OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

divinexa.com

What is observed, how to verify it and what changed

7 public observations are documented in this dossier.

2 structuring public dependencies are visible.

9 useful changes are retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-06 01:56 UTC First observation 2026-09-04 19:34 UTC Latest observation 2026-09-06 01:56 UTC
History Compare JSON Markdown

TIME

What changed over time

Compared with the previous stored reading

7Appeared
2Modified
41Stable
0Disappeared
New

Canary signal

New

Csp evidence

Modified

Dmarc record

v=DMARC1; p=reject; v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;

New

Dnssec evidence

New

Mail transport evidence

New

Modern transport evidence

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • ObservedDepends on providerCloudflare
  • Not observable from outsideOrigin host
  • ObservedOpenpgp

Infrastructure & transport

  • Not testedPost quantum tls
  • ObservedTls issuerC = US, O = Google Trust Services, CN = WE1

Mail & trust

  • ObservedSpf policyhardfail
  • ObservedDmarc policyreject

Dependencies & exposure

  • ObservedDepends on providerroastmyurl.com
  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for divinexa.com. 2 questions remain open with the available public evidence.

Measured on 2026-09-06 01:56 UTC Engine 2.9.2.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Cloudflare is associated with 6 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

Changed

Canary signal

Not observedStructured value changed

Changed

Csp evidence

Not observedStructured value changed

Changed

Dmarc record

v=DMARC1; p=reject;v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;

Changed

Dnssec evidence

Not observedStructured value changed

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented Change observed

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

25evidence
10changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
25
Signals
1
Changes
10
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns f3e91f1a2864af6723e98a92beef49a953406bcf11d52c055a6d9defe75a8616 
"2606:4700:3032::ac43:9519"
spf_record dns 95808b6d3df3188d8bc4b662aa7e31d98f4b554f5cc880bfcaa7f1dd9142be45 
"v=spf1 include:_spf.mx.cloudflare.net -all"
caa_record dns 25dec7b92f9bf629631e90619d5d3503971b34b4a6e162982e395f92256d0a54 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns a6fdcb86b54a6a340da0d0d6fef7f22b2d83c2f9ea875d4892594d1057bf60c3 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}
caa_record dns ee04c14a31a62d8d7493d272cf64b8cef4b47a53a51244988dd30202139b086b 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}
mail_exchanger dns aab7cb566e9bc93eb72e223a15597d88770e242be7332a24bc0f2421de2d6cc6 
"route2.mx.cloudflare.net"
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
caa_record dns c49116b257b445ad118f65ff19fe01d15dd453335d1c2bb02347597424beedb8 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "ssl.com"
}
dns_nameserver dns d5dcc1b746f6c4448b9a7ae0d25fc597f68e830c91ee10710ecaac48fcc8bd57 
"david.ns.cloudflare.com"
caa_record dns d2af9366221b15932778480817e36b442e11763167848a061921d86f6416bdb8 
{
    "flags": 0,
    "tag": "issue",
    "value": "ssl.com"
}
dmarc_record dns 88547ab8629ca1b2376eaaf6c3fe59c7c2c0416b225274687aa08826fc00acbe 
"v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;"
caa_record dns 35b9440d8dd07ec255bb6fc1ea00c67aa4e9fd05b8284274ccbfc572d0b38cf1 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "letsencrypt.org"
}
mail_exchanger dns 87202b1b581a43196272c221254c34c4ff9c56b8d932fefee4a3ded2032bb952 
"route3.mx.cloudflare.net"
caa_record dns 1b2cb2e2066690d7c59eec6bc4a5f7e198d27c1cf8b2a3367fee2cf4959ca653 
{
    "flags": 0,
    "tag": "issue",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
02
Documented Change observed

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

33evidence
15changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
33
Signals
2
Changes
15

