{ "schema_version": "2.0", "engine_version": "2.9.2.1", "pattern_version": "2026.09.4", "scan_id": "d41c4fb35e35288d087c21c2", "domain": "webpion.com", "scanned_at": "2026-09-06T01:57:48+00:00", "duration_ms": 101.74, "entity": { "id": "5ddcac889405a2a37ffc12e8a5a6f8eec9ac2ac0760e0e4c27408f6fb3f8d3c8", "display_name": "webpion.com", "slug": "webpion-com", "entity_type": "domain_subject", "auto_created": true, "primary_asset": "webpion.com" }, "scope": { "mode": "passive", "coverage": "full", "access_level": "full", "access_reason": "public_document_available", "requests": 2, "homepage_only": true, "javascript_executed": false, "ports_scanned": false, "private_networks_blocked": true, "protection_bypassed": false, "max_body_bytes": 1572864, "scan_budget_seconds": 24, "budget_exhausted": false, "transport": "curl_with_socket_fallback" }, "trust_profile": { "methodology_version": "2.1.0", "knowledge_coverage": 84, "dimensions": { "security": { "quality": 91, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 3, "unknown_count": 0 }, "privacy": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "dependencies_control": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 2 }, "resilience": { "quality": 90, "coverage": 35, "band": "non_conclusive", "conclusive": false, "evidence_count": 1, "unknown_count": 1 }, "transparency": { "quality": 100, "coverage": 70, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "mail": { "quality": 82, "coverage": 100, "band": "favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 } }, "global": { "quality": 95, "coverage": 84, "secondary": true } }, "signals": [ { "id": "104a396a799b0851d32ef88b4f2465531ad8c079d6a725752f053e57ff8c7655", "key": "mail_dmarc_policy", "category": "mail", "importance": "medium", "direction": "favorable", "state": "observed", "title": { "fr": "Politique DMARC observée", "en": "Observed DMARC policy" }, "explanation": { "fr": "La politique DMARC publiée est reject.", "en": "The published DMARC policy is reject." }, "limitations": { "fr": "Ce signal ne prouve pas à lui seul l’alignement réel de tous les flux de messagerie.", "en": "This signal alone does not prove actual alignment for every mail flow." }, "evidence_ids": [ "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b" ], "change_status": "stable" }, { "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480", "key": "data_location_unknown", "category": "dependencies_control", "importance": "medium", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Localisation effective des données non déterminable", "en": "Effective data location cannot be determined" }, "explanation": { "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.", "en": "Public observations cannot establish where data is actually processed or stored." }, "limitations": { "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.", "en": "A provider headquarters, an IP address, or a CDN is not proof of data location." }, "evidence_ids": [], "change_status": "stable" }, { "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9", "key": "origin_host_unknown", "category": "dependencies_control", "importance": "low", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Hébergement d’origine non déterminable", "en": "Origin hosting cannot be determined" }, "explanation": { "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.", "en": "An edge service or reverse proxy can hide origin infrastructure." }, "limitations": { "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.", "en": "Edge presence must not be treated as origin hosting." }, "evidence_ids": [], "change_status": "stable" }, { "id": "ddf9c90948bf7c63273b4255402551f7881968754c60d1fc3fc555900541b1f7", "key": "visible_provider_dependencies", "category": "dependencies_control", "importance": "low", "direction": "neutral", "state": "corroborated", "title": { "fr": "Dépendances fournisseurs visibles", "en": "Visible provider dependencies" }, "explanation": { "fr": "1 fournisseur(s) sont reliés au périmètre observable.", "en": "1 provider(s) are linked to the observable scope." }, "limitations": { "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.", "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location." }, "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631" ], "change_status": "stable" } ], "changes": [ { "id": "49877c55d49c71b22f7ed3ef3e35ec1ef8c5363d64e2bdde0172a3bd8fc0b041", "key": "canary_signal|webpion.com|canary_detection", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "volatile_filtered": false }, { "id": "323ea9e59b6617c50b12f4ed2124c9e871e6186e83331b14c68a97b1faa5c9b1", "key": "csp_evidence|webpion.com|csp_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "volatile_filtered": false }, { "id": "454a2e99f6b4f724f1789c37e21e9e1441e09f7b09888e7bf5fe5b4a55a2032b", "key": "dependency_provider|webpion.com|depends_on_provider|infomaniak", "status": "stable", "direction": "neutral", "before": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "after": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "volatile_filtered": false }, { "id": "26b3a7ba254555ff74fc73115ee1a62ab5e5ccda4fb6a4dbb7989d6a906d6214", "key": "dmarc_policy|webpion.com|dmarc_policy", "status": "stable", "direction": "neutral", "before": "reject", "after": "reject", "volatile_filtered": false }, { "id": "0f783ba0d02079f65289c62fb36c2b11a9b45f229eb8a473bb69d79735244a9e", "key": "dmarc_record|webpion.com|publishes_dmarc", "status": "stable", "direction": "neutral", "before": "v=DMARC1; p=reject;", "after": "v=DMARC1; p=reject;", "volatile_filtered": false }, { "id": "3f19e7d658b754a16cd0157af4d03c2fdde1b3cb104a1a475526ac47eee5eaf9", "key": "dns_address|webpion.com|resolves_to|60ffe84b292c7468869bf7ca05e7d06bbcbbb211b247f6ccf569607dda3d0944", "status": "stable", "direction": "neutral", "before": "2001:1600::aaaa:0:0:80:5b", "after": "2001:1600::aaaa:0:0:80:5b", "volatile_filtered": false }, { "id": "5ba98dd141507c844ef41508bead29f5e05b7d2ea6748d4615c9327d9f8ce619", "key": "dns_address|webpion.com|resolves_to|a80ce6f23866ac6dd0b739d4be47514b2716a36c3896379cf81fa3a1069d0c73", "status": "stable", "direction": "neutral", "before": "185.125.27.197", "after": "185.125.27.197", "volatile_filtered": false }, { "id": "3fb09f6a0ba0efd1d9137803b97d5a7892fa94c6e393b4d92e1375ea0e41ab29", "key": "dns_nameserver|webpion.com|uses_nameserver|5ee5461b9c7a233e005f020d0190f25617e0b7f4bb88bf523f18e71c14195ad4", "status": "stable", "direction": "neutral", "before": "ns12.infomaniak.ch", "after": "ns12.infomaniak.ch", "volatile_filtered": false }, { "id": "424651bc2aa2db32d8cbf73a05779aa3e34dca7230caf8d3a218dfcde4b5c1fd", "key": "dns_nameserver|webpion.com|uses_nameserver|aae80aee661823bebfebdedccd1010eff3a0ebba4d0cfdb7fa764bc19621449d", "status": "stable", "direction": "neutral", "before": "ns11.infomaniak.ch", "after": "ns11.infomaniak.ch", "volatile_filtered": false }, { "id": "6785364a3675b93e189c10e330c2d534c0d258035bea600dd68f0de6a346b94b", "key": "dnssec_evidence|webpion.com|dnssec_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "volatile_filtered": false }, { "id": "c7c17624da2b76a6f3187e29e4dbfb00ca7460f08e60508dcc24c562e7bfcddf", "key": "http_header|webpion.com|content-security-policy", "status": "stable", "direction": "neutral", "before": [ "default-src 'none'; script-src 'self' 'nonce-NtAJHt5vhHolVh8JJ_YAd1b8'; script-src-attr 'none'; style-src 'self' 'nonce-NtAJHt5vhHolVh8JJ_YAd1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" ], "after": [ "default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" ], "volatile_filtered": true }, { "id": "20e48fd84b4518611f00f554429518ee36699e41260b19ec7043f56744200dc2", "key": "http_header|webpion.com|cross-origin-opener-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "c4f6fc09aba0efc1b41a17354e65e84aab217dff15eede49196df690ac03ed61", "key": "http_header|webpion.com|cross-origin-resource-policy", "status": "stable", "direction": "neutral", "before": [ "same-origin" ], "after": [ "same-origin" ], "volatile_filtered": false }, { "id": "f281282bf2bec835038610e3a2dcf0c8c5341ace2897470897c9052ae121edc8", "key": "http_header|webpion.com|permissions-policy", "status": "stable", "direction": "neutral", "before": [ "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "after": [ "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "volatile_filtered": false }, { "id": "f556cd0ad309f1ef7bf27fa57a592420c0b05385379f259081fe27b4ab7b90f0", "key": "http_header|webpion.com|referrer-policy", "status": "stable", "direction": "neutral", "before": [ "no-referrer" ], "after": [ "no-referrer" ], "volatile_filtered": false }, { "id": "356eba7b9ff1e7b203485762bc8ccf349a42afbce44988daaa771f605b2d0a66", "key": "http_header|webpion.com|server", "status": "stable", "direction": "neutral", "before": [ "Apache" ], "after": [ "Apache" ], "volatile_filtered": false }, { "id": "21be6e354e3c08674541083438e21bc9ba3725ea8aab03d898287c20bdc6c59a", "key": "http_header|webpion.com|strict-transport-security", "status": "stable", "direction": "neutral", "before": [ "max-age=31536000; includeSubDomains; preload" ], "after": [ "max-age=31536000; includeSubDomains; preload" ], "volatile_filtered": false }, { "id": "06f5ac5dccf2807cae1f70b9352343e4a24dadc6b73449478eacf47b338f6280", "key": "http_header|webpion.com|x-content-type-options", "status": "stable", "direction": "neutral", "before": [ "nosniff" ], "after": [ "nosniff" ], "volatile_filtered": false }, { "id": "5f3fa46656bc3c1916b5c91ec13e67521e7906b2678cb3fd8bbcaafe730ddc0f", "key": "http_header|webpion.com|x-frame-options", "status": "stable", "direction": "neutral", "before": [ "DENY" ], "after": [ "DENY" ], "volatile_filtered": false }, { "id": "15e731b3ad6f9c673085d93afa4d196666724fe0b85e713d0dd7a1603c094c93", "key": "mail_exchanger|webpion.com|uses_mail_exchanger|710462f2c26ddf91bbe27f4f94cd45968cb6422c18785b35e57e99f4582a1f7d", "status": "stable", "direction": "neutral", "before": "mta-gw.infomaniak.ch", "after": "mta-gw.infomaniak.ch", "volatile_filtered": false }, { "id": "a2acf98802f613077d4518dadaf7ff204fda5b96ed0786dac3c3ed20b73fb36f", "key": "mail_policy_flag|webpion.com|bimi_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "768272fa5121c007e8d3fe8533d9f90f0c24ca6bd07cafaec884e966696401ab", "key": "mail_policy_flag|webpion.com|mta_sts_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "90b005c602b4ea88923826f3462bd749914d0adab4b81261f1a2de168f7a81ea", "key": "mail_policy_flag|webpion.com|tls_reporting", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "62a0eaf3d172ac02ddc6fdd0cbab62522942ae0f3de23861ccf6bc26289010b5", "key": "mail_transport_evidence|webpion.com|mail_transport_depth", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "volatile_filtered": false }, { "id": "fe3f4fb9e4f932d2424eb386cd8409325b6ac4e9227f98abc3a19c2f65b103e8", "key": "modern_transport_evidence|webpion.com|modern_transport", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-29T21:40:46+00:00", "valid_to": "2026-11-27T21:40:45+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.197" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5b" ], "state": "observed" } }, "volatile_filtered": false }, { "id": "65f187e686c059982dbb6d9f08c15f5df19368ff97d79eec645889e64032cb58", "key": "module_finding|webpion.com|dns:caa_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "b88da30d8fb572a2ca0ca21986a9250fee9969c4b6ffcec7a6c41f453602d655", "key": "module_finding|webpion.com|dns:dns_single_provider", "status": "stable", "direction": "neutral", "before": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "after": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "volatile_filtered": false }, { "id": "9a6c83fa9507496041b21a5fbb190cfb57f5cd5945c985d5120a6b68413c0a72", "key": "module_finding|webpion.com|dns:dnssec_not_tested", "status": "modified", "direction": "indeterminate", "before": { "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "volatile_filtered": false }, { "id": "1eb09640de1cbfe1647eeb30fbdc3f33f3751137c51b75990597062ee9edd1df", "key": "module_finding|webpion.com|headers:coep_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "info" }, "after": { "evidence": null, "severity": "info" }, "volatile_filtered": false }, { "id": "efdd1f233e7489d205381688edea24954d466083c61f574615e180ce9b608889", "key": "module_finding|webpion.com|headers:csp_unsafe_inline", "status": "modified", "direction": "indeterminate", "before": { "evidence": "default-src 'none'; script-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; script-src-attr 'none'; style-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests", "severity": "high" }, "after": { "evidence": "default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests", "severity": "high" }, "volatile_filtered": false }, { "id": "3b6a6812611e92c78e75b1bb696c4a08390a8742a99517267cb10a661f36fdaf", "key": "module_finding|webpion.com|mail_trust:mail_mta_sts_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "cb03c4547857494b371f11ab4c2a9cf0d8a7e74751e9bbf4cf67b53058fac83c", "key": "module_finding|webpion.com|mail_trust:mail_single_mx", "status": "stable", "direction": "neutral", "before": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "after": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "volatile_filtered": false }, { "id": "e77339189fc46a48f3b6ba9e605f64ba1b5660c602ffe8f2909c67428c95030f", "key": "module_finding|webpion.com|mail_trust:mail_tls_rpt_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "bc9cdba77b1a7b814ea9ba73020137e3b395c5bd1a483b1aadafd8df397c4fb3", "key": "module_finding|webpion.com|resilience:dns_concentration", "status": "stable", "direction": "neutral", "before": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "after": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "volatile_filtered": false }, { "id": "ab3c1b75d6f9bfdc2401b4675c0fa96437cd0caf346bbaed0dc23a919a68116f", "key": "openpgp_discovery|webpion.com|openpgp", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "volatile_filtered": false }, { "id": "d7af9413ba10ab3aec2edd82303950a20039339dea77fbddb0ee842b759f93ce", "key": "post_quantum_tls|webpion.com|post_quantum_tls", "status": "appeared", "direction": "indeterminate", "before": null, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "volatile_filtered": false }, { "id": "07fad8874f28b83b53f227e0543159faa6305d6740321ce9eddc32466b9e372c", "key": "spf_policy|webpion.com|spf_policy", "status": "stable", "direction": "neutral", "before": "hardfail", "after": "hardfail", "volatile_filtered": false }, { "id": "8bbdfe26b42d63f071bc313e5cdd1bccd7a3fe33756964c328ec780017d04f58", "key": "spf_record|webpion.com|publishes_spf", "status": "stable", "direction": "neutral", "before": "v=spf1 include:spf.infomaniak.ch -all", "after": "v=spf1 include:spf.infomaniak.ch -all", "volatile_filtered": false }, { "id": "a7b39ac6a9e0df9041f9a6d32f514b5ecf259ca033576bbae0bdbab1f3d95264", "key": "technology|webpion.com|uses_technology|25025c900e69d981e4228ba726d1436e4144e42a8f7fdf18ad14f7cdec17b031", "status": "stable", "direction": "neutral", "before": { "name": "Apache", "version": "", "version_exposed": false }, "after": { "name": "Apache", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "a8d65e46c12fc7a53d631659daf720e63cbccbc594d61027c7255b52fd610a1a", "key": "tls_issuer|webpion.com|issuer", "status": "stable", "direction": "neutral", "before": "C = US, O = Let's Encrypt, CN = YR2", "after": "C = US, O = Let's Encrypt, CN = YR2", "volatile_filtered": false }, { "id": "96df22ee6154613ce0d76d1acd5a47a6befae439de9fd8513833b06ace1b83c0", "key": "tls_valid_to|webpion.com|valid_to", "status": "stable", "direction": "neutral", "before": "2026-11-27T21:40:45+00:00", "after": "2026-11-27T21:40:45+00:00", "volatile_filtered": false }, { "id": "7d116e678f684e44f0479296f949efe96a4d7382197180d80a19aeeaad6be063", "key": "scope:coverage", "status": "stable", "direction": "neutral", "before": "full", "after": "full", "volatile_filtered": false } ], "knowledge": { "claims": [ { "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a", "subject": "webpion.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6", "subject": "webpion.com", "predicate": "tls_issuer", "value": "C = US, O = Let's Encrypt, CN = YR2", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217", "subject": "webpion.com", "predicate": "dmarc_policy", "value": "reject", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72", "subject": "webpion.com", "predicate": "depends_on_provider", "value": "Infomaniak", "state": "corroborated", "rationale": "independent_provider_evidence_converges", "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c", "subject": "webpion.com", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "a0918d1e0b9fe99a95bf068f6d94912d82cccc28c2c302679b35c7f514714223" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "d7941deb0f809cebb53aa55bf9c63d92130dbbd11b1ec33354b2db20751aad42", "subject": "webpion.com", "predicate": "openpgp", "value": null, "state": "to_confirm", "rationale": "security_txt_encryption_not_observed", "evidence_ids": [ "cf44695149359b324776e272fc9d6c2805611e11fe11183cc361c8b8c454a548" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570", "subject": "webpion.com", "predicate": "spf_policy", "value": "hardfail", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "f8667de3744e6d75171e4dff0cdeedbfaa4e2834af00bc7b1148a25fcb1a1ce9", "subject": "webpion.com", "predicate": "canary_detection", "value": false, "state": "to_confirm", "rationale": "no_known_passive_signature_observed", "evidence_ids": [ "c414b54b1e5345f96b5805f092dd1c9033f7f74e5fa074a0d112635db33c898e" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3", "subject": "webpion.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true } ], "relations": [ { "id": "1ed1270afb9a813ff927271109f538a3859cb717b192be40f5be76aac07b7312", "subject": "webpion.com", "predicate": "uses_nameserver", "object": "ns12.infomaniak.ch", "state": "observed", "evidence_ids": [ "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "297fafe4664e84ea14aeb65354cc0a7c2475e1cbdaff524b4bb59efd44fb6b8d", "subject": "webpion.com", "predicate": "depends_on_provider", "object": "Infomaniak", "state": "corroborated", "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "39f004c59b40aebe47576be7cd1523989614914765b0e7216bdd016e0ddb812e", "subject": "webpion.com", "predicate": "resolves_to", "object": "185.125.27.197", "state": "observed", "evidence_ids": [ "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "671024d8185ae0e90d25cf795e45b861c390ff0892288b8924313b198f1c70c1", "subject": "webpion.com", "predicate": "uses_technology", "object": "Apache", "state": "observed", "evidence_ids": [ "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "6c80561ca7dce0648bbf17af4d8ca0ec7f87c32d89437cb051fe8c4821ef3331", "subject": "webpion.com", "predicate": "uses_mail_exchanger", "object": "mta-gw.infomaniak.ch", "state": "observed", "evidence_ids": [ "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "cac66792356959af1dfd23c1007802d3a348bfd472bc5dc175a0e939bddc26ce", "subject": "webpion.com", "predicate": "resolves_to", "object": "2001:1600::aaaa:0:0:80:5b", "state": "observed", "evidence_ids": [ "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "fefcf31f08bebdbd0e3f11f241f40ed250c8f762a9e45d297ae06629dbbd5204", "subject": "webpion.com", "predicate": "uses_nameserver", "object": "ns11.infomaniak.ch", "state": "observed", "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" } ], "unknowns": [ { "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3", "subject": "webpion.