OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

gendaireiki.fr

What is observed, how to verify it and what changed

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 20:06 UTC First observation 2026-09-04 20:06 UTC Latest observation 2026-09-04 20:06 UTC
History JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not testedCanary detection
  • ObservedDepends on providerInfomaniak
  • Not observable from outsideOrigin host

Infrastructure & transport

  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YR1
  • Not testedPost quantum tls

Mail & trust

  • ObservedSpf policyhardfail
  • ObservedDmarc policyreject

Dependencies & exposure

  • ObservedDepends on providerGoogle
  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for gendaireiki.fr. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 20:06 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

Probable France

European Union

Why this context appears

  • The country-code domain extension provides a supporting geographic clue

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • A country-code domain is only a contextual clue and does not prove where the organisation is legally established.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

European UnionRelevant

GDPR

The observed territorial context links the domain to the European Union. Public privacy signals increase the relevance of this framework without proving internal processing practices.

Official source →
European UnionPotentially relevant

NIS2

The directive may apply to some entities depending on sector, size and role. Scanapse does not infer those conditions from a domain alone.

Official source →

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

10evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
10
Signals
1
Changes
0
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 5870ead21f627f487d9ffa81310c8b3bbea148dac2a6e2d73a487ed5c094c1d7 
"ns11.infomaniak.ch"
mail_exchanger dns db08ed6a22e7784bc609042c9cc92e004433ee1473a82a51c9e722062a7ddaec 
"mta-gw.infomaniak.ch"
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns b521d0faa16456eb027667f59c19b7ef6bcb0216402ec0742779dd6b5578be9d 
"ns12.infomaniak.ch"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

16evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
16
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies f5d73b12fa7d76d6f66b86df5b98feb6f9b14ec36c95944f08844b7037a08d3c 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
dependency_provider dependencies 84e569885ca8f25f7d00dd0b2d37af7ecef4cd879b445c7335ce47c85f5da42d 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
module_finding resilience bf4bd1080a1f7de730ec26c9cc797259dc08169691006848edb84cbbfde0d632 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
dns_nameserver dns 5870ead21f627f487d9ffa81310c8b3bbea148dac2a6e2d73a487ed5c094c1d7 
"ns11.infomaniak.ch"
mail_exchanger dns db08ed6a22e7784bc609042c9cc92e004433ee1473a82a51c9e722062a7ddaec 
"mta-gw.infomaniak.ch"
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns b521d0faa16456eb027667f59c19b7ef6bcb0216402ec0742779dd6b5578be9d 
"ns12.infomaniak.ch"
module_finding resilience e6489f6635e2a0a332e4b71b51fad09127f3a03f2514594c86eaf16339dbf66b 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 7a9230c54d96a481137ed3a244a9cd67aba141508a01b76d94e0581e66bf13c4 
"2026-11-10T00:49:32+00:00"
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]
module_finding headers 97b9701e0d443146dae160593628ee1a685ee6f958ded6d341af06cca17ac2e9 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers b09bec14ff55d24e5f30af230310f6f249ed93704d65531e655873d241f1def7 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers f404ec7f16808abc0c5c6a258482a24f15b63824e4d1b972fad3611afb2ec3db 
{
    "evidence": null,
    "severity": "medium"
}
tls_issuer tls 455ba585e0c8b51d588a263d82d71248527fec189c7429f117961344af30b27b 
"C = US, O = Let's Encrypt, CN = YR1"
module_finding headers c1128deb503278b96ffe3bbdb3b8c0324a1596f7c505e50da6f1ed9a4543ff8e 
{
    "evidence": null,
    "severity": "medium"
}
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust d5bf4a03718d57ee1ddc55636198a81a35c1f5803155dc8e4de223b28d01db8e 
false
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4305b160cbf3cd3689e92b23c209981bcb67ed34540884964b336f28c35d7f6b 
false
spf_policy mail_trust 2686660bcec85e3404f0f5c0dd63404437fbf31cd12bdacf49255cb59d6640d5 
"hardfail"
mail_policy_flag mail_trust 29e98ef390eb90c73419091a4b00c75f4c22ccb1958e33a9f70a58cc9f671a47 
false
dmarc_policy mail_trust f76adc6e6ab5781fa533901a8756e0ecfdc29e799294dba98e9045d8eb99b40c 
"reject"
module_finding mail_trust f9ccd2c8f25c394f029b5c4bd315a05d7204d5ff25a27dec1a29c57e100eed74 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 5870ead21f627f487d9ffa81310c8b3bbea148dac2a6e2d73a487ed5c094c1d7 
"ns11.infomaniak.ch"
mail_exchanger dns db08ed6a22e7784bc609042c9cc92e004433ee1473a82a51c9e722062a7ddaec 
"mta-gw.infomaniak.ch"
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 7545ae2854cdc391b2fdfc4087e1c26cc48f9657447b9f05a6ea9f6e713abd0b 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns b521d0faa16456eb027667f59c19b7ef6bcb0216402ec0742779dd6b5578be9d 
"ns12.infomaniak.ch"
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust d5bf4a03718d57ee1ddc55636198a81a35c1f5803155dc8e4de223b28d01db8e 
false
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4305b160cbf3cd3689e92b23c209981bcb67ed34540884964b336f28c35d7f6b 
false
spf_policy mail_trust 2686660bcec85e3404f0f5c0dd63404437fbf31cd12bdacf49255cb59d6640d5 
"hardfail"
mail_policy_flag mail_trust 29e98ef390eb90c73419091a4b00c75f4c22ccb1958e33a9f70a58cc9f671a47 
false
dmarc_policy mail_trust f76adc6e6ab5781fa533901a8756e0ecfdc29e799294dba98e9045d8eb99b40c 
"reject"
module_finding mail_trust f9ccd2c8f25c394f029b5c4bd315a05d7204d5ff25a27dec1a29c57e100eed74 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 5870ead21f627f487d9ffa81310c8b3bbea148dac2a6e2d73a487ed5c094c1d7 
"ns11.infomaniak.ch"
mail_exchanger dns db08ed6a22e7784bc609042c9cc92e004433ee1473a82a51c9e722062a7ddaec 
"mta-gw.infomaniak.ch"
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 7545ae2854cdc391b2fdfc4087e1c26cc48f9657447b9f05a6ea9f6e713abd0b 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns b521d0faa16456eb027667f59c19b7ef6bcb0216402ec0742779dd6b5578be9d 
"ns12.infomaniak.ch"
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

14evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
14
Signals
2
Changes
0
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies f5d73b12fa7d76d6f66b86df5b98feb6f9b14ec36c95944f08844b7037a08d3c 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
dependency_provider dependencies 84e569885ca8f25f7d00dd0b2d37af7ecef4cd879b445c7335ce47c85f5da42d 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 5870ead21f627f487d9ffa81310c8b3bbea148dac2a6e2d73a487ed5c094c1d7 
"ns11.infomaniak.ch"
mail_exchanger dns db08ed6a22e7784bc609042c9cc92e004433ee1473a82a51c9e722062a7ddaec 
"mta-gw.infomaniak.ch"
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns b521d0faa16456eb027667f59c19b7ef6bcb0216402ec0742779dd6b5578be9d 
"ns12.infomaniak.ch"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
0
module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
technology technology b9e559adb69892ca6f79556707241d37b9b9430f7c5d0f2eeb04a1cddf6556ee 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]
module_finding headers 97b9701e0d443146dae160593628ee1a685ee6f958ded6d341af06cca17ac2e9 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers b09bec14ff55d24e5f30af230310f6f249ed93704d65531e655873d241f1def7 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers f404ec7f16808abc0c5c6a258482a24f15b63824e4d1b972fad3611afb2ec3db 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers c1128deb503278b96ffe3bbdb3b8c0324a1596f7c505e50da6f1ed9a4543ff8e 
{
    "evidence": null,
    "severity": "medium"
}
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

25evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
25
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency af48e4af258b5de64378644c359bde803e97307d4649e1e5282989524678f4ff 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 9f594efce25cec87321325bb7bb0671b122a3b45014c978e8ed50c2a94674745 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]
module_finding headers 97b9701e0d443146dae160593628ee1a685ee6f958ded6d341af06cca17ac2e9 
{
    "evidence": null,
    "severity": "high"
}
module_finding mail_trust f9ccd2c8f25c394f029b5c4bd315a05d7204d5ff25a27dec1a29c57e100eed74 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding resilience bf4bd1080a1f7de730ec26c9cc797259dc08169691006848edb84cbbfde0d632 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding headers b09bec14ff55d24e5f30af230310f6f249ed93704d65531e655873d241f1def7 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers f404ec7f16808abc0c5c6a258482a24f15b63824e4d1b972fad3611afb2ec3db 
{
    "evidence": null,
    "severity": "medium"
}
module_finding transparency adb320e5f9aab3ebf769751ed9cee17e3c2e806defd2a5eecea83751724d06e0 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding transparency aa3e6afb89941a6c8dc7819b365922f4e670676f43d70270c68cc3facbe7a405 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers c1128deb503278b96ffe3bbdb3b8c0324a1596f7c505e50da6f1ed9a4543ff8e 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 7545ae2854cdc391b2fdfc4087e1c26cc48f9657447b9f05a6ea9f6e713abd0b 
{
    "evidence": null,
    "severity": "low"
}
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

25evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
25
Signals
0
Changes
0
module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency af48e4af258b5de64378644c359bde803e97307d4649e1e5282989524678f4ff 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
module_finding transparency 9f594efce25cec87321325bb7bb0671b122a3b45014c978e8ed50c2a94674745 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]
module_finding headers 97b9701e0d443146dae160593628ee1a685ee6f958ded6d341af06cca17ac2e9 
{
    "evidence": null,
    "severity": "high"
}
module_finding mail_trust f9ccd2c8f25c394f029b5c4bd315a05d7204d5ff25a27dec1a29c57e100eed74 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding resilience bf4bd1080a1f7de730ec26c9cc797259dc08169691006848edb84cbbfde0d632 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding headers b09bec14ff55d24e5f30af230310f6f249ed93704d65531e655873d241f1def7 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers f404ec7f16808abc0c5c6a258482a24f15b63824e4d1b972fad3611afb2ec3db 
{
    "evidence": null,
    "severity": "medium"
}
module_finding transparency adb320e5f9aab3ebf769751ed9cee17e3c2e806defd2a5eecea83751724d06e0 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding transparency aa3e6afb89941a6c8dc7819b365922f4e670676f43d70270c68cc3facbe7a405 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers c1128deb503278b96ffe3bbdb3b8c0324a1596f7c505e50da6f1ed9a4543ff8e 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns 176eda271ff7494fe7ddcf4b7acb8283f9f095ca4d3655d03f0734e2db7bb360 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding mail_trust 7545ae2854cdc391b2fdfc4087e1c26cc48f9657447b9f05a6ea9f6e713abd0b 
{
    "evidence": null,
    "severity": "low"
}
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

39evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
39
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 7a9230c54d96a481137ed3a244a9cd67aba141508a01b76d94e0581e66bf13c4 
"2026-11-10T00:49:32+00:00"
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding transparency af48e4af258b5de64378644c359bde803e97307d4649e1e5282989524678f4ff 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust d5bf4a03718d57ee1ddc55636198a81a35c1f5803155dc8e4de223b28d01db8e 
false
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4305b160cbf3cd3689e92b23c209981bcb67ed34540884964b336f28c35d7f6b 
false
module_finding transparency 9f594efce25cec87321325bb7bb0671b122a3b45014c978e8ed50c2a94674745 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]
spf_policy mail_trust 2686660bcec85e3404f0f5c0dd63404437fbf31cd12bdacf49255cb59d6640d5 
"hardfail"
mail_policy_flag mail_trust 29e98ef390eb90c73419091a4b00c75f4c22ccb1958e33a9f70a58cc9f671a47 
false
dmarc_policy mail_trust f76adc6e6ab5781fa533901a8756e0ecfdc29e799294dba98e9045d8eb99b40c 
"reject"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

42evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
42
Signals
3
Changes
0
module_finding headers 01f44eb5bb088ec188b45d09f94803bc02ffc6c4c276980a64b0683ce128be86 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2d07729e8d8c63af3fb5726170937b5fe08111c34303e3689f4ba82f4c8e7ea9 
{
    "evidence": null,
    "severity": "low"
}
dmarc_record dns 0bc0dbb5b78ca8a12ac3466c317c76a71e4596a4497b3fba04b2f268999a7ad5 
"v=DMARC1; p=reject;"
technology technology b9e559adb69892ca6f79556707241d37b9b9430f7c5d0f2eeb04a1cddf6556ee 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
dns_address dns ff7668f8b1ac87fe72094da98be8dfbca7cde7e8ec0dbd50a3f87b89b79295e0 
"185.125.27.197"
module_finding dns 9266b6ef7438c7392fac32fe7aff88f13fed9116b98b15f8ba72cf82c3d8d3fc 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dependencies e37e2e380ac863adaddc0dbe3663abb0bb138b54502ac6aeeffa0405bb7793b2 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding headers 23d11b77aa9f147a476db2c33deec24010669f125329c68cbe2acc038bfcf3c5 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls 7a9230c54d96a481137ed3a244a9cd67aba141508a01b76d94e0581e66bf13c4 
"2026-11-10T00:49:32+00:00"
dns_address dns edc2fb35787a47693ff36ed508fd4fd523b4509d41e4f2ec4e3df25fc55f837a 
"2001:1600::aaaa:0:0:80:5b"
spf_record dns 9764b04fe1ef5f6fec968fa7e21f2627045b15d8875c7764c70ca9922bdf2399 
"v=spf1 include:spf.infomaniak.ch -all"
module_finding transparency af48e4af258b5de64378644c359bde803e97307d4649e1e5282989524678f4ff 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust d5bf4a03718d57ee1ddc55636198a81a35c1f5803155dc8e4de223b28d01db8e 
false
module_finding headers b63d91c659cdbf632beb339f932b60658f5312f32d12ef5ff3f1674f0349716a 
{
    "evidence": null,
    "severity": "critical"
}
dependency_provider dependencies f5d73b12fa7d76d6f66b86df5b98feb6f9b14ec36c95944f08844b7037a08d3c 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
module_finding sovereignty 4830c1e5d27ffe49e19c0c1f2de8ff1f43dc8a4c80009b6128039713b5211314 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}
module_finding headers 77fd2466731ed4a5de21bb3ca5f89c38a5284b3bb571348bbd9e0e4f792950bc 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 33f707c28187d0c73fcd5eaa04f09cee3e1a3364bb0b8302861164d5bdd9e176 
[
    "max-age=16000000"
]
module_finding headers 991da5abd720e4e51a68fc58a405c4d4e7002118af1b02322e580b04bf791b73 
{
    "evidence": null,
    "severity": "low"
}
dependency_provider dependencies 84e569885ca8f25f7d00dd0b2d37af7ecef4cd879b445c7335ce47c85f5da42d 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding dns 63cd8bc39634971926d99d2c35cbfb03ea2aa7e8ff8e3c67fb7d42381be484e2 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 4305b160cbf3cd3689e92b23c209981bcb67ed34540884964b336f28c35d7f6b 
false
module_finding transparency 9f594efce25cec87321325bb7bb0671b122a3b45014c978e8ed50c2a94674745 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 52842444bd03f65fa21fc6b2c630d9265ec7c262ebfb4c365a74b73b1ae3b423 
[
    "Apache"
]

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain gendaireiki.fr

DNS

2
DNS server Observed

ns12.infomaniak.ch

DNS server Observed

ns11.infomaniak.ch

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

Apache

external resources

2
External provider or resource Observed

Google

External provider or resource Corroborated

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

42 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

42evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=16000000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#02 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#03 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#04 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Apache", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#05 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
185.125.27.197
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A gendaireiki.fr && dig AAAA gendaireiki.fr
View raw data 
185.125.27.197

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#06 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#07 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "75%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "75%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#08 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#09 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-11-10T00:49:32+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-11-10T00:49:32+00:00

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#10 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2001:1600::aaaa:0:0:80:5b
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A gendaireiki.fr && dig AAAA gendaireiki.fr
View raw data 
2001:1600::aaaa:0:0:80:5b

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#11 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#12 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#13 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#14 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "critical" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "critical"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#15 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "fonts.googleapis.com" ], "id": "google", "known": true, "name": "Google", "observation_count": 1, "services": [ "analytics", "captcha", "fonts", "maps", "video" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#16 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Google" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Google"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#17 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#18 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=16000000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=16000000"
]

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#19 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#20 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#21 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#22 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#23 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#24 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "Apache" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "Apache"
]

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#25 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT gendaireiki.fr
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#26 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#27 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.gendaireiki.fr
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#28 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#29 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#30 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#31 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns11.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS gendaireiki.fr
View raw data 
ns11.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#32 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "info" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#33 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#34 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": 404, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 404,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#35 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#36 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YR1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect gendaireiki.fr:443 -servername gendaireiki.fr </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YR1

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#37 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#38 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX gendaireiki.fr
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#39 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#40 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#41 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns12.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS gendaireiki.fr
View raw data 
ns12.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

#42 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Infomaniak", "share": 75 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:24+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "4b65c781282c553a14a828eb15716225694de99c80ad824e417b032413387213",
        "display_name": "gendaireiki.fr",
        "slug": "gendaireiki-fr",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "gendaireiki.fr"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 42,
        "evidence_count": 42,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}