# Scanapse - webpion.com

Mesuré : 2026-09-04T13:27:40+00:00

## Résumé
- 4 observations publiques sont documentées dans ce dossier.
- 1 dépendances publiques structurantes sont visibles.
- 2 évolutions utiles sont retenues depuis la lecture précédente.
- 2 points restent à confirmer ou ne sont pas observables de l’extérieur.

## Évolution
- Modifié : Http header
- Modifié : Module finding

## Preuves
_preuve technique horodatée et vérifiable_
- mail_policy_flag - 
- module_finding - {"evidence":null,"severity":"info"}
- dns_address - 2001:1600::aaaa:0:0:80:5b
- dmarc_record - v=DMARC1; p=reject;
- dns_nameserver - ns11.infomaniak.ch
- dns_nameserver - ns12.infomaniak.ch
- tls_issuer - C = US, O = Let's Encrypt, CN = YR2
- spf_policy - hardfail
- http_header - ["same-origin"]
- tls_valid_to - 2026-11-27T21:40:45+00:00
- module_finding - {"evidence":null,"severity":"low"}
- http_header - ["accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"]
- http_header - ["default-src 'none'; script-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; script-src-attr 'none'; style-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"]
- module_finding - {"evidence":null,"severity":"low"}
- dns_address - 185.125.27.197
- mail_policy_flag - 
- http_header - ["Apache"]
- module_finding - {"evidence":null,"severity":"low"}
- mail_exchanger - mta-gw.infomaniak.ch
- dependency_provider - {"critical":true,"hosts":["mta-gw.infomaniak.ch","ns11.infomaniak.ch","ns12.infomaniak.ch"],"id":"infomaniak","known":true,"name":"Infomaniak","observation_count":3,"services":["dns","hosting","mail"],"tracker":false}
- module_finding - {"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
- http_header - ["DENY"]
- dmarc_policy - reject
- http_header - ["same-origin"]
- http_header - ["no-referrer"]
- module_finding - {"evidence":["ns11.infomaniak.ch","ns12.infomaniak.ch"],"severity":"low"}
- spf_record - v=spf1 include:spf.infomaniak.ch -all
- module_finding - {"evidence":[{"host":"mta-gw.infomaniak.ch","priority":5}],"severity":"low"}
- http_header - ["nosniff"]
- technology - {"name":"Apache","version":"","version_exposed":false}
- http_header - ["max-age=31536000; includeSubDomains; preload"]
- module_finding - {"evidence":["ns11.infomaniak.ch","ns12.infomaniak.ch"],"severity":"medium"}
- mail_policy_flag - 
- module_finding - {"evidence":"default-src 'none'; script-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; script-src-attr 'none'; style-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests","severity":"high"}

## Limites
- public_edge_does_not_reveal_origin
- provider_metadata_does_not_prove_processing_location
- pq_tls_client_not_enabled
- canary_detection_not_enabled