Unknowns and limitations

2 items still require qualification

dependency_provider dependencies d4e247441ceab49ad252606b0c603e1c0207cf5e26ed20cf03847cbbb707afe4 
{
    "critical": false,
    "hosts": [
        "roastmyurl.com"
    ],
    "id": "host-1b4f6aaadb14",
    "known": false,
    "name": "roastmyurl.com",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
module_finding resilience 86a11d204d489895f17751866b2211d50c17e5526a5066f60cb52c8c8d5c2031 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns f3e91f1a2864af6723e98a92beef49a953406bcf11d52c055a6d9defe75a8616 
"2606:4700:3032::ac43:9519"
spf_record dns 95808b6d3df3188d8bc4b662aa7e31d98f4b554f5cc880bfcaa7f1dd9142be45 
"v=spf1 include:_spf.mx.cloudflare.net -all"
caa_record dns 25dec7b92f9bf629631e90619d5d3503971b34b4a6e162982e395f92256d0a54 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns a6fdcb86b54a6a340da0d0d6fef7f22b2d83c2f9ea875d4892594d1057bf60c3 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}
caa_record dns ee04c14a31a62d8d7493d272cf64b8cef4b47a53a51244988dd30202139b086b 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}
dependency_provider dependencies 1711f796462f01e53d139110e787e6b62986b274478ea0ec832e535f29dcc429 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "david.ns.cloudflare.com",
        "route1.mx.cloudflare.net",
        "route2.mx.cloudflare.net",
        "route3.mx.cloudflare.net",
        "thea.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 6,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
module_finding sovereignty f812619b0047538b26af5b71ab63e9a2f551458ecc4617404f2948d8960656f7 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
mail_exchanger dns aab7cb566e9bc93eb72e223a15597d88770e242be7332a24bc0f2421de2d6cc6 
"route2.mx.cloudflare.net"
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
03
Documented Change observed

Encryption and transport

Public evidence provides enough material to document this angle

Angle 03

Encryption and transport

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
7changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
7
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]
tls_valid_to tls ed8222ba33f60c455035a5107528893a36c15413816cd05fa4042e6fe889c536 
"2026-10-29T19:38:43+00:00"
tls_issuer tls aef57ebde7b66dcf1f1dfb8ab6c2ca6e93ce8ad99eb78573479e26addd8597ee 
"C = US, O = Google Trust Services, CN = WE1"
http_header headers 30d5eea8fa44f3d74e8920a873fb42124adf4a5d3861e6cd6e794ddeacf43d5e 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"
]
http_header headers 1cc0482643d5215fd2af30eed692038b39753437a77648b2650d98135157eca3 
[
    "cloudflare"
]
http_header headers b3d5052af543e30923d0731786851ce5519cb44f5a18f492b90f60a45fc99f90 
[
    "DENY"
]
http_header headers 4114c59b6e1f764687a7cb2714d66ef85c344ce89bff4eda5333f242bff48191 
[
    "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"
]
04
Documented Change observed

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

30evidence
11changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
30
Signals
2
Changes
11
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
mail_policy_flag mail_trust bee28baa881541a510d429c86585d500baf01271dfdc840a3e46c41905c6cc5b 
true
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns f3e91f1a2864af6723e98a92beef49a953406bcf11d52c055a6d9defe75a8616 
"2606:4700:3032::ac43:9519"
spf_record dns 95808b6d3df3188d8bc4b662aa7e31d98f4b554f5cc880bfcaa7f1dd9142be45 
"v=spf1 include:_spf.mx.cloudflare.net -all"
caa_record dns 25dec7b92f9bf629631e90619d5d3503971b34b4a6e162982e395f92256d0a54 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns a6fdcb86b54a6a340da0d0d6fef7f22b2d83c2f9ea875d4892594d1057bf60c3 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}
spf_policy mail_trust 14ca552caaaa5f9fbcd896976f8c99b4e21ba1a56e1b45c47c4d214353129ca6 
"hardfail"
caa_record dns ee04c14a31a62d8d7493d272cf64b8cef4b47a53a51244988dd30202139b086b 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}
mail_policy_flag mail_trust fa8fcc435d002018a50fcb4fe7d1b7903a596c63d7928719a2c1c6df1b42ce30 
true
mail_exchanger dns aab7cb566e9bc93eb72e223a15597d88770e242be7332a24bc0f2421de2d6cc6 
"route2.mx.cloudflare.net"
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
caa_record dns c49116b257b445ad118f65ff19fe01d15dd453335d1c2bb02347597424beedb8 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "ssl.com"
}
mail_policy_flag mail_trust 11480da3e5536338d2c34d5bd8abe4a1fc8a31c5fdaf5df3a129690fac914c73 
false
dns_nameserver dns d5dcc1b746f6c4448b9a7ae0d25fc597f68e830c91ee10710ecaac48fcc8bd57 
"david.ns.cloudflare.com"
caa_record dns d2af9366221b15932778480817e36b442e11763167848a061921d86f6416bdb8 
{
    "flags": 0,
    "tag": "issue",
    "value": "ssl.com"
}
05
Documented Change observed

