OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

eclatdemots.com

What is observed, how to verify it and what changed

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 20:06 UTC First observation 2026-09-04 20:06 UTC Latest observation 2026-09-04 20:06 UTC
History JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not testedCanary detection
  • ObservedDepends on providerInfomaniak
  • Not observable from outsideOrigin host

Infrastructure & transport

  • Not testedPost quantum tls
  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YR1

Mail & trust

  • ObservedDmarc policyreject
  • ObservedSpf policyhardfail

Dependencies & exposure

  • Not observable from outsideData location
  • ObservedDepends on providerGoogle

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for eclatdemots.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 20:06 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

10evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
10
Signals
1
Changes
0
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 35fe35acd2e9296fa364034a610415d9182161e7872b553ef049b74aea014f37 
"v=DMARC1; p=reject;"
dns_nameserver dns d8d4025b87e276d1cba34b97b8b687364a089c21e5e5cda2fb8139c0719019d9 
"ns11.infomaniak.ch"
dns_address dns 68a466f5ec9ab652edba8610f7035e271987d56e400f327efcb8557490fb841b 
"2001:1600::aaaa:0:0:80:5b"
mail_exchanger dns a330116c7362cba6ab6f94ba6865a1053a715ecc6a5fe42ba60816514c39508f 
"mta-gw.infomaniak.ch"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

16evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
16
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience 205093c2b445f48011a298d36ed16d949d3692248feeb13d4cb41b196d161ee7 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
dependency_provider dependencies e26aebe0bed003175dbed13d1590967c8161a0687b28ee277ab36022d6c57ad8 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 35fe35acd2e9296fa364034a610415d9182161e7872b553ef049b74aea014f37 
"v=DMARC1; p=reject;"
dns_nameserver dns d8d4025b87e276d1cba34b97b8b687364a089c21e5e5cda2fb8139c0719019d9 
"ns11.infomaniak.ch"
module_finding sovereignty 1624ef7b9b6c6f52e68f6c9bb9465a553f15791f7496984d582c352a12903952 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding resilience fbc10e74fa3d2780724473b79d143a6b74654bf0921312cd18103edb6c2a1fb8 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
dns_address dns 68a466f5ec9ab652edba8610f7035e271987d56e400f327efcb8557490fb841b 
"2001:1600::aaaa:0:0:80:5b"
dependency_provider dependencies a145749a9b8091a54dd1df46229090f3ce12da9f74a24e23678f3beba319395a 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
mail_exchanger dns a330116c7362cba6ab6f94ba6865a1053a715ecc6a5fe42ba60816514c39508f 
"mta-gw.infomaniak.ch"
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
tls_issuer tls 0e1fea1a089248ce573a836984367c50d4de6e56ac72a59c0cfd91c983f77615 
"C = US, O = Let's Encrypt, CN = YR1"
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 7db7c92c399590b3ff844b523d0f2a8ab5b6a93ace079525269edecde6c5d6f7 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding headers 278f81a957ce55a3aa2d92ac5f0a3585278582b9044e35a1b853512c866e9068 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls ef080877725c5d5a943c3d1c4637f55ce98884cfebb30a6f8abc958bcfba7d77 
"2026-10-10T18:06:05+00:00"
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
spf_policy mail_trust 828318a12a46184e1516b35d1523b4b2902624026704fc05f15a5e85d2d8c3b1 
"hardfail"
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust ea38127909ec65c9f3dd7febddcc94778e9c06b95017fa9d61051c2c9aa2c3c6 
false
mail_policy_flag mail_trust 0c0dc1627d531ad02e9daf50171725d3348cb89bd7763364f34f6032489ce5ff 
false
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 35fe35acd2e9296fa364034a610415d9182161e7872b553ef049b74aea014f37 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust da14f22211faf2eefdc5f6c9d1f62f30f475abada93c31583fcac29303ee19a3 
"reject"
dns_nameserver dns d8d4025b87e276d1cba34b97b8b687364a089c21e5e5cda2fb8139c0719019d9 
"ns11.infomaniak.ch"
dns_address dns 68a466f5ec9ab652edba8610f7035e271987d56e400f327efcb8557490fb841b 
"2001:1600::aaaa:0:0:80:5b"
mail_policy_flag mail_trust 84c42655847fa4d978d08e715b47dc27a9a27e23fe31788277eb93908e26924b 
false
module_finding mail_trust af44a55fe19be48c56edf15083eff242de4c2cac475397c619b6034bc9cfaf0d 
{
    "evidence": null,
    "severity": "low"
}
mail_exchanger dns a330116c7362cba6ab6f94ba6865a1053a715ecc6a5fe42ba60816514c39508f 
"mta-gw.infomaniak.ch"
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
spf_policy mail_trust 828318a12a46184e1516b35d1523b4b2902624026704fc05f15a5e85d2d8c3b1 
"hardfail"
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust ea38127909ec65c9f3dd7febddcc94778e9c06b95017fa9d61051c2c9aa2c3c6 
false
mail_policy_flag mail_trust 0c0dc1627d531ad02e9daf50171725d3348cb89bd7763364f34f6032489ce5ff 
false
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 35fe35acd2e9296fa364034a610415d9182161e7872b553ef049b74aea014f37 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust da14f22211faf2eefdc5f6c9d1f62f30f475abada93c31583fcac29303ee19a3 
"reject"
dns_nameserver dns d8d4025b87e276d1cba34b97b8b687364a089c21e5e5cda2fb8139c0719019d9 
"ns11.infomaniak.ch"
dns_address dns 68a466f5ec9ab652edba8610f7035e271987d56e400f327efcb8557490fb841b 
"2001:1600::aaaa:0:0:80:5b"
mail_policy_flag mail_trust 84c42655847fa4d978d08e715b47dc27a9a27e23fe31788277eb93908e26924b 
false
module_finding mail_trust af44a55fe19be48c56edf15083eff242de4c2cac475397c619b6034bc9cfaf0d 
{
    "evidence": null,
    "severity": "low"
}
mail_exchanger dns a330116c7362cba6ab6f94ba6865a1053a715ecc6a5fe42ba60816514c39508f 
"mta-gw.infomaniak.ch"
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

14evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
14
Signals
2
Changes
0
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
dependency_provider dependencies e26aebe0bed003175dbed13d1590967c8161a0687b28ee277ab36022d6c57ad8 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 35fe35acd2e9296fa364034a610415d9182161e7872b553ef049b74aea014f37 
"v=DMARC1; p=reject;"
dns_nameserver dns d8d4025b87e276d1cba34b97b8b687364a089c21e5e5cda2fb8139c0719019d9 
"ns11.infomaniak.ch"
module_finding sovereignty 1624ef7b9b6c6f52e68f6c9bb9465a553f15791f7496984d582c352a12903952 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
dns_address dns 68a466f5ec9ab652edba8610f7035e271987d56e400f327efcb8557490fb841b 
"2001:1600::aaaa:0:0:80:5b"
dependency_provider dependencies a145749a9b8091a54dd1df46229090f3ce12da9f74a24e23678f3beba319395a 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
mail_exchanger dns a330116c7362cba6ab6f94ba6865a1053a715ecc6a5fe42ba60816514c39508f 
"mta-gw.infomaniak.ch"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
0
module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 7db7c92c399590b3ff844b523d0f2a8ab5b6a93ace079525269edecde6c5d6f7 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
technology technology 7aeabae556c300cbcdfb681501ad98d3e99db0cd6ea543acc3b0a3790db818e0 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
module_finding headers 278f81a957ce55a3aa2d92ac5f0a3585278582b9044e35a1b853512c866e9068 
{
    "evidence": null,
    "severity": "low"
}
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

24evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
24
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience 205093c2b445f48011a298d36ed16d949d3692248feeb13d4cb41b196d161ee7 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency cb973193174ab226fdfb3316608ee7a68c9c9862865fa3d97e5d9193c228604d 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding transparency 9a2e81570c0ede0a8efe19c254ffb88e242fb8c8da3916bf04de980b5a419539 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers 7db7c92c399590b3ff844b523d0f2a8ab5b6a93ace079525269edecde6c5d6f7 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding headers 278f81a957ce55a3aa2d92ac5f0a3585278582b9044e35a1b853512c866e9068 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 1624ef7b9b6c6f52e68f6c9bb9465a553f15791f7496984d582c352a12903952 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding resilience fbc10e74fa3d2780724473b79d143a6b74654bf0921312cd18103edb6c2a1fb8 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding transparency 1a95794188b3bbe62e0b71eb535c95bdecb1f1d4124afee93bbf3bd95ed84752 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust af44a55fe19be48c56edf15083eff242de4c2cac475397c619b6034bc9cfaf0d 
{
    "evidence": null,
    "severity": "low"
}
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

24evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
24
Signals
0
Changes
0
module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience 205093c2b445f48011a298d36ed16d949d3692248feeb13d4cb41b196d161ee7 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency cb973193174ab226fdfb3316608ee7a68c9c9862865fa3d97e5d9193c228604d 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding transparency 9a2e81570c0ede0a8efe19c254ffb88e242fb8c8da3916bf04de980b5a419539 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
module_finding dns 519f731fd51def9b45de5b5eccfae6e7e040146e6d51c7108990ea57d46a768d 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers 7db7c92c399590b3ff844b523d0f2a8ab5b6a93ace079525269edecde6c5d6f7 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding headers 278f81a957ce55a3aa2d92ac5f0a3585278582b9044e35a1b853512c866e9068 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 1624ef7b9b6c6f52e68f6c9bb9465a553f15791f7496984d582c352a12903952 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding resilience fbc10e74fa3d2780724473b79d143a6b74654bf0921312cd18103edb6c2a1fb8 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding transparency 1a95794188b3bbe62e0b71eb535c95bdecb1f1d4124afee93bbf3bd95ed84752 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding mail_trust af44a55fe19be48c56edf15083eff242de4c2cac475397c619b6034bc9cfaf0d 
{
    "evidence": null,
    "severity": "low"
}
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

38evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
38
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
spf_policy mail_trust 828318a12a46184e1516b35d1523b4b2902624026704fc05f15a5e85d2d8c3b1 
"hardfail"
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience 205093c2b445f48011a298d36ed16d949d3692248feeb13d4cb41b196d161ee7 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
tls_issuer tls 0e1fea1a089248ce573a836984367c50d4de6e56ac72a59c0cfd91c983f77615 
"C = US, O = Let's Encrypt, CN = YR1"
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency cb973193174ab226fdfb3316608ee7a68c9c9862865fa3d97e5d9193c228604d 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding transparency 9a2e81570c0ede0a8efe19c254ffb88e242fb8c8da3916bf04de980b5a419539 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust ea38127909ec65c9f3dd7febddcc94778e9c06b95017fa9d61051c2c9aa2c3c6 
false
mail_policy_flag mail_trust 0c0dc1627d531ad02e9daf50171725d3348cb89bd7763364f34f6032489ce5ff 
false
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

41evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
41
Signals
3
Changes
0
module_finding headers d9f879a95bd9ec5b3eb0efaa91de99630ca1113f5a12765c692a486831b9a49d 
{
    "evidence": null,
    "severity": "low"
}
spf_policy mail_trust 828318a12a46184e1516b35d1523b4b2902624026704fc05f15a5e85d2d8c3b1 
"hardfail"
http_header headers ad58e1dad83b18bda44fd9a8f62f9b462e6f039e6a89d669cdbbc1e5e4dc6630 
[
    "max-age=16000000"
]
module_finding dns 67f626e1a61cd02561c41f02128739022e4f8c81a4d71d2ba089cca553d72424 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 14c3565819cca608b0037fccf941e05597b552a7506fd0ee2d703b2f63c59dde 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bb704d7393f0eb6de507d437d98ee277fc34917060782d93d6faf67d112d2216 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience 205093c2b445f48011a298d36ed16d949d3692248feeb13d4cb41b196d161ee7 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
tls_issuer tls 0e1fea1a089248ce573a836984367c50d4de6e56ac72a59c0cfd91c983f77615 
"C = US, O = Let's Encrypt, CN = YR1"
module_finding headers e8147c56916c8337bed2d9691d744e7a07a0acb69b0deacedee7730e5146749a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency cb973193174ab226fdfb3316608ee7a68c9c9862865fa3d97e5d9193c228604d 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7c1724a0a6c3063eb87908ea06f9ef85a141bdedea8d44ef0ca4d35087eb55f9 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 6e8f221d0572223c12610685862c2d02754a866ad7558dacc5558b4e9ff394fc 
"ns12.infomaniak.ch"
http_header headers 76c4744a9cd12feef23b6b689f53c2883ff7fe9cbe8f4021520be43e15d14a13 
[
    "Apache"
]
module_finding transparency 9a2e81570c0ede0a8efe19c254ffb88e242fb8c8da3916bf04de980b5a419539 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers a8a7e79026bdb2c9113847d600bfc6b488bc9a3d315d5e48ebea6552186bba4a 
{
    "evidence": null,
    "severity": "high"
}
module_finding dependencies 8ab2f24515c585fc05cf10de4a532da7cb79acbebc63a53658725b1f4e4bd780 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns 0875127b4d7f68883561c6fa775a3404b1829e989ef88964123853a31345141e 
"185.125.27.197"
module_finding mail_trust dfba2c022828030b23f41107c60b7d2df769df8e0f997026844022dbeadd32f8 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dependency_provider dependencies e26aebe0bed003175dbed13d1590967c8161a0687b28ee277ab36022d6c57ad8 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding headers 217f9dbd2058e9808ee8c011dc523305f37b639d77e2503b4ac5f70432a89fcd 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers de91b3557f648af58d9b87138901a8a4dac90402f3ae6155f5efcd7b3fabd0cc 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 7ea7ac91534aa8f31d6b62cfa354b1bb75c3a59dd977f80a6b6ebd4b42977377 
{
    "evidence": null,
    "severity": "info"
}
spf_record dns 531ecbcee81d7cbf053b5e70c66803a132b65847be7455dbb64edd48b4045bb3 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust ea38127909ec65c9f3dd7febddcc94778e9c06b95017fa9d61051c2c9aa2c3c6 
false

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain eclatdemots.com

DNS

2
DNS server Observed

ns11.infomaniak.ch

DNS server Observed

ns12.infomaniak.ch

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

Apache

external resources

2
External provider or resource Observed

Google

External provider or resource Corroborated

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

41 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

41evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#02 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT eclatdemots.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#03 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=16000000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=16000000"
]

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#04 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#05 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#06 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#07 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Infomaniak", "share": 75 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#08 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YR1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect eclatdemots.com:443 -servername eclatdemots.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YR1

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#09 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "critical" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "critical"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#10 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#11 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#12 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns12.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS eclatdemots.com
View raw data 
ns12.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#13 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "Apache" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "Apache"
]

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#14 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#15 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#16 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "75%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "75%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#17 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
185.125.27.197
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A eclatdemots.com && dig AAAA eclatdemots.com
View raw data 
185.125.27.197

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#18 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#19 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#20 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#21 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#22 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "info" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#23 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#24 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#25 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#26 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#27 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=16000000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#28 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Apache", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#29 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#30 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#31 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.eclatdemots.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#32 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns11.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS eclatdemots.com
View raw data 
ns11.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#33 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Google" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#34 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#35 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2001:1600::aaaa:0:0:80:5b
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A eclatdemots.com && dig AAAA eclatdemots.com
View raw data 
2001:1600::aaaa:0:0:80:5b

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#36 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#37 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "fonts.googleapis.com" ], "id": "google", "known": true, "name": "Google", "observation_count": 1, "services": [ "analytics", "captcha", "fonts", "maps", "video" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#38 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": 404, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 404,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#39 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-10-10T18:06:05+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-10-10T18:06:05+00:00

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#40 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

#41 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX eclatdemots.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:14+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "587dbfcaa1fbb184b0191e65e6148321792638b7ddb22136de0dfb02e3c9284a",
        "display_name": "eclatdemots.com",
        "slug": "eclatdemots-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "eclatdemots.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 41,
        "evidence_count": 41,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}