OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

alphatraining64.com

What is observed, how to verify it and what changed

8 public observations are documented in this dossier.

5 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 20:04 UTC First observation 2026-09-04 20:04 UTC Latest observation 2026-09-06 01:58 UTC
History Compare JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not observable from outsideOrigin host
  • ObservedDepends on providerInfomaniak
  • Not testedCanary detection

Infrastructure & transport

  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YR2
  • Not testedPost quantum tls

Mail & trust

  • ObservedDmarc policyreject
  • ObservedSpf policyhardfail

Dependencies & exposure

  • Not observable from outsideData location
  • ObservedDepends on providerGoogle
  • ObservedDepends on providerCloudflare

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for alphatraining64.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 20:04 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

10evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
10
Signals
1
Changes
0
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
spf_record dns b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643 
"2001:1600::aaaa:0:0:80:5a"
dns_address dns 3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f 
"185.125.27.195"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

19evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
19
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dependency_provider dependencies a2ec36f37b6395deff8d3911a6bbdd9eb7585c66f919c3cbe5aeb240c031b764 
{
    "critical": false,
    "hosts": [
        "cdnjs.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 1,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding resilience 3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
dependency_provider dependencies c2db015516fdc37e79084151d2d31deec4ed7c7ffaf0beda943583c4b04fe4c5 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
dependency_provider dependencies abe08eed5f94b8fd92bb7ae430e24340614686b75ede90f7140973454059def6 
{
    "critical": false,
    "hosts": [
        "images.unsplash.com"
    ],
    "id": "host-63978de5251d",
    "known": false,
    "name": "images.unsplash.com",
    "observation_count": 8,
    "services": [
        "unknown"
    ],
    "tracker": false
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding sovereignty e619e78bb66a43a0a01d0f3bb9f140cb941fcadeae34ceebf4eac1cfc4bffb91 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
spf_record dns b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies 2a29c8a881892fc8aa98d643422b21022987b7bcb636cf48e6f1762b88b69bea 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dependency_provider dependencies 2143357c3ca78e96a2fa791b161a86d0d961f1c0c855a5b50d04f46195e57560 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com",
        "fonts.gstatic.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 3,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
dns_address dns 431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643 
"2001:1600::aaaa:0:0:80:5a"
dns_address dns 3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f 
"185.125.27.195"
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 14f53828e0c358ce6af0f60d1bb7acf4407d9b4c2e07aa64f95cb70fb557779c 
"2026-10-10T22:06:56+00:00"
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 7ec2ae134a18dab90c7cf66b92905e4be18b10804272c1143d32dc92cfe30307 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 1adc90dc213a8c268d96db576f04aa7dc17476f8a979217dbef2408409269845 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 86c5f277ff51f6faf4f3b59eb5c4361886f7295c5b4681bdc7fc42a0e7501a46 
[
    "max-age=16000000"
]
module_finding headers f49cd49716818455a63183b520cd2561eb340c50b8e9bbd3a7113a05114e543f 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
tls_issuer tls 0dfef6f8dffd7e48c5cd8aab82eabb360b338875c0693a12b1185bb47cc54f2a 
"C = US, O = Let's Encrypt, CN = YR2"
module_finding headers 1347d1fb9eaf9ca107370a1774fb4b914a115562a9513eb631f36ac14fe1e507 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers a5330e797b122593eeb72505a4a30398c5f4b11c50f01f218c740f2a89193f2c 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 520db3046e30d2ce794df6e7317f4f70a47303bd7eeffa99e3cf00c9637a57cc 
{
    "evidence": null,
    "severity": "medium"
}
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7 
false
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
dmarc_policy mail_trust 63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266 
"reject"
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
module_finding mail_trust 252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_policy_flag mail_trust 262f48316ea7420747986d5eebd4b7aa7c98ccef2bed3b79b251faff84109963 
false
module_finding mail_trust c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e 
{
    "evidence": null,
    "severity": "low"
}
spf_record dns b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643 
"2001:1600::aaaa:0:0:80:5a"
dns_address dns 3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f 
"185.125.27.195"
spf_policy mail_trust 70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505 
"hardfail"
mail_policy_flag mail_trust 1b916e5b0584617311f4b5fc0e60593cb61bd1a3aaed5474ca6c9d129da9074b 
false
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7 
false
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
dmarc_policy mail_trust 63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266 
"reject"
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
module_finding mail_trust 252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_policy_flag mail_trust 262f48316ea7420747986d5eebd4b7aa7c98ccef2bed3b79b251faff84109963 
false
module_finding mail_trust c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e 
{
    "evidence": null,
    "severity": "low"
}
spf_record dns b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643 
"2001:1600::aaaa:0:0:80:5a"
dns_address dns 3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f 
"185.125.27.195"
spf_policy mail_trust 70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505 
"hardfail"
mail_policy_flag mail_trust 1b916e5b0584617311f4b5fc0e60593cb61bd1a3aaed5474ca6c9d129da9074b 
false
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

22evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
22
Signals
2
Changes
0
module_finding supply_chain 6862d1a8b3ab904183bac19d5b9f5c39f63c3948499804dd660643f129e5c400 
{
    "evidence": 25,
    "severity": "low"
}
dependency_provider dependencies a2ec36f37b6395deff8d3911a6bbdd9eb7585c66f919c3cbe5aeb240c031b764 
{
    "critical": false,
    "hosts": [
        "cdnjs.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 1,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding supply_chain b4186cedb53fdf7570c581a77ebd61f531508c94a77b2f200a0631954643860e 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 19b904344bfbc07151f888a3233f189b3f5783ae372b9134785111c319bc0494 
{
    "evidence": 1,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
dependency_provider dependencies c2db015516fdc37e79084151d2d31deec4ed7c7ffaf0beda943583c4b04fe4c5 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
dependency_provider dependencies abe08eed5f94b8fd92bb7ae430e24340614686b75ede90f7140973454059def6 
{
    "critical": false,
    "hosts": [
        "images.unsplash.com"
    ],
    "id": "host-63978de5251d",
    "known": false,
    "name": "images.unsplash.com",
    "observation_count": 8,
    "services": [
        "unknown"
    ],
    "tracker": false
}
module_finding supply_chain a07da9d6836a646991e162bea8daff9143d0fd68e91458af34f1e8e5d6298436 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding sovereignty e619e78bb66a43a0a01d0f3bb9f140cb941fcadeae34ceebf4eac1cfc4bffb91 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
spf_record dns b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies 2a29c8a881892fc8aa98d643422b21022987b7bcb636cf48e6f1762b88b69bea 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dependency_provider dependencies 2143357c3ca78e96a2fa791b161a86d0d961f1c0c855a5b50d04f46195e57560 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com",
        "fonts.gstatic.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 3,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
dns_address dns 431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643 
"2001:1600::aaaa:0:0:80:5a"
dns_address dns 3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f 
"185.125.27.195"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
0
module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
technology technology 5088ed3027d8c04804f585e7ded389816e63ae09834c75aa21f3c9d9ec7efa48 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
technology technology 2c39458382ccbda23b95c85162e105390fb1beb085e698daa11673a1c5d93f46 
{
    "name": "WordPress",
    "version": "",
    "version_exposed": false
}
module_finding headers 7ec2ae134a18dab90c7cf66b92905e4be18b10804272c1143d32dc92cfe30307 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 1adc90dc213a8c268d96db576f04aa7dc17476f8a979217dbef2408409269845 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 86c5f277ff51f6faf4f3b59eb5c4361886f7295c5b4681bdc7fc42a0e7501a46 
[
    "max-age=16000000"
]
module_finding headers f49cd49716818455a63183b520cd2561eb340c50b8e9bbd3a7113a05114e543f 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding headers 1347d1fb9eaf9ca107370a1774fb4b914a115562a9513eb631f36ac14fe1e507 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers a5330e797b122593eeb72505a4a30398c5f4b11c50f01f218c740f2a89193f2c 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 520db3046e30d2ce794df6e7317f4f70a47303bd7eeffa99e3cf00c9637a57cc 
{
    "evidence": null,
    "severity": "medium"
}
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

29evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
29
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding supply_chain 6862d1a8b3ab904183bac19d5b9f5c39f63c3948499804dd660643f129e5c400 
{
    "evidence": 25,
    "severity": "low"
}
module_finding transparency ccd6ddc2bee5abfce2dd7a4994aed8b13c4a9710b27b1cd4fde8741e60ae5dd8 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency b4d8ec89db1b8a8055191fbe5471edabfaa8c153f162ed3b021fad2085604fe8 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 114969c6be867968e07a70cd202cc19dbfedacd90b250d602015545465e694a5 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience 3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding supply_chain b4186cedb53fdf7570c581a77ebd61f531508c94a77b2f200a0631954643860e 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 19b904344bfbc07151f888a3233f189b3f5783ae372b9134785111c319bc0494 
{
    "evidence": 1,
    "severity": "low"
}
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 7ec2ae134a18dab90c7cf66b92905e4be18b10804272c1143d32dc92cfe30307 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding supply_chain a07da9d6836a646991e162bea8daff9143d0fd68e91458af34f1e8e5d6298436 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers 1adc90dc213a8c268d96db576f04aa7dc17476f8a979217dbef2408409269845 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 86c5f277ff51f6faf4f3b59eb5c4361886f7295c5b4681bdc7fc42a0e7501a46 
[
    "max-age=16000000"
]
module_finding sovereignty e619e78bb66a43a0a01d0f3bb9f140cb941fcadeae34ceebf4eac1cfc4bffb91 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding mail_trust c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e 
{
    "evidence": null,
    "severity": "low"
}
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

29evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
29
Signals
0
Changes
0
module_finding supply_chain 6862d1a8b3ab904183bac19d5b9f5c39f63c3948499804dd660643f129e5c400 
{
    "evidence": 25,
    "severity": "low"
}
module_finding transparency ccd6ddc2bee5abfce2dd7a4994aed8b13c4a9710b27b1cd4fde8741e60ae5dd8 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency b4d8ec89db1b8a8055191fbe5471edabfaa8c153f162ed3b021fad2085604fe8 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 114969c6be867968e07a70cd202cc19dbfedacd90b250d602015545465e694a5 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience 3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding supply_chain b4186cedb53fdf7570c581a77ebd61f531508c94a77b2f200a0631954643860e 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 19b904344bfbc07151f888a3233f189b3f5783ae372b9134785111c319bc0494 
{
    "evidence": 1,
    "severity": "low"
}
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 7ec2ae134a18dab90c7cf66b92905e4be18b10804272c1143d32dc92cfe30307 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding supply_chain a07da9d6836a646991e162bea8daff9143d0fd68e91458af34f1e8e5d6298436 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding dns f6e0b76f618dd2223868c1929b76e7857cc59a94a20675fe3f40d55554f5e4ba 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers 1adc90dc213a8c268d96db576f04aa7dc17476f8a979217dbef2408409269845 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 86c5f277ff51f6faf4f3b59eb5c4361886f7295c5b4681bdc7fc42a0e7501a46 
[
    "max-age=16000000"
]
module_finding sovereignty e619e78bb66a43a0a01d0f3bb9f140cb941fcadeae34ceebf4eac1cfc4bffb91 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding mail_trust c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e 
{
    "evidence": null,
    "severity": "low"
}
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

43evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
43
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

module_finding supply_chain 6862d1a8b3ab904183bac19d5b9f5c39f63c3948499804dd660643f129e5c400 
{
    "evidence": 25,
    "severity": "low"
}
module_finding transparency ccd6ddc2bee5abfce2dd7a4994aed8b13c4a9710b27b1cd4fde8741e60ae5dd8 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency b4d8ec89db1b8a8055191fbe5471edabfaa8c153f162ed3b021fad2085604fe8 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 114969c6be867968e07a70cd202cc19dbfedacd90b250d602015545465e694a5 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 14f53828e0c358ce6af0f60d1bb7acf4407d9b4c2e07aa64f95cb70fb557779c 
"2026-10-10T22:06:56+00:00"
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
mail_policy_flag mail_trust 4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7 
false
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience 3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding supply_chain b4186cedb53fdf7570c581a77ebd61f531508c94a77b2f200a0631954643860e 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 19b904344bfbc07151f888a3233f189b3f5783ae372b9134785111c319bc0494 
{
    "evidence": 1,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust 63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266 
"reject"
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}
dns_nameserver dns 72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991 
"ns11.infomaniak.ch"
module_finding headers 7ec2ae134a18dab90c7cf66b92905e4be18b10804272c1143d32dc92cfe30307 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dmarc_record dns 835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014 
"v=DMARC1; p=reject;"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

50evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
50
Signals
3
Changes
0
module_finding supply_chain 6862d1a8b3ab904183bac19d5b9f5c39f63c3948499804dd660643f129e5c400 
{
    "evidence": 25,
    "severity": "low"
}
module_finding transparency ccd6ddc2bee5abfce2dd7a4994aed8b13c4a9710b27b1cd4fde8741e60ae5dd8 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency b4d8ec89db1b8a8055191fbe5471edabfaa8c153f162ed3b021fad2085604fe8 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 91adde1d7a146603070cd810496f550ebe0a183678eb75ab643c52be0c9fa466 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 114969c6be867968e07a70cd202cc19dbfedacd90b250d602015545465e694a5 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust 50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 14f53828e0c358ce6af0f60d1bb7acf4407d9b4c2e07aa64f95cb70fb557779c 
"2026-10-10T22:06:56+00:00"
http_header headers 9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6 
[
    "Apache"
]
dependency_provider dependencies a2ec36f37b6395deff8d3911a6bbdd9eb7585c66f919c3cbe5aeb240c031b764 
{
    "critical": false,
    "hosts": [
        "cdnjs.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 1,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
technology technology 5088ed3027d8c04804f585e7ded389816e63ae09834c75aa21f3c9d9ec7efa48 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
module_finding dependencies 9e344eca1c216be9b74b14d95f4395c4967990fc24a61a8db262b5eea330abaf 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
mail_policy_flag mail_trust 4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7 
false
module_finding headers 5824e6626cb569dcdff99d0f686a2f867690a16d57f774cc8b80aa1266cdb3f2 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience 3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding supply_chain b4186cedb53fdf7570c581a77ebd61f531508c94a77b2f200a0631954643860e 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}
module_finding dns 0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 19b904344bfbc07151f888a3233f189b3f5783ae372b9134785111c319bc0494 
{
    "evidence": 1,
    "severity": "low"
}
dns_nameserver dns fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6 
"ns12.infomaniak.ch"
dependency_provider dependencies c2db015516fdc37e79084151d2d31deec4ed7c7ffaf0beda943583c4b04fe4c5 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
module_finding headers 88c8692f6b4cd73894e0a1865d1381922e4ee216aac5bc0bd2d4282be096903a 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust 63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266 
"reject"
technology technology 2c39458382ccbda23b95c85162e105390fb1beb085e698daa11673a1c5d93f46 
{
    "name": "WordPress",
    "version": "",
    "version_exposed": false
}
mail_exchanger dns 6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816 
"mta-gw.infomaniak.ch"
module_finding sovereignty 411fc98d03b448a2376d1ef1e93b2e7e50c6d3fe9ba844c03cfc27e05ddb3219 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain alphatraining64.com