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

30evidence
11changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
30
Signals
2
Changes
11
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
mail_policy_flag mail_trust bee28baa881541a510d429c86585d500baf01271dfdc840a3e46c41905c6cc5b 
true
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns f3e91f1a2864af6723e98a92beef49a953406bcf11d52c055a6d9defe75a8616 
"2606:4700:3032::ac43:9519"
spf_record dns 95808b6d3df3188d8bc4b662aa7e31d98f4b554f5cc880bfcaa7f1dd9142be45 
"v=spf1 include:_spf.mx.cloudflare.net -all"
caa_record dns 25dec7b92f9bf629631e90619d5d3503971b34b4a6e162982e395f92256d0a54 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns a6fdcb86b54a6a340da0d0d6fef7f22b2d83c2f9ea875d4892594d1057bf60c3 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}
spf_policy mail_trust 14ca552caaaa5f9fbcd896976f8c99b4e21ba1a56e1b45c47c4d214353129ca6 
"hardfail"
caa_record dns ee04c14a31a62d8d7493d272cf64b8cef4b47a53a51244988dd30202139b086b 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}
mail_policy_flag mail_trust fa8fcc435d002018a50fcb4fe7d1b7903a596c63d7928719a2c1c6df1b42ce30 
true
mail_exchanger dns aab7cb566e9bc93eb72e223a15597d88770e242be7332a24bc0f2421de2d6cc6 
"route2.mx.cloudflare.net"
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
caa_record dns c49116b257b445ad118f65ff19fe01d15dd453335d1c2bb02347597424beedb8 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "ssl.com"
}
mail_policy_flag mail_trust 11480da3e5536338d2c34d5bd8abe4a1fc8a31c5fdaf5df3a129690fac914c73 
false
dns_nameserver dns d5dcc1b746f6c4448b9a7ae0d25fc597f68e830c91ee10710ecaac48fcc8bd57 
"david.ns.cloudflare.com"
caa_record dns d2af9366221b15932778480817e36b442e11763167848a061921d86f6416bdb8 
{
    "flags": 0,
    "tag": "issue",
    "value": "ssl.com"
}
06
Documented Change observed

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

33evidence
7changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
33
Signals
2
Changes
7
dependency_provider dependencies d4e247441ceab49ad252606b0c603e1c0207cf5e26ed20cf03847cbbb707afe4 
{
    "critical": false,
    "hosts": [
        "roastmyurl.com"
    ],
    "id": "host-1b4f6aaadb14",
    "known": false,
    "name": "roastmyurl.com",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding supply_chain 7afe9034a538165306e57789f59ad2045fa7cdf13283e946a0c15feab7613d7e 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
dns_address dns f3e91f1a2864af6723e98a92beef49a953406bcf11d52c055a6d9defe75a8616 
"2606:4700:3032::ac43:9519"
spf_record dns 95808b6d3df3188d8bc4b662aa7e31d98f4b554f5cc880bfcaa7f1dd9142be45 
"v=spf1 include:_spf.mx.cloudflare.net -all"
caa_record dns 25dec7b92f9bf629631e90619d5d3503971b34b4a6e162982e395f92256d0a54 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
caa_record dns a6fdcb86b54a6a340da0d0d6fef7f22b2d83c2f9ea875d4892594d1057bf60c3 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}
caa_record dns ee04c14a31a62d8d7493d272cf64b8cef4b47a53a51244988dd30202139b086b 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}
dependency_provider dependencies 1711f796462f01e53d139110e787e6b62986b274478ea0ec832e535f29dcc429 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "david.ns.cloudflare.com",
        "route1.mx.cloudflare.net",
        "route2.mx.cloudflare.net",
        "route3.mx.cloudflare.net",
        "thea.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 6,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
module_finding sovereignty f812619b0047538b26af5b71ab63e9a2f551458ecc4617404f2948d8960656f7 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
mail_exchanger dns aab7cb566e9bc93eb72e223a15597d88770e242be7332a24bc0f2421de2d6cc6 
"route2.mx.cloudflare.net"
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
07
Documented Change observed

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

11evidence
1changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
11
Signals
0
Changes
1
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]
technology technology 8477089f1ccd97eda8ceee949b3025faa2edb404a1995071c0aa84878200cb09 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers 30d5eea8fa44f3d74e8920a873fb42124adf4a5d3861e6cd6e794ddeacf43d5e 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"
]
http_header headers 1cc0482643d5215fd2af30eed692038b39753437a77648b2650d98135157eca3 
[
    "cloudflare"
]
http_header headers b3d5052af543e30923d0731786851ce5519cb44f5a18f492b90f60a45fc99f90 
[
    "DENY"
]
http_header headers 4114c59b6e1f764687a7cb2714d66ef85c344ce89bff4eda5333f242bff48191 
[
    "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"
]
08
Documented Stable

