# Scanapse - darfoufa.com

Mesuré : 2026-09-04T19:34:09+00:00

## Résumé
- 3 observations publiques sont documentées dans ce dossier.
- 1 dépendances publiques structurantes sont visibles.
- Aucune évolution utile n’est retenue depuis la lecture précédente.
- 2 points restent à confirmer ou ne sont pas observables de l’extérieur.

## Évolution
- Point de référence initial ou aucune évolution utile retenue

## Preuves
_preuve technique horodatée et vérifiable_
- technology - {"name":"Apache","version":"","version_exposed":false}
- dependency_provider - {"critical":true,"hosts":["dns105.ovh.net","mx1.mail.ovh.net","mx2.mail.ovh.net","mx3.mail.ovh.net","ns105.ovh.net"],"id":"ovhcloud","known":true,"name":"OVHcloud","observation_count":5,"services":["cloud","dns","hosting"],"tracker":false}
- http_header - ["max-age=63072000; includeSubDomains; preload"]
- tls_issuer - C = US, O = Let's Encrypt, CN = YR2
- mail_exchanger - mx2.mail.ovh.net
- module_finding - {"evidence":null,"severity":"low"}
- http_header - ["nosniff"]
- http_header - ["same-origin"]
- module_finding - {"evidence":null,"severity":"low"}
- module_finding - {"evidence":null,"severity":"high"}
- mail_policy_flag - 
- module_finding - {"evidence":null,"severity":"low"}
- http_header - ["DENY"]
- module_finding - {"evidence":["dns105.ovh.net","ns105.ovh.net"],"severity":"medium"}
- http_header - ["strict-origin-when-cross-origin"]
- mail_exchanger - mx1.mail.ovh.net
- module_finding - {"evidence":["dns105.ovh.net","ns105.ovh.net"],"severity":"low"}
- mail_exchanger - mx3.mail.ovh.net
- module_finding - {"evidence":null,"severity":"medium"}
- dns_nameserver - ns105.ovh.net
- http_header - ["accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), usb=()"]
- http_header - ["default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: https:; style-src 'self'; script-src 'self'; connect-src 'self'; font-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content"]
- http_header - ["same-origin"]
- mail_policy_flag - 
- dns_address - 2001:1600::aaaa:0:0:80:5b
- mail_policy_flag - 
- http_header - ["Apache"]
- dns_nameserver - dns105.ovh.net
- module_finding - {"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
- spf_policy - hardfail
- dns_address - 185.125.27.197
- module_finding - {"evidence":null,"severity":"info"}
- spf_record - v=spf1 include:mx.ovh.com -all
- tls_valid_to - 2026-11-06T17:51:10+00:00

## Limites
- public_edge_does_not_reveal_origin
- provider_metadata_does_not_prove_processing_location
- pq_tls_client_not_enabled
- canary_detection_not_enabled