":false}
- caa_record - {"flags":0,"tag":"issue","value":"sectigo.com"}
- module_finding - {"evidence":null,"severity":"low"}
- module_finding - {"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"medium"}
- spf_policy - hardfail
- dns_address - 104.21.9.251
- dmarc_record - v=DMARC1; p=reject;
- http_header - ["default-src 'none'; script-src 'self' 'nonce-6DRbkX9AG5HKlbENqeuAtw=='; style-src 'self' 'nonce-6DRbkX9AG5HKlbENqeuAtw=='; font-src 'self'; img-src 'self' data: https://lh3.googleusercontent.com; connect-src 'self'; manifest-src 'self'; form-action 'self' https://formspree.io; frame-ancestors 'none'; base-uri 'none'; object-src 'none';"]
- http_header - ["same-origin"]
- caa_record - {"flags":0,"tag":"issuewild","value":"comodoca.com"}
- http_header - ["nosniff"]
- module_finding - {"evidence":{"provider":"Cloudflare","share":75},"severity":"medium"}
- module_finding - {"evidence":"75%","severity":"medium"}
- dns_nameserver - david.ns.cloudflare.com
- mail_policy_flag - 
- mail_policy_flag - 
- cookie - {"http_only":true,"name":"id","same_site":"lax","secure":true}
- caa_record - {"flags":0,"tag":"issue","value":"letsencrypt.org"}
- http_header - ["cloudflare"]
- dns_address - 2606:4700:3032::6815:9fb
- spf_record - v=spf1 include:spf.infomaniak.ch -all
- caa_record - {"flags":0,"tag":"issue","value":"comodoca.com"}
- dns_nameserver - thea.ns.cloudflare.com
- http_header - ["strict-origin-when-cross-origin"]
- http_header - ["require-corp"]
- caa_record - {"flags":0,"tag":"issuewild","value":"sectigo.com"}
- module_finding - {"evidence":["Cloudflare"],"severity":"high"}

## Limites
- public_edge_does_not_reveal_origin
- provider_metadata_does_not_prove_processing_location
- pq_tls_client_not_enabled
- canary_detection_not_enabled