{ "schema_version": "2.0", "engine_version": "2.9.2.1", "pattern_version": "2026.09.4", "scan_id": "9e2ec01c1d2b601816753537", "domain": "scanapse.com", "scanned_at": "2026-09-05T23:59:12+00:00", "duration_ms": 583.61, "entity": { "id": "2bea11b1a78ef694fe639c4e237907487d32191c6fc28be1f2b25c48a418ee39", "display_name": "scanapse.com", "slug": "scanapse-com", "entity_type": "domain_subject", "auto_created": true, "primary_asset": "scanapse.com" }, "scope": { "mode": "passive", "coverage": "full", "access_level": "full", "access_reason": "public_document_available", "requests": 2, "homepage_only": true, "javascript_executed": false, "ports_scanned": false, "private_networks_blocked": true, "protection_bypassed": false, "max_body_bytes": 1572864, "scan_budget_seconds": 24, "budget_exhausted": false, "transport": "curl_with_socket_fallback" }, "trust_profile": { "methodology_version": "2.1.0", "knowledge_coverage": 84, "dimensions": { "security": { "quality": 95, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 3, "unknown_count": 0 }, "privacy": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "dependencies_control": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 2 }, "resilience": { "quality": 90, "coverage": 35, "band": "non_conclusive", "conclusive": false, "evidence_count": 1, "unknown_count": 1 }, "transparency": { "quality": 100, "coverage": 70, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "mail": { "quality": 82, "coverage": 100, "band": "favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 } }, "global": { "quality": 95, "coverage": 84, "secondary": true } }, "signals": [ { "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480", "key": "data_location_unknown", "category": "dependencies_control", "importance": "medium", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Localisation effective des données non déterminable", "en": "Effective data location cannot be determined" }, "explanation": { "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.", "en": "Public observations cannot establish where data is actually processed or stored." }, "limitations": { "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.", "en": "A provider headquarters, an IP address, or a CDN is not proof of data location." }, "evidence_ids": [], "change_status": "stable" }, { "id": "577b0d66316176acdcf99b9b23932beb9007ae00708d209c140c9dd73b80f55d", "key": "mail_dmarc_policy", "category": "mail", "importance": "medium", "direction": "favorable", "state": "observed", "title": { "fr": "Politique DMARC observée", "en": "Observed DMARC policy" }, "explanation": { "fr": "La politique DMARC publiée est reject.", "en": "The published DMARC policy is reject." }, "limitations": { "fr": "Ce signal ne prouve pas à lui seul l’alignement réel de tous les flux de messagerie.", "en": "This signal alone does not prove actual alignment for every mail flow." }, "evidence_ids": [ "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e" ], "change_status": "stable" }, { "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9", "key": "origin_host_unknown", "category": "dependencies_control", "importance": "low", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Hébergement d’origine non déterminable", "en": "Origin hosting cannot be determined" }, "explanation": { "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.", "en": "An edge service or reverse proxy can hide origin infrastructure." }, "limitations": { "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.", "en": "Edge presence must not be treated as origin hosting." }, "evidence_ids": [], "change_status": "stable" }, { "id": "d2747adb5a9e7707dacc9203d3748166530b9f2f64ac28ad9860e2841bf1e6f5", "key": "visible_provider_dependencies", "category": "dependencies_control", "importance": "low", "direction": "neutral", "state": "corroborated", "title": { "fr": "Dépendances fournisseurs visibles", "en": "Visible provider dependencies" }, "explanation": { "fr": "1 fournisseur(s) sont reliés au périmètre observable.", "en": "1 provider(s) are linked to the observable scope." }, "limitations": { "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.", "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location." }, "evidence_ids": [ "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4", "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3", "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220" ], "change_status": "stable" } ], "changes": [ { "id": "1bdc6c3cbd05ce01baf51bc7b5beb7ef439f3a7372c76f3b5929f764473b876c", "key": "canary_signal|scanapse.com|canary_detection", "status": "stable", "direction": "neutral", "before": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "after": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "volatile_filtered": false }, { "id": "0a2fe9e9e20c6deabf79943f2e4faa21d5b511518988a6dcc1a9b57005e6809e", "key": "cookie|scanapse.com|sets_cookie", "status": "stable", "direction": "neutral", "before": { "http_only": true, "name": "scanapse_csrf", "same_site": "strict", "secure": true }, "after": { "http_only": true, "name": "scanapse_csrf", "same_site": "strict", "secure": true }, "volatile_filtered": false }, { "id": "d246ba0b26ba62062d234e79866d6f17ff827c2813dd8cdc88c30ab7b0a28aa0", "key": "csp_evidence|scanapse.com|csp_depth", "status": "stable", "direction": "neutral", "before": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "volatile_filtered": false }, { "id": "bf70d5e4d8502bdbdb64bee80de1c6300c412bb10343bdb0a3625ef179d91a11", "key": "dependency_provider|scanapse.com|depends_on_provider|infomaniak", "status": "stable", "direction": "neutral", "before": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "after": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "volatile_filtered": false }, { "id": "2633af0af97693cb982efb98cb18308f438888df26ab91473ad771a83476822c", "key": "dmarc_policy|scanapse.com|dmarc_policy", "status": "stable", "direction": "neutral", "before": "reject", "after": "reject", "volatile_filtered": false }, { "id": "c73c9c7fe3537112aa50033d70b6ec5a5a17577e8399a0d03ad720fb69b3acf0", "key": "dmarc_record|scanapse.com|publishes_dmarc", "status": "stable", "direction": "neutral", "before": "v=DMARC1; p=reject;", "after": "v=DMARC1; p=reject;", "volatile_filtered": false }, { "id": "18e318731077b576f24e3290957855612d23ecc214ae0d614b8d34ab1c5975b8", "key": "dns_address|scanapse.com|resolves_to|318e9cf963fb165fdc2de03617f1efb41350158ea288acaf76a859332979a037", "status": "stable", "direction": "neutral", "before": "2001:1600::aaaa:0:0:80:5a", "after": "2001:1600::aaaa:0:0:80:5a", "volatile_filtered": false }, { "id": "ed1903b507ff4f5aec3950dd89e0c1eb41170727c755e0fe4f856585c7f2856d", "key": "dns_address|scanapse.com|resolves_to|9254f12805b9ef4ce7c06191e30b33ae7969895cb3fdd09f3acef7398be8c2ea", "status": "stable", "direction": "neutral", "before": "185.125.27.195", "after": "185.125.27.195", "volatile_filtered": false }, { "id": "02f8a80cd167279969a6040ea031a5ee0bf28b6b9e81ced48f4331b026b7982e", "key": "dns_nameserver|scanapse.com|uses_nameserver|5ee5461b9c7a233e005f020d0190f25617e0b7f4bb88bf523f18e71c14195ad4", "status": "stable", "direction": "neutral", "before": "ns12.infomaniak.ch", "after": "ns12.infomaniak.ch", "volatile_filtered": false }, { "id": "b8bd8c572bfb10153317f33d3db53c0453ef68e1afb4528be55c61fa7c45c2a7", "key": "dns_nameserver|scanapse.com|uses_nameserver|aae80aee661823bebfebdedccd1010eff3a0ebba4d0cfdb7fa764bc19621449d", "status": "stable", "direction": "neutral", "before": "ns11.infomaniak.ch", "after": "ns11.infomaniak.ch", "volatile_filtered": false }, { "id": "d275033d69a14f9b7a2c959e55357a0bd4f04125ab1583065344d114ebbf2faa", "key": "dnssec_evidence|scanapse.com|dnssec_depth", "status": "stable", "direction": "neutral", "before": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "volatile_filtered": false }, { "id": "33cbfaeba963e07bee3a209a974713d3b9f321298855ae63a67600c9d9f3a6bd", "key": "http_header|scanapse.com|content-security-policy", "status": "stable", "direction": "neutral", "before": [ "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-HWMs3oRofMadVwTIeVx3EmXv'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content" ], "after": [ "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-0XRinmPZT1wx5amghHVhH7g0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content" ], "volatile_filtered": true }, { "id": "0e15968424228cffcd06d1d87053e1fe19be57d422420af26fe54d2454bb4509", "key": "http_header|scanapse.com|cross-origin-embedder-policy", "status": "stable", "direction": "neutral", "before": [ "require-corp" ], "after": [ "require-corp" ], "volatile_filtered": false }, { "id": "5439564bfa4981fe318ad5aeefe554f42ed3fc8b7f916112bcefd2d007401f5a", "key": "http_header|scanapse.com|cross-origin-opener-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "4bf7755f2c3cf43225cbab45985ebf4e87bc7ebec5c3e6c1a7640ab42acfa395", "key": "http_header|scanapse.com|cross-origin-resource-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "95c9f1ebba8703f0952363e05e8a7cb16612420b31357bfdbfce3ae5a863a6a5", "key": "http_header|scanapse.com|permissions-policy", "status": "stable", "direction": "neutral", "before": [ "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "after": [ "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "volatile_filtered": false }, { "id": "c9730fed37790804073e7c0e7472f3a5c7f296ce164a616b1515e3c48b336e48", "key": "http_header|scanapse.com|referrer-policy", "status": "stable", "direction": "neutral", "before": [ "no-referrer" ], "after": [ "no-referrer" ], "volatile_filtered": false }, { "id": "6b31e5b5db20b3192513a7e7e3634aaf2d02a6b8df07c1faa743783705c55052", "key": "http_header|scanapse.com|server", "status": "stable", "direction": "neutral", "before": [ "Apache" ], "after": [ "Apache" ], "volatile_filtered": false }, { "id": "0226d1bf65494e27169fcc8f1c7a90d32df573e3e50ab09b8bb2de5c4125bb21", "key": "http_header|scanapse.com|strict-transport-security", "status": "stable", "direction": "neutral", "before": [ "max-age=63072000" ], "after": [ "max-age=63072000" ], "volatile_filtered": false }, { "id": "4306d2bcbff4404315304dec7e84e9411032ff62a1c3eb6c2f3437d98d0ff4de", "key": "http_header|scanapse.com|x-content-type-options", "status": "stable", "direction": "neutral", "before": [ "nosniff" ], "after": [ "nosniff" ], "volatile_filtered": false }, { "id": "ac780c9141f244b51c6eca919561493d5a0ea727bafa7a52cd6acd5ef3e3f5e8", "key": "http_header|scanapse.com|x-frame-options", "status": "stable", "direction": "neutral", "before": [ "DENY" ], "after": [ "DENY" ], "volatile_filtered": false }, { "id": "a73311fabdbdef127b19bef0f68c5eae26107a65e079d501fcb91ae4cbd3dae3", "key": "mail_exchanger|scanapse.com|uses_mail_exchanger|710462f2c26ddf91bbe27f4f94cd45968cb6422c18785b35e57e99f4582a1f7d", "status": "stable", "direction": "neutral", "before": "mta-gw.infomaniak.ch", "after": "mta-gw.infomaniak.ch", "volatile_filtered": false }, { "id": "57c963154716ad651f337386ec13aad02a823568a5956c39b494fd0d9bb70a5c", "key": "mail_policy_flag|scanapse.com|bimi_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "e8c02514085e980bf578278242b219c5d383f4d1590fa20c634af4d30f618815", "key": "mail_policy_flag|scanapse.com|mta_sts_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "5d6b23b7cc645f059d60dc8045764a0e01012964d8cd455c118648233e1c661d", "key": "mail_policy_flag|scanapse.com|tls_reporting", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "42d4e5857c1eccc3948dd9d74c9eecebbfaf98110ebe0c041f636216bae1db09", "key": "mail_transport_evidence|scanapse.com|mail_transport_depth", "status": "stable", "direction": "neutral", "before": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "volatile_filtered": false }, { "id": "45bb69eb80b81b10bab0a46b4a782f6a307af0adeaecb7e8a349c80daa01d2e4", "key": "modern_transport_evidence|scanapse.com|modern_transport", "status": "stable", "direction": "neutral", "before": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR1", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-04T17:49:23+00:00", "valid_to": "2026-10-02T17:49:22+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.195" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5a" ], "state": "observed" } }, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR1", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-04T17:49:23+00:00", "valid_to": "2026-10-02T17:49:22+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.195" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5a" ], "state": "observed" } }, "volatile_filtered": false }, { "id": "9d54e91906fb391adc822e76ee581574cfcb6bd52a764ed55040aceb9cf56c3c", "key": "module_finding|scanapse.com|dns:caa_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "f9f8f8c1bbb1ebd934a0a7cbfacb9f9435c0b82b77ece46556a5b85fa21d43ae", "key": "module_finding|scanapse.com|dns:dns_single_provider", "status": "stable", "direction": "neutral", "before": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "after": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "volatile_filtered": false }, { "id": "5913ba63c9a96967dd6958b32f3b8c73d638cbe33dadfc52080fb55795a34761", "key": "module_finding|scanapse.com|dns:dnssec_not_tested", "status": "stable", "direction": "neutral", "before": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "volatile_filtered": false }, { "id": "e525388572094f06b4e1e239cb2f5553811fc575a5fa870a8d9ac9f4ea128ba0", "key": "module_finding|scanapse.com|headers:hsts_no_subdomains", "status": "stable", "direction": "neutral", "before": { "evidence": "max-age=63072000", "severity": "low" }, "after": { "evidence": "max-age=63072000", "severity": "low" }, "volatile_filtered": false }, { "id": "b2578e91729b4fa8be4df416e80fac3fa63119593bc0705c1f762e1ffc3845b6", "key": "module_finding|scanapse.com|mail_trust:mail_mta_sts_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "0e6260aaaa2b0dfa5b6abca7a59a8608917fbd29a96c1cb5130b394be77e71f5", "key": "module_finding|scanapse.com|mail_trust:mail_single_mx", "status": "stable", "direction": "neutral", "before": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "after": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "volatile_filtered": false }, { "id": "97571b565f05f8bfdcb9c49855df00c40bddaa17bce73c470d338de816fce614", "key": "module_finding|scanapse.com|mail_trust:mail_tls_rpt_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "aab5c4a7d4daf98f85f25bd9ef0ceeb511c44ba20c2b15002da8f77f863532c5", "key": "module_finding|scanapse.com|resilience:dns_concentration", "status": "stable", "direction": "neutral", "before": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "after": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "volatile_filtered": false }, { "id": "64276fb13647c131d965c4ce66e0ced27904f6d59692b41245af8a132cb5a717", "key": "openpgp_discovery|scanapse.com|openpgp", "status": "stable", "direction": "neutral", "before": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "volatile_filtered": false }, { "id": "942cac66dd26f397150cad70e57ec4e8e37e2eabf9478e7333dc8470cbebb0a2", "key": "post_quantum_tls|scanapse.com|post_quantum_tls", "status": "stable", "direction": "neutral", "before": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "volatile_filtered": false }, { "id": "bf08afa154e7d58563be06d60cde91ce72b920beeef92c80dff066b0e24d9efb", "key": "spf_policy|scanapse.com|spf_policy", "status": "stable", "direction": "neutral", "before": "hardfail", "after": "hardfail", "volatile_filtered": false }, { "id": "9e305a06bc16b7940f6f121a96a2d72252ce7f37d611ef83b15e52ca4a38c08a", "key": "spf_record|scanapse.com|publishes_spf", "status": "stable", "direction": "neutral", "before": "v=spf1 include:spf.infomaniak.ch -all", "after": "v=spf1 include:spf.infomaniak.ch -all", "volatile_filtered": false }, { "id": "e6511f030290fdfccc92ecc7a3630f9d25663311e3d415f1b8d241c1ca34622e", "key": "technology|scanapse.com|uses_technology|25025c900e69d981e4228ba726d1436e4144e42a8f7fdf18ad14f7cdec17b031", "status": "stable", "direction": "neutral", "before": { "name": "Apache", "version": "", "version_exposed": false }, "after": { "name": "Apache", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "685e3b9dd31650a22caa7bab7c741c1b77f2231d8de0515d5cc6f822665ee362", "key": "technology|scanapse.com|uses_technology|bfef73be0865860d481e6ad14ac905e705a451e76dd60c04f6d50ba05a82f40a", "status": "stable", "direction": "neutral", "before": { "name": "Scanapse", "version": "", "version_exposed": false }, "after": { "name": "Scanapse", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "0648a34aa40f313c715e29097e094a82bb2d638b7f3d76e246ba1fa2ea37e46f", "key": "tls_issuer|scanapse.com|issuer", "status": "stable", "direction": "neutral", "before": "C = US, O = Let's Encrypt, CN = YR1", "after": "C = US, O = Let's Encrypt, CN = YR1", "volatile_filtered": false }, { "id": "a1d739930a76a1f9389294e24e4cf4454cf27c1254cb217d17c9ecebff7702db", "key": "tls_valid_to|scanapse.com|valid_to", "status": "stable", "direction": "neutral", "before": "2026-10-02T17:49:22+00:00", "after": "2026-10-02T17:49:22+00:00", "volatile_filtered": false }, { "id": "7d116e678f684e44f0479296f949efe96a4d7382197180d80a19aeeaad6be063", "key": "scope:coverage", "status": "stable", "direction": "neutral", "before": "full", "after": "full", "volatile_filtered": false } ], "knowledge": { "claims": [ { "id": "17aa17a717a366d15083f093ad259b34465b8b3b95cbb950af03a64fe5ca1eea", "subject": "scanapse.com", "predicate": "openpgp", "value": null, "state": "to_confirm", "rationale": "security_txt_encryption_not_observed", "evidence_ids": [ "e9191e8fd191bbca9ad3e9fd756e1098dcf421db851762ab9f2b7506e6380472" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "2b81a35d69a1ce72cfe8147e755794cb341841a54703cc128e24dd56d23d4968", "subject": "scanapse.com", "predicate": "spf_policy", "value": "hardfail", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "3353e9b5856905030bf0c3d048593b3b99d42536a0d9fd53528af28617017c5b", "subject": "scanapse.com", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "495a36555c58f0c252f52d5e17220e89158deb23be5514f6f17ee290de4820f2" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "3442893d9ce78297084148fd1e2570e85ec09e4363540136e6ea5fea66911a3f", "subject": "scanapse.com", "predicate": "tls_issuer", "value": "C = US, O = Let's Encrypt, CN = YR1", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "45bb8b69549390de222455f8b42a1d5f3a1eaf998fa50ab4fac95f44eddf0d08", "subject": "scanapse.com", "predicate": "canary_detection", "value": false, "state": "to_confirm", "rationale": "no_known_passive_signature_observed", "evidence_ids": [ "c3e0ff64681e1d1cfc2371bb25f8bbc0a719c271e6c6e2fa009686120af21595" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "45beeefff4888c08810966f6c857d8c59880741ce80372efe9ed24b971e95cf6", "subject": "scanapse.com", "predicate": "dmarc_policy", "value": "reject", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51", "subject": "scanapse.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c", "subject": "scanapse.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "cf221b015e0bcc2f850a49ccd5ea97edbc1e0f8cb91b9daa11bb68a5972e3a3b", "subject": "scanapse.com", "predicate": "depends_on_provider", "value": "Infomaniak", "state": "corroborated", "rationale": "independent_provider_evidence_converges", "evidence_ids": [ "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4", "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3", "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true } ], "relations": [ { "id": "088e52ef6184e4724128819832c20c73bcd1eda01fdbf2da32168418bfd3ff5a", "subject": "scanapse.com", "predicate": "depends_on_provider", "object": "Infomaniak", "state": "corroborated", "evidence_ids": [ "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4", "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3", "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "238eb6ebd78fa0f1028731ba00094456d0ad4df27b4c0fab40b2f6a885f83b73", "subject": "scanapse.com", "predicate": "uses_nameserver", "object": "ns12.infomaniak.ch", "state": "observed", "evidence_ids": [ "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "571afbdc3e9c74e8ddaf72d04f212f34c03d277ce30168e27c74b8e02caabae2", "subject": "scanapse.com", "predicate": "resolves_to", "object": "185.125.27.195", "state": "observed", "evidence_ids": [ "924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "6317f90bc775ec55b368d17ad0488851ff64e9aaee6b60f66b7c98825f06bd12", "subject": "scanapse.com", "predicate": "uses_mail_exchanger", "object": "mta-gw.infomaniak.ch", "state": "observed", "evidence_ids": [ "23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "c1b42157e3b87410d3a287b09b83150f50c06fc4f236e38e41c96039a74ed7ee", "subject": "scanapse.com", "predicate": "resolves_to", "object": "2001:1600::aaaa:0:0:80:5a", "state": "observed", "evidence_ids": [ "1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "da7ef623014b7c76123bad5294fda050add9541858546a1af37c2c7735f21b1d", "subject": "scanapse.com", "predicate": "uses_technology", "object": "Scanapse", "state": "observed", "evidence_ids": [ "127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "eede05d6eebd34e2ac23bf81950210cd1fc62b3bac6c9d377da948d163a1b409", "subject": "scanapse.com", "predicate": "uses_nameserver", "object": "ns11.infomaniak.ch", "state": "observed", "evidence_ids": [ "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "fa2544dd7cada52d5b7f118ad0080c0c83c21cdffee47197aa3eb4832c6e6ddc", "subject": "scanapse.com", "predicate": "uses_technology", "object": "Apache", "state": "observed", "evidence_ids": [ "c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" } ], "unknowns": [ { "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c", "subject": "scanapse.