DNS

2
DNS server Observed

ns12.infomaniak.ch

DNS server Observed

ns11.infomaniak.ch

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

2
Observed technology Observed

WordPress

Observed technology Observed

Apache

external resources

5
External provider or resource Observed

Cloudflare

External provider or resource Observed

images.unsplash.com

External provider or resource Observed

formspree.io

External provider or resource Observed

Google

External provider or resource Corroborated

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

50 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

50evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": 25, "severity": "low" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 25,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#02 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#03 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#04 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#05 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": 404, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 404,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#06 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#07 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-10-10T22:06:56+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-10-10T22:06:56+00:00

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#08 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "Apache" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "Apache"
]

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#09 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "cdnjs.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 1, "services": [ "cdn", "security" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "cdnjs.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 1,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#10 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Apache", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#11 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "formspree.io", "images.unsplash.com" ], "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#12 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#13 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#14 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#15 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": [ "cdnjs.cloudflare.com", "fonts.googleapis.com", "fonts.gstatic.com", "formspree.io", "images.unsplash.com" ], "severity": "medium" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "cdnjs.cloudflare.com",
        "fonts.googleapis.com",
        "fonts.gstatic.com",
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#16 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#17 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": 1, "severity": "low" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 1,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#18 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns12.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS alphatraining64.com
View raw data 
ns12.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#19 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "formspree.io" ], "id": "host-8eec65f47bed", "known": false, "name": "formspree.io", "observation_count": 1, "services": [ "unknown" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#20 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#21 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.alphatraining64.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#22 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "WordPress", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "WordPress",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#23 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX alphatraining64.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#24 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Cloudflare", "Google" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#25 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns11.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS alphatraining64.com
View raw data 
ns11.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#26 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#27 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#28 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#29 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "images.unsplash.com" ], "id": "host-63978de5251d", "known": false, "name": "images.unsplash.com", "observation_count": 8, "services": [ "unknown" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "images.unsplash.com"
    ],
    "id": "host-63978de5251d",
    "known": false,
    "name": "images.unsplash.com",
    "observation_count": 8,
    "services": [
        "unknown"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#30 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#31 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": [ "formspree.io" ], "severity": "medium" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#32 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#33 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#34 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=16000000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=16000000"
]

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#35 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "formspree.io", "images.unsplash.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io",
        "images.unsplash.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#36 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#37 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#38 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=16000000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#39 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#40 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#41 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YR2
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect alphatraining64.com:443 -servername alphatraining64.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YR2

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#42 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "info" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#43 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#44 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "fonts.googleapis.com", "fonts.gstatic.com" ], "id": "google", "known": true, "name": "Google", "observation_count": 3, "services": [ "analytics", "captcha", "fonts", "maps", "video" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com",
        "fonts.gstatic.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 3,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#45 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "critical" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "critical"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#46 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2001:1600::aaaa:0:0:80:5a
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A alphatraining64.com && dig AAAA alphatraining64.com
View raw data 
2001:1600::aaaa:0:0:80:5a

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#47 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
185.125.27.195
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A alphatraining64.com && dig AAAA alphatraining64.com
View raw data 
185.125.27.195

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#48 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT alphatraining64.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#49 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

#50 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:04:58+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "fbedc872dac327b5699873f997781f04a79b9c2e82466b012583cece926d8317",
        "display_name": "alphatraining64.com",
        "slug": "alphatraining64-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "alphatraining64.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 50,
        "evidence_count": 50,
        "provider_count": 5,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}