OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

ekb-conseils.com

What is observed, how to verify it and what changed

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 19:34 UTC First observation 2026-09-04 19:34 UTC Latest observation 2026-09-04 19:34 UTC
History JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • ObservedDepends on providerCloudflare
  • Not observable from outsideOrigin host
  • Not testedCanary detection

Infrastructure & transport

  • ObservedTls issuerC = US, O = Google Trust Services, CN = WE1
  • Not testedPost quantum tls

Mail & trust

  • ObservedDmarc policyreject
  • ObservedSpf policyhardfail

Dependencies & exposure

  • ObservedDepends on providerInfomaniak
  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for ekb-conseils.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 19:34 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
1
Changes
0
dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf 
"v=spf1 include:spf.infomaniak.ch -all"
dns_nameserver dns 31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d 
"quentin.ns.cloudflare.com"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding resilience 458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
dependency_provider dependencies 87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
dependency_provider dependencies fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
module_finding resilience a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding sovereignty 4103bf65c105b1e13eddaa77a7199845f53607d3b9f2816e795ecc98fcdf389b 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
dns_nameserver dns 31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d 
"quentin.ns.cloudflare.com"
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

tls_valid_to tls 4e8be8858e40e769d08e23bf3d195377ff32bfc1f3bb4c1133590058f1007f1e 
"2026-11-02T17:28:06+00:00"
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
tls_issuer tls e811053c309bfafdbca2fbaae2903d65d56bfdb9e5a8d46c6661b81bff52f4e8 
"C = US, O = Google Trust Services, CN = WE1"
http_header headers 9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1 
[
    "same-origin"
]
http_header headers 877a565f035acaa79ea75f1e911d6c0de168b5ad17a89ff99b37c0381c347c00 
[
    "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
]
http_header headers b21bf44c9534b78c80785a8edaddfcc63dfb2edbbf6e518e9db550609b616c2c 
[
    "strict-origin-when-cross-origin"
]
http_header headers 8f474635e4dd2bdddb280f19eac6255abfcdf2b92b718d9cba032fe648d41b62 
[
    "require-corp"
]
http_header headers 63808e44be78feb45cfdf5013aa7ffaa1bbd7ace4ab866af1052640f14bfc7f1 
[
    "same-origin"
]
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
spf_policy mail_trust 378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7 
"hardfail"
mail_policy_flag mail_trust 3ecf12f7e9d6b45194d5a570806c318fcb95533029130654692b390d84045773 
false
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding mail_trust 9b5b00339fc67306a6bccb5ba767b7312856edb64ffc9ea1ad1842c61a1dbee1 
{
    "evidence": null,
    "severity": "low"
}
spf_record dns 8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust b2e1394540d958ad006f4d73291d3f5ebc39a8368971aeb7cd00cd4da1eff125 
false
mail_policy_flag mail_trust 84c08f2dbca4f924232628496e2de3060ffbb0784d13949349e87b69d9eef14c 
false
module_finding mail_trust 244c6329a716b921a7c44705c97edd5708076af46a2f30a01861b45a6e55483c 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d 
"quentin.ns.cloudflare.com"
dmarc_policy mail_trust 5b8dbb98132fc9ba1923359f7c7937d21d70e6b244c74cf07d33f6611423d593 
"reject"
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
spf_policy mail_trust 378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7 
"hardfail"
mail_policy_flag mail_trust 3ecf12f7e9d6b45194d5a570806c318fcb95533029130654692b390d84045773 
false
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding mail_trust 9b5b00339fc67306a6bccb5ba767b7312856edb64ffc9ea1ad1842c61a1dbee1 
{
    "evidence": null,
    "severity": "low"
}
spf_record dns 8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust b2e1394540d958ad006f4d73291d3f5ebc39a8368971aeb7cd00cd4da1eff125 
false
mail_policy_flag mail_trust 84c08f2dbca4f924232628496e2de3060ffbb0784d13949349e87b69d9eef14c 
false
module_finding mail_trust 244c6329a716b921a7c44705c97edd5708076af46a2f30a01861b45a6e55483c 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d 
"quentin.ns.cloudflare.com"
dmarc_policy mail_trust 5b8dbb98132fc9ba1923359f7c7937d21d70e6b244c74cf07d33f6611423d593 
"reject"
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

16evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
16
Signals
2
Changes
0
dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
dependency_provider dependencies 87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
dependency_provider dependencies fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding sovereignty 4103bf65c105b1e13eddaa77a7199845f53607d3b9f2816e795ecc98fcdf389b 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
dns_nameserver dns 31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d 
"quentin.ns.cloudflare.com"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
0
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
technology technology 2cf5ca578b2576b3fda01a727e8df8076bb324d7d5cd10e65d0d59aab049bbf9 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
http_header headers 9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1 
[
    "same-origin"
]
http_header headers 877a565f035acaa79ea75f1e911d6c0de168b5ad17a89ff99b37c0381c347c00 
[
    "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
]
http_header headers b21bf44c9534b78c80785a8edaddfcc63dfb2edbbf6e518e9db550609b616c2c 
[
    "strict-origin-when-cross-origin"
]
http_header headers 8f474635e4dd2bdddb280f19eac6255abfcdf2b92b718d9cba032fe648d41b62 
[
    "require-corp"
]
http_header headers 63808e44be78feb45cfdf5013aa7ffaa1bbd7ace4ab866af1052640f14bfc7f1 
[
    "same-origin"
]
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

22evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
22
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding resilience 458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
module_finding resilience a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
http_header headers 9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1 
[
    "same-origin"
]
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding mail_trust 9b5b00339fc67306a6bccb5ba767b7312856edb64ffc9ea1ad1842c61a1dbee1 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 877a565f035acaa79ea75f1e911d6c0de168b5ad17a89ff99b37c0381c347c00 
[
    "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
]
http_header headers b21bf44c9534b78c80785a8edaddfcc63dfb2edbbf6e518e9db550609b616c2c 
[
    "strict-origin-when-cross-origin"
]
http_header headers 8f474635e4dd2bdddb280f19eac6255abfcdf2b92b718d9cba032fe648d41b62 
[
    "require-corp"
]
module_finding sovereignty 4103bf65c105b1e13eddaa77a7199845f53607d3b9f2816e795ecc98fcdf389b 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding mail_trust 244c6329a716b921a7c44705c97edd5708076af46a2f30a01861b45a6e55483c 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 63808e44be78feb45cfdf5013aa7ffaa1bbd7ace4ab866af1052640f14bfc7f1 
[
    "same-origin"
]
module_finding transparency 24642d064acf1512a2ffd90aaefc2d5d024e472b1ad4b1b2dc8aa9e243e7d736 
{
    "evidence": 403,
    "severity": "medium"
}
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

22evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
22
Signals
0
Changes
0
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding resilience 458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
module_finding resilience a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
http_header headers 9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1 
[
    "same-origin"
]
module_finding dns 91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding mail_trust 9b5b00339fc67306a6bccb5ba767b7312856edb64ffc9ea1ad1842c61a1dbee1 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 877a565f035acaa79ea75f1e911d6c0de168b5ad17a89ff99b37c0381c347c00 
[
    "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
]
http_header headers b21bf44c9534b78c80785a8edaddfcc63dfb2edbbf6e518e9db550609b616c2c 
[
    "strict-origin-when-cross-origin"
]
http_header headers 8f474635e4dd2bdddb280f19eac6255abfcdf2b92b718d9cba032fe648d41b62 
[
    "require-corp"
]
module_finding sovereignty 4103bf65c105b1e13eddaa77a7199845f53607d3b9f2816e795ecc98fcdf389b 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding mail_trust 244c6329a716b921a7c44705c97edd5708076af46a2f30a01861b45a6e55483c 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 63808e44be78feb45cfdf5013aa7ffaa1bbd7ace4ab866af1052640f14bfc7f1 
[
    "same-origin"
]
module_finding transparency 24642d064acf1512a2ffd90aaefc2d5d024e472b1ad4b1b2dc8aa9e243e7d736 
{
    "evidence": 403,
    "severity": "medium"
}
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

38evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
38
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
tls_valid_to tls 4e8be8858e40e769d08e23bf3d195377ff32bfc1f3bb4c1133590058f1007f1e 
"2026-11-02T17:28:06+00:00"
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding resilience 458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
module_finding resilience a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
spf_policy mail_trust 378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7 
"hardfail"
mail_policy_flag mail_trust 3ecf12f7e9d6b45194d5a570806c318fcb95533029130654692b390d84045773 
false
tls_issuer tls e811053c309bfafdbca2fbaae2903d65d56bfdb9e5a8d46c6661b81bff52f4e8 
"C = US, O = Google Trust Services, CN = WE1"
http_header headers 9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1 
[
    "same-origin"
]
dns_address dns 86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d 
"2606:4700:3033::ac43:ac23"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

41evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
41
Signals
3
Changes
0
dns_address dns 7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82 
"172.67.172.35"
module_finding dns 957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies 54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5 
{
    "evidence": "75%",
    "severity": "medium"
}
tls_valid_to tls 4e8be8858e40e769d08e23bf3d195377ff32bfc1f3bb4c1133590058f1007f1e 
"2026-11-02T17:28:06+00:00"
http_header headers 1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]
module_finding resilience 458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
dns_address dns 27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677 
"2606:4700:3031::6815:2fc0"
module_finding headers 9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
dependency_provider dependencies 87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
technology technology 2cf5ca578b2576b3fda01a727e8df8076bb324d7d5cd10e65d0d59aab049bbf9 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers 578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26 
[
    "DENY"
]
dns_address dns 99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded 
"104.21.47.192"
dependency_provider dependencies fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
http_header headers f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5 
[
    "nosniff"
]
http_header headers fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f 
[
    "cloudflare"
]
mail_exchanger dns 25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54 
"mta-gw.infomaniak.ch"
http_header headers 5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c 
[
    "max-age=63072000"
]
dmarc_record dns 8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693 
"v=DMARC1; p=reject;"
module_finding resilience a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
spf_policy mail_trust 378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7 
"hardfail"
mail_policy_flag mail_trust 3ecf12f7e9d6b45194d5a570806c318fcb95533029130654692b390d84045773 
false

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain ekb-conseils.com

DNS

2
DNS server Observed

quentin.ns.cloudflare.com

DNS server Observed

grannbo.ns.cloudflare.com

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

cloudflare

external resources

2
External provider or resource Corroborated

Cloudflare

External provider or resource Observed

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

41 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

41evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
172.67.172.35
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A ekb-conseils.com && dig AAAA ekb-conseils.com
View raw data 
172.67.172.35

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#02 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#03 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
grannbo.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS ekb-conseils.com
View raw data 
grannbo.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#04 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#05 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#06 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "75%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "75%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#07 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-11-02T17:28:06+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-11-02T17:28:06+00:00

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#08 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#09 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#10 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3031::6815:2fc0
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A ekb-conseils.com && dig AAAA ekb-conseils.com
View raw data 
2606:4700:3031::6815:2fc0

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#11 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=63072000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#12 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "cloudflare.com", "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#13 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "cloudflare", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#14 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "DENY" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "DENY"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#15 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
104.21.47.192
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A ekb-conseils.com && dig AAAA ekb-conseils.com
View raw data 
104.21.47.192

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#16 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "mta-gw.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 1, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#17 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "nosniff" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "nosniff"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#18 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "cloudflare" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "cloudflare"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#19 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX ekb-conseils.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#20 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=63072000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=63072000"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#21 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#22 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Cloudflare", "share": 75 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#23 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT ekb-conseils.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#24 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#25 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Google Trust Services, CN = WE1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect ekb-conseils.com:443 -servername ekb-conseils.com </dev/null
View raw data 
C = US, O = Google Trust Services, CN = WE1

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#26 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#27 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3033::ac43:ac23
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A ekb-conseils.com && dig AAAA ekb-conseils.com
View raw data 
2606:4700:3033::ac43:ac23

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#28 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#29 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#30 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#31 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "strict-origin-when-cross-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "strict-origin-when-cross-origin"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#32 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#33 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#34 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#35 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "require-corp" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "require-corp"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#36 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Cloudflare" ], "severity": "high" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#37 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#38 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#39 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
quentin.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS ekb-conseils.com
View raw data 
quentin.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#40 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": 403, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 403,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

#41 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.ekb-conseils.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T19:34:34+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "630f6f58b41d020ddd329f71fc53f227dfa07bcb91af0b07b9c396f2e83e8731",
        "display_name": "ekb-conseils.com",
        "slug": "ekb-conseils-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "ekb-conseils.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 41,
        "evidence_count": 41,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}