Public exposure

Public evidence provides enough material to document this angle

Angle 08

Public exposure

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
0
Changes
0
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
module_finding resilience 86a11d204d489895f17751866b2211d50c17e5526a5066f60cb52c8c8d5c2031 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding supply_chain 7afe9034a538165306e57789f59ad2045fa7cdf13283e946a0c15feab7613d7e 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 30d5eea8fa44f3d74e8920a873fb42124adf4a5d3861e6cd6e794ddeacf43d5e 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"
]
http_header headers 1cc0482643d5215fd2af30eed692038b39753437a77648b2650d98135157eca3 
[
    "cloudflare"
]
module_finding sovereignty f812619b0047538b26af5b71ab63e9a2f551458ecc4617404f2948d8960656f7 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
http_header headers b3d5052af543e30923d0731786851ce5519cb44f5a18f492b90f60a45fc99f90 
[
    "DENY"
]
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers 4114c59b6e1f764687a7cb2714d66ef85c344ce89bff4eda5333f242bff48191 
[
    "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"
]
module_finding resilience 680367293772f5ced42f10582a632f65a3df124435283ac65c5a804d2da2c117 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 85.7
    },
    "severity": "medium"
}
cookie privacy c988cb188c24ad31d9648a908e20a581a0c21503505f0ceb35cf248a44d9187e 
{
    "http_only": true,
    "name": "dx_session",
    "same_site": "lax",
    "secure": true
}
09
Documented Stable

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

19evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
19
Signals
0
Changes
0
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
module_finding resilience 86a11d204d489895f17751866b2211d50c17e5526a5066f60cb52c8c8d5c2031 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding supply_chain 7afe9034a538165306e57789f59ad2045fa7cdf13283e946a0c15feab7613d7e 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 30d5eea8fa44f3d74e8920a873fb42124adf4a5d3861e6cd6e794ddeacf43d5e 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"
]
http_header headers 1cc0482643d5215fd2af30eed692038b39753437a77648b2650d98135157eca3 
[
    "cloudflare"
]
module_finding sovereignty f812619b0047538b26af5b71ab63e9a2f551458ecc4617404f2948d8960656f7 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
http_header headers b3d5052af543e30923d0731786851ce5519cb44f5a18f492b90f60a45fc99f90 
[
    "DENY"
]
module_finding dns 9cca2ca5dad70433fdd68d8139cccbcf0612c99ef0e3780a9058b101260c80a7 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers 4114c59b6e1f764687a7cb2714d66ef85c344ce89bff4eda5333f242bff48191 
[
    "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"
]
module_finding resilience 680367293772f5ced42f10582a632f65a3df124435283ac65c5a804d2da2c117 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 85.7
    },
    "severity": "medium"
}
10
Documented Change observed

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

50evidence
23changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
50
Signals
2
Changes
23
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
module_finding resilience 86a11d204d489895f17751866b2211d50c17e5526a5066f60cb52c8c8d5c2031 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
mail_policy_flag mail_trust bee28baa881541a510d429c86585d500baf01271dfdc840a3e46c41905c6cc5b 
true
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]
tls_valid_to tls ed8222ba33f60c455035a5107528893a36c15413816cd05fa4042e6fe889c536 
"2026-10-29T19:38:43+00:00"
caa_record dns 79312b0d1a84372572d8509e43973f49333ef64b16a64909b92a8aba7d7a36b5 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}
module_finding dns 879c08dae7fcab1b568b76c6a01686086aa2c6ce79b4a58ca9626882783f9cc7 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding supply_chain 7afe9034a538165306e57789f59ad2045fa7cdf13283e946a0c15feab7613d7e 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
tls_issuer tls aef57ebde7b66dcf1f1dfb8ab6c2ca6e93ce8ad99eb78573479e26addd8597ee 
"C = US, O = Google Trust Services, CN = WE1"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
50changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
50
12
Documented Stable