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a", "subject": "webpion.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true } ], "evidence": [ { "id": "a0918d1e0b9fe99a95bf068f6d94912d82cccc28c2c302679b35c7f514714223", "observation_ids": [ "006f8d40a9c39e1de71b50c1ce66ca732a59532335162cc7948f14cf59fabc7d" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "3bf12834d9f5b91cab01202a374e8085fb59dea016ea5cb0069b219e2ef28c74", "observation_ids": [ "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "0db156dd3991cb14f1a867a589f0fa1ddc6fd61cb8123feff1c23423138209b1", "observation_ids": [ "0dcce1b8e84bb4439836abcdff86f0dfa3c0f0c75687ba82856f8f0a0402feec" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "c414b54b1e5345f96b5805f092dd1c9033f7f74e5fa074a0d112635db33c898e", "observation_ids": [ "0ec341aaa0bdb285dde0faa0068b80c4dc525b5b713eca592b4a4266a7a8ac0f" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "6d8bba61446461a70253feef5697af0f9bbdf674da4f3c0323635ba97bffbc38", "observation_ids": [ "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "info" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "318e87ad28136a08b8c01f098930124a5e809ebb8eab59e7e78d032724ca8ff5", "observation_ids": [ "166d2562b76f5c2c8efe30038685d1f827267bab3c1235eb61d7000d8ea254c3" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5", "observation_ids": [ "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2001:1600::aaaa:0:0:80:5b", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "2ec2f8803eb2a029a41ca406e1ee8f3f70b02b259252148fb090fe18075afe08", "observation_ids": [ "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808" ], "evidence_type": "dmarc_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=DMARC1; p=reject;", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "4ae531f63461053f6b156364ada8a45d09c26704367bde3b64478537c2500584", "observation_ids": [ "1dd38c5f9958c2c3205599c00cde3c247cc5f23c8530efba659cbf6798d7eb14" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": "default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests", "severity": "high" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "observation_ids": [ "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "ns11.infomaniak.ch", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "observation_ids": [ "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "ns12.infomaniak.ch", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc", "observation_ids": [ "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = US, O = Let's Encrypt, CN = YR2", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744", "observation_ids": [ "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "hardfail", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "cf44695149359b324776e272fc9d6c2805611e11fe11183cc361c8b8c454a548", "observation_ids": [ "3f8b0addacfc7632c150b50d0028bd17ea1241a18008eacac6c6b962757e7ddd" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "2e9f6fdc56f5c8d5f14b61eb56ebce95cdf4d69dd2146589e60f453aeceb3bb0", "observation_ids": [ "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "d2aec703bf8dcce76e5a7677cb39a4f31c0dea17fc0606d92f6125a227c138fc", "observation_ids": [ "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2026-11-27T21:40:45+00:00", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "e4ee4bce749cdabbc5c3ba7c5241246cb5bb769c0086c264685bc18f131980d1", "observation_ids": [ "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "375cb07cf515fa96bc82544f10bdd37394ee188c0e05c51825ed121a74268ae6", "observation_ids": [ "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "87851603350dfa7478ae6756ad468b3b7509fd45434f4b7355158ad9b0013ef4", "observation_ids": [ "7743262a052424e3c2de439fb7b850a0c9bfb3174003604080a0fa5924e50fc1" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "66abf6ee82fac24f766f68fcab97ced2b4e438651cdca2b82ffb5c1c9f09655d", "observation_ids": [ "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3", "observation_ids": [ "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "185.125.27.197", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "afbb1eb86dacd0e72b5d16912e4c7696465cbd6489036a8754bf387c164e265e", "observation_ids": [ "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "aaef4152b05d64093edd25bfd2d74d3ea1175973c81cd6e719e3e638ddee7850", "observation_ids": [ "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "Apache" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "167f5d1ae37bd9e0b89fd2094dd86cfe029e69f9f1c9340a58e4390cc5552207", "observation_ids": [ "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903", "observation_ids": [ "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "mta-gw.infomaniak.ch", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631", "observation_ids": [ "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "a59cddd01fa574d07913ec35a6b699ae8e9b1fb38c92c6e91595921afd80d1cc", "observation_ids": [ "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "DENY" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b", "observation_ids": [ "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f" ], "evidence_type": "dmarc_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "reject", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "614b86f2e6875ec42cad1389835ebbfa90f8cca81e4e6f9b61a257f32557faa3", "observation_ids": [ "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "same-origin" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "e50e69c5cae91ab7b111f6023b7dd3681f2c1d1cddc27c650b3204b3528bcfd4", "observation_ids": [ "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "no-referrer" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "48c15a422df5cff16491317244e91c5fb6fe33820ca3e632b7b8ed12350b6efb", "observation_ids": [ "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "541d6057648e0ce1729272a8ba31125db5673035d86900db7cf54a548f91611d", "observation_ids": [ "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba" ], "evidence_type": "spf_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=spf1 include:spf.infomaniak.ch -all", "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "c342938b1330c9220885712e4635602572c13658e9dd7e8cffe37f3a9aa06e3a", "observation_ids": [ "d84d0fd937caa48cf51ac673a4ad082df891bf4d252673eb7a528e326fcccb28" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-29T21:40:46+00:00", "valid_to": "2026-11-27T21:40:45+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.197" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5b" ], "state": "observed" } }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "e137d9d8dbed4013f4e1462eeb00c7cc111b7371b1207cffbe30eb5bc54c8fab", "observation_ids": [ "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "a34f66d98f036c4015213e0bb8280a32f23631ee8be6a763442a59bb9096ed83", "observation_ids": [ "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "nosniff" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "d5c05bb364c59c937923311786632f862ca6cc6d5f7b07820d8cddd5d85e1f34", "observation_ids": [ "dd2285acdda87b152e1abdd20020d1cbc699db039911d8530ca54ed154017ea9" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e", "observation_ids": [ "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Apache", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "4795fb2bdb10955b0b3c6ea966aab7ff2c9245ce1eb64b4cd535d80532def555", "observation_ids": [ "ec249615f7307e043d74152c0105793ece2676c68e80bcd7d47ea30c19ffbcb0" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "114a667186a1976cabc1fdd42d4f5e4b217a6860465bd0ee60319cd71a0b4f44", "observation_ids": [ "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=31536000; includeSubDomains; preload" ], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "d13cc8dfd1b0b83a333017b4ef1e9288f161973814ca63470b958c9c33243538", "observation_ids": [ "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" }, { "id": "8975f5da10b317f8db033a28c33115c4b69f4f6a19d5aa70b7abec5877b6ce73", "observation_ids": [ "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00" } ] }, "dossier": { "executive_summary": [ "4 observations publiques sont documentées dans ce dossier.", "1 dépendances publiques structurantes sont visibles.", "9 évolutions utiles sont retenues depuis la lecture précédente.", "4 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 4, "deduced": 0, "to_confirm": 2, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72", "title": "Depends on provider", "value": "Infomaniak", "state": "observed", "state_label": "Observé", "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631" ], "rationale": "independent_provider_evidence_converges" }, { "id": "d7941deb0f809cebb53aa55bf9c63d92130dbbd11b1ec33354b2db20751aad42", "title": "Openpgp", "value": null, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "cf44695149359b324776e272fc9d6c2805611e11fe11183cc361c8b8c454a548" ], "rationale": "security_txt_encryption_not_observed" }, { "id": "f8667de3744e6d75171e4dff0cdeedbfaa4e2834af00bc7b1148a25fcb1a1ce9", "title": "Canary