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51", "subject": "scanapse.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true } ], "evidence": [ { "id": "c3e0ff64681e1d1cfc2371bb25f8bbc0a719c271e6c6e2fa009686120af21595", "observation_ids": [ "077ff4c2bb1ac8a0f824017a9f073bf7aaf53fdffad91e44a3c2a1a9417f2bb9" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81", "observation_ids": [ "0ee4ccdb66c9b485b451669f5eb54afffc4588b07446dd02e6e6343344d25872" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c", "observation_ids": [ "19d4597fb7a86b537f4197734f6b0b8690a3250c1b214687bee2ce46612a0468" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "hardfail", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95", "observation_ids": [ "24ea6560a7f3d66c4d4737af98d537314fcdfee57665724d86a7919828284da1" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4", "observation_ids": [ "280879a60cafebe844468135cdb85e9d034ded8ba9ec42daad227a54dd504d93" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": "max-age=63072000", "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2", "observation_ids": [ "281acfe44c1d265d0d9879dd3ea8272a9aafaa6665663d601150aa282070a64b" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = US, O = Let's Encrypt, CN = YR1", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174", "observation_ids": [ "2a2fed80be9076402af5e26bb3a58873de3064306b839a08a717d56a11fd44b0" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada", "observation_ids": [ "3df2d98d5dfa49eb8284c463f438291cb7e4ffc7c3159170ef774401066172f0" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Apache", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393", "observation_ids": [ "40bcd9efd598964c63ace98617329a2f6ef8f9250991d25f13c816a8a71be902" ], "evidence_type": "dmarc_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=DMARC1; p=reject;", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71", "observation_ids": [ "495fd6896f17958b338bf9bb57d08b818b970970b10f59cebec96216edaa85a9" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e", "observation_ids": [ "49fd041859adee49249d1682f9a46efed1590c2819adc78fe9203b29a3bfac1d" ], "evidence_type": "dmarc_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "reject", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4", "observation_ids": [ "4bc0883b37fff46e12b9c329f043beb693765973a087d3a88046637662f2eef9" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "ns11.infomaniak.ch", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "1e582816be3447103be32a6440bd8102e6d46a996d9ac63eac5f4fc5483aebb7", "observation_ids": [ "4d08e3f14e214ff89d49608e668460b5d43b71af67b8b1f5dc4aedfd7c61d039" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431", "observation_ids": [ "4d22e36be39ad1652e870d80a9575ea3e3b0e1c74731f2a91e8f0c1dc2a0404a" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220", "observation_ids": [ "53bf3f5bdd48c90df1e720e26884a431f966a9c3b21dc871805312b14bbe86ab" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755", "observation_ids": [ "54dd6c216bee77279f1ece40ac2a6d2c6bd3414c085b6d45c18b453285eb2216" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce", "observation_ids": [ "55f541b9c61955dcd75c32572899d0206e0d77490911752a0f44fd6c8db42b58" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=63072000" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "0487e93a392d356f7489de56f35bcb02d5129717bae317d7436c807fe430a679", "observation_ids": [ "5b426d44732eb740443c06aa5f9c8bd011b7de2f9936885dd0d645c9e0425e90" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60", "observation_ids": [ "5d0dfd1268fa3bc65c7c92221d3d15798e31051ab071acf7af03687a6906fb77" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2026-10-02T17:49:22+00:00", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "d4fdaa8c74289d63757525821111640500a4ddde4a5bf500fb2da50064b84688", "observation_ids": [ "73c874886cb4c334a464fd282c66376effbbd9cb1ba48b5c4121f7a3f8b7d695" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-0XRinmPZT1wx5amghHVhH7g0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "6b4ce3abe2aae3c5ea8f279b31256a189fd53cbd8de6212f0c84e7a07f044525", "observation_ids": [ "7ba25466e7b847cf8dc20053e3c3741486ee71c12760a827253cd260b2d9802b" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "62db24a78514a31710235b329d49fdd15abf245409f61d0afc03c0604336e5cc", "observation_ids": [ "7c8d0f6aa517e96267db7f2b1b73385b72a86426b5a9bb21ab50a474999fb8a2" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "495a36555c58f0c252f52d5e17220e89158deb23be5514f6f17ee290de4820f2", "observation_ids": [ "8690f1e89bac02dd7e9816260738192a3d69b4b97295b0133fd59960ba35ee92" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f", "observation_ids": [ "872d15073a36345581e3f7bb47a6de3886d338b38ebcb09b69c1100b64076d82" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55", "observation_ids": [ "8e846d6d95b71c5fc0e1e75c95ae765016e85d58cd747433b423ba49a29181a0" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52", "observation_ids": [ "8eee2d25b6fd1ec18b10ec77713e3b012f76b0661b6b00842134a7e3131ca419" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3", "observation_ids": [ "9060e4229db8478167ea7bad7b206a2af443732b4c4bc42946ace8b090c933f3" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "ns12.infomaniak.ch", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be", "observation_ids": [ "938e190bf446f47993ed67d2780877848c63a54a01fe4f8ec5808cb8c7afdf1e" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09", "observation_ids": [ "a5f93036ff6b24b6ff007a4230d1d508d50472b81aff0a8de13bfa50ac7b3e9b" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "DENY" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b", "observation_ids": [ "a67a3f84e5485b5a28f4793e3b39f6b4ef421a9d6a029b76fc4e47a09b64bece" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "nosniff" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85", "observation_ids": [ "a70bdfdd72e7132308174ac99349f455c977b7b9e291950b5e0fd3f7a95ef890" ], "evidence_type": "cookie", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": { "http_only": true, "name": "scanapse_csrf", "same_site": "strict", "secure": true }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f", "observation_ids": [ "af66d6e32c8288a35cef6b7ade2b71caccc6d2309ee40c74bdfeb5de71fc03b1" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2001:1600::aaaa:0:0:80:5a", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b", "observation_ids": [ "b15b63234e8757f338875f023b749e5764c85d0c97ab52d9398eb4f12de40fcf" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "no-referrer" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd", "observation_ids": [ "b557caea5099613102d539b11e9749cfae16ea6f9586f6dd3690b2ad98062e65" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Scanapse", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc", "observation_ids": [ "bce1678339a29383ac14ebdf1692d556e51d1452575000b15fdd33bddfd49ec0" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "Apache" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3", "observation_ids": [ "c8345bbbe7849f6927abef1d3f10a70f652aa1b9ca9cfce9f5ba4a3d1d79f171" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802", "observation_ids": [ "c8666e10c160e953ec50d963b4d14f28897630f3279cacfcb70a034974624318" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mta-gw.infomaniak.ch", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3", "observation_ids": [ "ce9553141a0922dd59a969693dcf3a55c80640ad8455825c1ae017a8d7e400ff" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "e9191e8fd191bbca9ad3e9fd756e1098dcf421db851762ab9f2b7506e6380472", "observation_ids": [ "d4949a5af1090e13fb1018fdeed1ae425ea0e4f6f4f4b745da5b9bbddf197b7d" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f", "observation_ids": [ "e33a14dd09f2d1e3eaae3a91efed5f71016d343a879b5ac1b240b8808a4fc1df" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "185.125.27.195", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "0683231285ac76cf23afcd482e8ec11326ed6c5b9e24757610b7872be31e9ffe", "observation_ids": [ "eba49fc7cb14959e276d363f06cb6fd985b518c242cebd4548874834ce74b33b" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR1", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-04T17:49:23+00:00", "valid_to": "2026-10-02T17:49:22+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.195" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5a" ], "state": "observed" } }, "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2", "observation_ids": [ "ff0d9a8e26a0daa81cc574726c9f5452aa7370c0efe03d075e00fd91f1cce6e6" ], "evidence_type": "spf_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=spf1 include:spf.infomaniak.ch -all", "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" }, { "id": "0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217", "observation_ids": [ "fff111fe287ae02956798e30e188a31f0def112736a91a95253a2cacfe906b6f" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "require-corp" ], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00" } ] }, "dossier": { "executive_summary": [ "4 observations publiques sont documentées dans ce dossier.", "1 dépendances publiques structurantes sont visibles.", "Aucune évolution utile n’est retenue depuis la lecture précédente.", "4 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 4, "deduced": 0, "to_confirm": 2, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "17aa17a717a366d15083f093ad259b34465b8b3b95cbb950af03a64fe5ca1eea", "title": "Openpgp", "value": null, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "e9191e8fd191bbca9ad3e9fd756e1098dcf421db851762ab9f2b7506e6380472" ], "rationale": "security_txt_encryption_not_observed" }, { "id": "45bb8b69549390de222455f8b42a1d5f3a1eaf998fa50ab4fac95f44eddf0d08", "title": "Canary detection", "value": false, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "c3e0ff64681e1d1cfc2371bb25f8bbc0a719c271e6c6e2fa009686120af21595" ], "rationale": "no_known_passive_signature_observed" }, { "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c", "title": "Origin host", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "public_edge_does_not_reveal_origin" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 2, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "3353e9b5856905030bf0c3d048593b3b99d42536a0d9fd53528af28617017c5b", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "495a36555c58f0c252f52d5e17220e89158deb23be5514f6f17ee290de4820f2" ], "rationale": "client_capability_unavailable" }, { "id": "3442893d9ce78297084148fd1e2570e85ec09e4363540136e6ea5fea66911a3f", "title": "Tls issuer", "value": "C = US, O = Let's Encrypt, CN = YR1", "state": "observed", "state_label": "Observé", "evidence_ids": [ "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2" ], "rationale": "certificate_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "2b81a35d69a1ce72cfe8147e755794cb341841a54703cc128e24dd56d23d4968", "title": "Spf policy", "value": "hardfail", "state": "observed", "state_label": "Observé", "evidence_ids": [ "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c" ], "rationale": "mail_policy_observed" }, { "id": "45beeefff4888c08810966f6c857d8c59880741ce80372efe9ed24b971e95cf6", "title": "Dmarc policy", "value": "reject", "state": "observed", "state_label": "Observé", "evidence_ids": [ "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 2, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" } ], "states": { "observed": 0, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "structuring_dependencies": [ { "label": "Infomaniak", "state": "observed", "evidence_ids": [ "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4", "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3", "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220" ] } ], "open_questions": [ { "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c", "subject": "scanapse.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true }, { "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51", "subject": "scanapse.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-05T23:59:12+00:00", "last_seen_at": "2026-09-05T23:59:12+00:00", "active": true } ], "evidence_count": 43, "meaningful_change_count": 0 }, "timeline": { "first_observed_at": "2026-09-04T19:28:37+00:00", "last_observed_at": "2026-09-20T19:08:29+00:00", "reference_state": "compared", "message": "Comparé à la lecture précédente conservée", "counts": { "appeared": 0, "modified": 0, "stable": 44, "disappeared": 0 }, "changes": [], "history_count": 15 }, "methodology": { "version": "2.3.1", "model": "evidence_first", "principles": [ "absence_of_evidence_is_not_evidence_of_absence", "unknown_remains_unknown", "provider_metadata_is_not_data_location", "edge_provider_is_not_origin_host", "single_snapshot_does_not_prove_resilience" ] } }