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

60evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
60
Signals
3
Changes
0
dependency_provider dependencies d4e247441ceab49ad252606b0c603e1c0207cf5e26ed20cf03847cbbb707afe4 
{
    "critical": false,
    "hosts": [
        "roastmyurl.com"
    ],
    "id": "host-1b4f6aaadb14",
    "known": false,
    "name": "roastmyurl.com",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
post_quantum_tls pq_tls_probe 0260b32b8d0201dad5f9993be85db8c5a580cb6de8ff1ebf70604ec466ae2864 
{
    "capability": {
        "capable": false,
        "groups": [],
        "reason": "proc_open_unavailable"
    },
    "group": null,
    "reason": "client_capability_unavailable",
    "state": "untested"
}
dns_nameserver dns 4275dfac12e605f231dc397f8a689d2b4e89534cc898e5cc06a3c65185cf6ced 
"thea.ns.cloudflare.com"
http_header headers 17c8258ca4d23bd20d98cce36073a172ee95ada335934d1e0138b8495fd0aa13 
[
    "same-origin"
]
caa_record dns f14dffab06e7e24b70c5e6e48315ea0deb61946f3769c30445025282f4d0f7ae 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}
module_finding dependencies 9a15983e4006a8dfa596df1fdcc10dc7115821854b9d1ede1bbcbd30e06645a6 
{
    "evidence": "85.7%",
    "severity": "medium"
}
caa_record dns 97160a77e5e55976e8db7b67342e943c0070e83d5962358d8e4b7b0be0b4ebb9 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}
dns_address dns d6422b1e440b126ca63388956816425f75af93f7ff26b7fa3db4fe71fe9359e7 
"104.21.33.196"
module_finding resilience 86a11d204d489895f17751866b2211d50c17e5526a5066f60cb52c8c8d5c2031 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}
mail_transport_evidence mail_transport df0eb00975e71a170cc1c4e90ae519d9bbefceeb979d828ee9394f005b230a5b 
{
    "bimi": {
        "records": [],
        "state": "not_observed"
    },
    "dane_tlsa": {
        "query_supported": false,
        "reason": "tlsa_query_not_available",
        "records": [],
        "state": "untested"
    },
    "dkim": {
        "reason": "no_selector_bruteforce",
        "state": "untested"
    },
    "mta_sts": {
        "policy": {
            "max_age": "86400",
            "mode": "testing",
            "mx": [
                "*.mx.cloudflare.net"
            ],
            "version": "STSv1"
        },
        "policy_state": "observed",
        "records": [
            "v=STSv1; id=20230615T153000;"
        ],
        "state": "observed"
    },
    "tls_rpt": {
        "records": [
            "v=TLSRPTv1; rua=mailto:tlsrpt@divinexa.com"
        ],
        "state": "observed"
    }
}
dnssec_evidence dnssec_depth 677f9b656968bb255f6f73262cc81e4840fdff7a30e9ee90cd2412ddc7f9e426 
{
    "chain_consistency": {
        "reason": "insufficient_record_evidence",
        "state": "untested"
    },
    "dnskey": {
        "query_supported": false,
        "records": [],
        "state": "untested"
    },
    "ds": {
        "query_supported": false,
        "records": [],
        "state": "untested"
    },
    "validation": {
        "reason": "no_validating_resolver",
        "state": "untested"
    }
}
http_header headers 68de8d965ab845c994807607d91965f9d46b3dd2112b11e455f99ce0f8d8f4a3 
[
    "max-age=63072000; includeSubDomains; preload"
]
dns_address dns 7d417daeeb7448fceff32ed435900485a58b8171e07776bc9e9a8439ac9c7963 
"2606:4700:3032::6815:21c4"
module_finding dependencies 4bc100187b792c1f45ae236e72e69d0a349b4d363514a637eace6d8f48524731 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
http_header headers 148cff7a24e8aa09299c0c8e488f57ef002668a3e7267437dfc17287a3e2c64f 
[
    "nosniff"
]
mail_policy_flag mail_trust bee28baa881541a510d429c86585d500baf01271dfdc840a3e46c41905c6cc5b 
true
module_finding sovereignty 6677e33602cd6cea614605bd2093cdf2b388c24622ea96049671ebccd864a48c 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}
dns_address dns 9632fb0401a782afdc0bfe906c64328600e07b381bf8dac3edeb940b0f1d49e3 
"172.67.149.25"
mail_exchanger dns 459eed0e1767cd1ea8a9c575e015eead936b79f3654ac19b67345e9546109c79 
"route1.mx.cloudflare.net"
http_header headers 5bb9b3ffbbf6e70ada42d0800933828e9da0c9f24c7a60e66e5d7165ec71f78c 
[
    "same-origin"
]
caa_record dns 45ede229448bd88d87435ef22dedecf5d5e89e578ae6fcf792353cf86cc269d3 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}
http_header headers f9f118337948e46e9b7384dcb422356bd5ea69673e7c20ff17d3b37761988580 
[
    "require-corp"
]
modern_transport_evidence modern_transport a3139668bde954e81fe645275137355431cf3b1143a937f1b0fab0825423bf85 
{
    "alpn": {
        "state": "untested",
        "value": ""
    },
    "certificate": {
        "cipher": "",
        "issuer": "C = US, O = Google Trust Services, CN = WE1",
        "protocol": "",
        "san_count": 0,
        "state": "observed",
        "valid_from": "2026-07-31T18:48:13+00:00",
        "valid_to": "2026-10-29T19:38:43+00:00"
    },
    "http2": {
        "negotiated": "3",
        "state": "untested"
    },
    "http3_advertised": {
        "alt_svc": "h3=\":443\"; ma=86400",
        "state": "observed"
    },
    "ipv4": {
        "addresses": [
            "104.21.33.196",
            "172.67.149.25"
        ],
        "state": "observed"
    },
    "ipv6": {
        "addresses": [
            "2606:4700:3032::6815:21c4",
            "2606:4700:3032::ac43:9519"
        ],
        "state": "observed"
    }
}
http_header headers 1fc34e09ef80942753fcaca5fd2870b4c11b51f901705a9f50324043484fb981 
[
    "strict-origin-when-cross-origin"
]

