# Scanapse - divinexa.com

Mesuré : 2026-09-06T01:56:47+00:00

## Résumé
- 7 observations publiques sont documentées dans ce dossier.
- 2 dépendances publiques structurantes sont visibles.
- 9 évolutions utiles sont retenues depuis la lecture précédente.
- 2 points restent à confirmer ou ne sont pas observables de l’extérieur.

## Évolution
- Nouveau : Canary signal
- Nouveau : Csp evidence
- Modifié : Dmarc record
- Nouveau : Dnssec evidence
- Nouveau : Mail transport evidence
- Nouveau : Modern transport evidence
- Modifié : Module finding
- Nouveau : Openpgp discovery
- Nouveau : Post quantum tls

## Preuves
_preuve technique horodatée et vérifiable_
- dependency_provider - {"critical":false,"hosts":["roastmyurl.com"],"id":"host-1b4f6aaadb14","known":false,"name":"roastmyurl.com","observation_count":1,"services":["unknown"],"tracker":false}
- post_quantum_tls - {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
- dns_nameserver - thea.ns.cloudflare.com
- http_header - ["same-origin"]
- caa_record - {"flags":0,"tag":"issuewild","value":"sectigo.com"}
- module_finding - {"evidence":"85.7%","severity":"medium"}
- caa_record - {"flags":0,"tag":"issue","value":"comodoca.com"}
- dns_address - 104.21.33.196
- module_finding - {"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"medium"}
- mail_transport_evidence - {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":{"max_age":"86400","mode":"testing","mx":["*.mx.cloudflare.net"],"version":"STSv1"},"policy_state":"observed","records":["v=STSv1; id=20230615T153000;"],"state":"observed"},"tls_rpt":{"records":["v=TLSRPTv1; rua=mailto:tlsrpt@divinexa.com"],"state":"observed"}}
- dnssec_evidence - {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}
- http_header - ["max-age=63072000; includeSubDomains; preload"]
- dns_address - 2606:4700:3032::6815:21c4
- module_finding - {"evidence":["roastmyurl.com"],"severity":"medium"}
- http_header - ["nosniff"]
- mail_policy_flag - 1
- module_finding - {"evidence":["roastmyurl.com"],"severity":"medium"}
- dns_address - 172.67.149.25
- mail_exchanger - route1.mx.cloudflare.net
- http_header - ["same-origin"]
- caa_record - {"flags":0,"tag":"issuewild","value":"digicert.com; cansignhttpexchanges=yes"}
- http_header - ["require-corp"]
- modern_transport_evidence - {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Google Trust Services, CN = WE1","protocol":"","san_count":0,"state":"observed","valid_from":"2026-07-31T18:48:13+00:00","valid_to":"2026-10-29T19:38:43+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"h3=\":443\"; ma=86400","state":"observed"},"ipv4":{"addresses":["104.21.33.196","172.67.149.25"],"state":"observed"},"ipv6":{"addresses":["2606:4700:3032::6815:21c4","2606:4700:3032::ac43:9519"],"state":"observed"}}
- http_header - ["strict-origin-when-cross-origin"]
- tls_valid_to - 2026-10-29T19:38:43+00:00
- caa_record - {"flags":0,"tag":"issuewild","value":"pki.goog; cansignhttpexchanges=yes"}
- module_finding - {"evidence":["david.ns.cloudflare.com","thea.ns.cloudflare.com"],"severity":"low"}
- openpgp_discovery - {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":["https://divinexa.com/assets/koperateur-pubkey.asc"],"reason":"security_txt_encryption_observed","state":"observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
- module_finding - {"evidence":["roastmyurl.com"],"severity":"medium"}
- tls_issuer - C = US, O = Google Trust Services, CN = WE1
- dns_address - 2606:4700:3032::ac43:9519
- spf_record - v=spf1 include:_spf.mx.cloudflare.net -all
- caa_record - {"flags":0,"tag":"issue","value":"digicert.com; cansignhttpexchanges=yes"}
- caa_record - {"flags":0,"tag":"issue","value":"sectigo.com"}
- technology - {"name":"cloudflare","version":"","version_exposed":false}
- spf_policy - hardfail
- caa_record - {"flags":0,"tag":"issue","value":"letsencrypt.org"}
- http_header - ["accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"]
- csp_evidence - {"enforced":true,"frame_ancestors":true,"hash_present":true,"nonce_present":false,"object_src":true,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":false,"trusted_types":false}
- dependency_provider - {"critical":true,"hosts":["cloudflare.com","david.ns.cloudflare.com","route1.mx.cloudflare.net","route2.mx.cloudflare.net","route3.mx.cloudflare.net","thea.ns.cloudflare.com"],"id":"cloudflare","known":true,"name":"Cloudflare","observation_count":6,"services":["cdn","security"],"tracker":false}
- http_header - ["cloudflare"]
- module_finding - {"evidence":["Cloudflare"],"severity":"high"}
- mail_policy_flag - 1
- mail_exchanger - route2.mx.cloudflare.net
- http_header - ["DENY"]
- module_finding - {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
- caa_record - {"flags":0,"tag":"issuewild","value":"ssl.com"}
- mail_policy_flag - 
- dns_nameserver - david.ns.cloudflare.com
- caa_record - {"flags":0,"tag":"issue","value":"ssl.com"}
- dmarc_record - v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;
- caa_record - {"flags":0,"tag":"issuewild","value":"letsencrypt.org"}
- canary_signal - {"matches":[{"name":"canary_field","source":"security_txt"}],"reason":"known_passive_signature_observed","signature_version":"2026.09.1","state":"observed"}
- http_header - ["default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"]
- mail_exchanger - route3.mx.cloudflare.net
- caa_record - {"flags":0,"tag":"issue","value":"pki.goog; cansignhttpexchanges=yes"}
- dmarc_policy - reject
- module_finding - {"evidence":{"provider":"Cloudflare","share":85.7},"severity":"medium"}
- caa_record - {"flags":0,"tag":"issuewild","value":"comodoca.com"}
- cookie - {"http_only":true,"name":"dx_session","same_site":"lax","secure":true}

## Limites
- public_edge_does_not_reveal_origin
- provider_metadata_does_not_prove_processing_location