detection", "value": false, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "c414b54b1e5345f96b5805f092dd1c9033f7f74e5fa074a0d112635db33c898e" ], "rationale": "no_known_passive_signature_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 2, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6", "title": "Tls issuer", "value": "C = US, O = Let's Encrypt, CN = YR2", "state": "observed", "state_label": "Observé", "evidence_ids": [ "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc" ], "rationale": "certificate_observed" }, { "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "a0918d1e0b9fe99a95bf068f6d94912d82cccc28c2c302679b35c7f514714223" ], "rationale": "client_capability_unavailable" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217", "title": "Dmarc policy", "value": "reject", "state": "observed", "state_label": "Observé", "evidence_ids": [ "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b" ], "rationale": "mail_policy_observed" }, { "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570", "title": "Spf policy", "value": "hardfail", "state": "observed", "state_label": "Observé", "evidence_ids": [ "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 2, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" } ], "states": { "observed": 0, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "structuring_dependencies": [ { "label": "Infomaniak", "state": "observed", "evidence_ids": [ "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4", "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d", "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631" ] } ], "open_questions": [ { "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3", "subject": "webpion.com", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true }, { "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a", "subject": "webpion.com", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-06T01:57:48+00:00", "last_seen_at": "2026-09-06T01:57:48+00:00", "active": true } ], "evidence_count": 41, "meaningful_change_count": 9 }, "timeline": { "first_observed_at": "2026-09-04T19:30:56+00:00", "last_observed_at": "2026-09-06T01:57:48+00:00", "reference_state": "compared", "message": "Comparé à la lecture précédente conservée", "counts": { "appeared": 7, "modified": 2, "stable": 33, "disappeared": 0 }, "changes": [ { "status": "appeared", "label": "Nouveau", "title": "Canary signal", "before": null, "after": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Csp evidence", "before": null, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": true, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Dnssec evidence", "before": null, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Mail transport evidence", "before": null, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Modern transport evidence", "before": null, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Let's Encrypt, CN = YR2", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-08-29T21:40:46+00:00", "valid_to": "2026-11-27T21:40:45+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "185.125.27.197" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:1600::aaaa:0:0:80:5b" ], "state": "observed" } }, "direction": "indeterminate" }, { "status": "modified", "label": "Modifié", "title": "Module finding", "before": { "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "direction": "indeterminate" }, { "status": "modified", "label": "Modifié", "title": "Module finding", "before": { "evidence": "default-src 'none'; script-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; script-src-attr 'none'; style-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests", "severity": "high" }, "after": { "evidence": "default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests", "severity": "high" }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Openpgp discovery", "before": null, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "direction": "indeterminate" }, { "status": "appeared", "label": "Nouveau", "title": "Post quantum tls", "before": null, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "direction": "indeterminate" } ], "history_count": 2 }, "methodology": { "version": "2.3.1", "model": "evidence_first", "principles": [ "absence_of_evidence_is_not_evidence_of_absence", "unknown_remains_unknown", "provider_metadata_is_not_data_location", "edge_provider_is_not_origin_host", "single_snapshot_does_not_prove_resilience" ] } }