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain divinexa.com

DNS

2
DNS server Observed

david.ns.cloudflare.com

DNS server Observed

thea.ns.cloudflare.com

mail

3
Mail server Observed

route2.mx.cloudflare.net

Mail server Observed

route3.mx.cloudflare.net

Mail server Observed

route1.mx.cloudflare.net

technology

1
Observed technology Observed

cloudflare

external resources

2
External provider or resource Corroborated

Cloudflare

External provider or resource Observed

roastmyurl.com

Open questions

2 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

60 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

60evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "roastmyurl.com" ], "id": "host-1b4f6aaadb14", "known": false, "name": "roastmyurl.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "roastmyurl.com"
    ],
    "id": "host-1b4f6aaadb14",
    "known": false,
    "name": "roastmyurl.com",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#02 post_quantum_tls

Evidence: post_quantum_tls

This check only looks for a public TLS termination negotiating a hybrid key exchange supported by Scanapse.

Passive Medium
Why it matters

It documents cryptographic readiness without confusing it with overall system security.

What to check next

Record the actually negotiated group, tested endpoint, and measurement-client version. Compare results over time and across other public frontends.

Possible action

Do not enable or disable a mechanism merely to obtain a badge. Assess compatibility, TLS termination, clients and cryptographic strategy before changing it.

Observation
{ "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }
Understand
Public observation
Source
post_quantum_tls
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A positive result does not make a site “post-quantum”, and a negative result does not prove no other client could negotiate it.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "capability": {
        "capable": false,
        "groups": [],
        "reason": "proc_open_unavailable"
    },
    "group": null,
    "reason": "client_capability_unavailable",
    "state": "untested"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#03 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
thea.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS divinexa.com
View raw data 
thea.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#04 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#05 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "sectigo.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "sectigo.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#06 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "85.7%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "85.7%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#07 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "comodoca.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "comodoca.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#08 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
104.21.33.196
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A divinexa.com && dig AAAA divinexa.com
View raw data 
104.21.33.196

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#09 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#10 mail_transport_evidence

Evidence: mail_transport_evidence

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": { "max_age": "86400", "mode": "testing", "mx": [ "*.mx.cloudflare.net" ], "version": "STSv1" }, "policy_state": "observed", "records": [ "v=STSv1; id=20230615T153000;" ], "state": "observed" }, "tls_rpt": { "records": [ "v=TLSRPTv1; rua=mailto:tlsrpt@divinexa.com" ], "state": "observed" } }
Understand
Public observation
Source
mail_transport_evidence
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "bimi": {
        "records": [],
        "state": "not_observed"
    },
    "dane_tlsa": {
        "query_supported": false,
        "reason": "tlsa_query_not_available",
        "records": [],
        "state": "untested"
    },
    "dkim": {
        "reason": "no_selector_bruteforce",
        "state": "untested"
    },
    "mta_sts": {
        "policy": {
            "max_age": "86400",
            "mode": "testing",
            "mx": [
                "*.mx.cloudflare.net"
            ],
            "version": "STSv1"
        },
        "policy_state": "observed",
        "records": [
            "v=STSv1; id=20230615T153000;"
        ],
        "state": "observed"
    },
    "tls_rpt": {
        "records": [
            "v=TLSRPTv1; rua=mailto:tlsrpt@divinexa.com"
        ],
        "state": "observed"
    }
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#11 dnssec_evidence

Evidence: dnssec_evidence

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }
Understand
Public observation
Source
dnssec_evidence
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "chain_consistency": {
        "reason": "insufficient_record_evidence",
        "state": "untested"
    },
    "dnskey": {
        "query_supported": false,
        "records": [],
        "state": "untested"
    },
    "ds": {
        "query_supported": false,
        "records": [],
        "state": "untested"
    },
    "validation": {
        "reason": "no_validating_resolver",
        "state": "untested"
    }
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#12 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=63072000; includeSubDomains; preload" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=63072000; includeSubDomains; preload"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#13 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3032::6815:21c4
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A divinexa.com && dig AAAA divinexa.com
View raw data 
2606:4700:3032::6815:21c4

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#14 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "roastmyurl.com" ], "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#15 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "nosniff" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "nosniff"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#16 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
1
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
1

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#17 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "roastmyurl.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#18 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
172.67.149.25
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A divinexa.com && dig AAAA divinexa.com
View raw data 
172.67.149.25

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#19 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
route1.mx.cloudflare.net
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX divinexa.com
View raw data 
route1.mx.cloudflare.net

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#20 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#21 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "digicert.com; cansignhttpexchanges=yes" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "digicert.com; cansignhttpexchanges=yes"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#22 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "require-corp" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "require-corp"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#23 modern_transport_evidence

Evidence: modern_transport_evidence

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = US, O = Google Trust Services, CN = WE1", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-07-31T18:48:13+00:00", "valid_to": "2026-10-29T19:38:43+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "h3=\":443\"; ma=86400", "state": "observed" }, "ipv4": { "addresses": [ "104.21.33.196", "172.67.149.25" ], "state": "observed" }, "ipv6": { "addresses": [ "2606:4700:3032::6815:21c4", "2606:4700:3032::ac43:9519" ], "state": "observed" } }
Understand
Public observation
Source
modern_transport_evidence
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "alpn": {
        "state": "untested",
        "value": ""
    },
    "certificate": {
        "cipher": "",
        "issuer": "C = US, O = Google Trust Services, CN = WE1",
        "protocol": "",
        "san_count": 0,
        "state": "observed",
        "valid_from": "2026-07-31T18:48:13+00:00",
        "valid_to": "2026-10-29T19:38:43+00:00"
    },
    "http2": {
        "negotiated": "3",
        "state": "untested"
    },
    "http3_advertised": {
        "alt_svc": "h3=\":443\"; ma=86400",
        "state": "observed"
    },
    "ipv4": {
        "addresses": [
            "104.21.33.196",
            "172.67.149.25"
        ],
        "state": "observed"
    },
    "ipv6": {
        "addresses": [
            "2606:4700:3032::6815:21c4",
            "2606:4700:3032::ac43:9519"
        ],
        "state": "observed"
    }
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#24 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "strict-origin-when-cross-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "strict-origin-when-cross-origin"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#25 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-10-29T19:38:43+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-10-29T19:38:43+00:00

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#26 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "pki.goog; cansignhttpexchanges=yes" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "pki.goog; cansignhttpexchanges=yes"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#27 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "david.ns.cloudflare.com", "thea.ns.cloudflare.com" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "david.ns.cloudflare.com",
        "thea.ns.cloudflare.com"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#28 openpgp_discovery

Evidence: openpgp_discovery

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [ "https://divinexa.com/assets/koperateur-pubkey.asc" ], "reason": "security_txt_encryption_observed", "state": "observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }
Understand
Public observation
Source
openpgp_discovery
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "dns_openpgpkey": {
        "reason": "recipient_identity_required",
        "state": "untested"
    },
    "fingerprint": null,
    "mechanisms": [
        "https://divinexa.com/assets/koperateur-pubkey.asc"
    ],
    "reason": "security_txt_encryption_observed",
    "state": "observed",
    "wkd": {
        "reason": "wkd_not_fetched_without_identity",
        "state": "untested"
    }
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#29 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": [ "roastmyurl.com" ], "severity": "medium" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "roastmyurl.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#30 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Google Trust Services, CN = WE1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect divinexa.com:443 -servername divinexa.com </dev/null
View raw data 
C = US, O = Google Trust Services, CN = WE1

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#31 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3032::ac43:9519
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A divinexa.com && dig AAAA divinexa.com
View raw data 
2606:4700:3032::ac43:9519

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#32 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:_spf.mx.cloudflare.net -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:_spf.mx.cloudflare.net -all

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#33 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "digicert.com; cansignhttpexchanges=yes" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "digicert.com; cansignhttpexchanges=yes"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#34 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "sectigo.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "sectigo.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#35 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "cloudflare", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#36 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT divinexa.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#37 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "letsencrypt.org" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "letsencrypt.org"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#38 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), bluetooth=(), browsing-topics=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), speaker-selection=(), storage-access=(), usb=(), web-share=(self), window-management=(), xr-spatial-tracking=()"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#39 csp_evidence

Evidence: csp_evidence

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "enforced": true, "frame_ancestors": true, "hash_present": true, "nonce_present": false, "object_src": true, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }
Understand
Public observation
Source
csp_evidence
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "enforced": true,
    "frame_ancestors": true,
    "hash_present": true,
    "nonce_present": false,
    "object_src": true,
    "report_only": false,
    "reporting_endpoint": false,
    "state": "observed",
    "strict_dynamic": false,
    "trusted_types": false
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#40 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "cloudflare.com", "david.ns.cloudflare.com", "route1.mx.cloudflare.net", "route2.mx.cloudflare.net", "route3.mx.cloudflare.net", "thea.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 6, "services": [ "cdn", "security" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "david.ns.cloudflare.com",
        "route1.mx.cloudflare.net",
        "route2.mx.cloudflare.net",
        "route3.mx.cloudflare.net",
        "thea.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 6,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#41 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "cloudflare" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "cloudflare"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#42 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Cloudflare" ], "severity": "high" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#43 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
1
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
1

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#44 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
route2.mx.cloudflare.net
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX divinexa.com
View raw data 
route2.mx.cloudflare.net

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#45 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "DENY" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "DENY"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#46 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#47 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "ssl.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "ssl.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#48 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#49 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
david.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS divinexa.com
View raw data 
david.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#50 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "ssl.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "ssl.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#51 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject; rua=mailto:c334184411c644678364b92d367f0708@dmarc-reports.cloudflare.net;

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#52 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "letsencrypt.org" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "letsencrypt.org"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#53 canary_signal

Evidence: canary_signal

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "matches": [ { "name": "canary_field", "source": "security_txt" } ], "reason": "known_passive_signature_observed", "signature_version": "2026.09.1", "state": "observed" }
Understand
Public observation
Source
canary_signal
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "matches": [
        {
            "name": "canary_field",
            "source": "security_txt"
        }
    ],
    "reason": "known_passive_signature_observed",
    "signature_version": "2026.09.1",
    "state": "observed"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#54 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "default-src 'none'; script-src 'self' https://roastmyurl.com/roastmy-audience.js 'sha256-2Ks/p/J9mlJ3Y0eA9uW8fKEBKr9ivfadoB5d3A7ESJM='; style-src 'self'; img-src 'self' data: https://roastmyurl.com/api/analytics-hit.php; font-src 'self'; connect-src 'self'; worker-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self' https://check.koperateur.com https://checkout.stripe.com https://billing.stripe.com; base-uri 'self'; frame-ancestors 'none'; manifest-src 'self'; object-src 'none'; upgrade-insecure-requests"
]

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#55 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
route3.mx.cloudflare.net
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX divinexa.com
View raw data 
route3.mx.cloudflare.net

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#56 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issue", "value": "pki.goog; cansignhttpexchanges=yes" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issue",
    "value": "pki.goog; cansignhttpexchanges=yes"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#57 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.divinexa.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#58 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Cloudflare", "share": 85.7 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 85.7
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#59 DNS public records

Evidence: caa_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "flags": 0, "tag": "issuewild", "value": "comodoca.com" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "flags": 0,
    "tag": "issuewild",
    "value": "comodoca.com"
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

#60 Observed public page

Evidence: cookie

Scanapse describes only privacy signals visible on the observed public journey.

Passive Medium
Why it matters

This separates what the browser actually encounters from what cannot be measured externally.

What to check next

Relate visible cookies and third parties to actual features, then compare those observations with internal documentation when the organisation has it.

Possible action

Remove unnecessary trackers or cookies and document the purposes of required elements. Any legal assessment must remain separate from the external scan.

Observation
{ "http_only": true, "name": "dx_session", "same_site": "lax", "secure": true }
Understand
Visible cookies and tracker signatures on the public response
Source
Observed public page
Reliability
Medium
What this supports
Describe visible privacy-related signals
What this does not prove
This observation is never a GDPR audit and does not reveal every purpose or internal processing activity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "http_only": true,
    "name": "dx_session",
    "same_site": "lax",
    "secure": true
}

Rule 2026.09.4 · 2026-09-06T01:56:47+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.9.2.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 3,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "8fa1f3b9422b54fc894258544f636dd21dea7ef3a50a1b5f399f154c82a26ae6",
        "display_name": "divinexa.com",
        "slug": "divinexa-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "divinexa.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": true,
        "change_counts": {
            "appeared": 7,
            "modified": 2,
            "stable": 41
        },
        "observation_count": 60,
        "evidence_count": 60,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}