OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

les5c.com

What is observed, how to verify it and what changed

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

1 useful changes are retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 22:03 UTC First observation 2026-09-04 20:06 UTC Latest observation 2026-09-04 22:03 UTC
History Compare JSON Markdown

TIME

What changed over time

Compared with the previous stored reading

0Appeared
1Modified
45Stable
0Disappeared
Modified

Module finding

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • ObservedDepends on providerInfomaniak
  • Not testedCanary detection
  • Not observable from outsideOrigin host

Infrastructure & transport

  • Not testedPost quantum tls
  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YR2

Mail & trust

  • ObservedSpf policyhardfail
  • ObservedDmarc policyreject

Dependencies & exposure

  • ObservedDepends on providerformspree.io
  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for les5c.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 22:03 UTC Engine 2.6.2

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented Change observed

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

10evidence
8changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
10
Signals
1
Changes
8
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
mail_exchanger dns 55215c0824f785b0ea3b4f0240fdba5a1ddd3b982f1ac0ca27fb951164e8fdd6 
"mta-gw.infomaniak.ch"
dns_nameserver dns a83ac9bc43057f811aff4b06b73a9f6ea93bdf7ed7ba3a949eb366f16b7db7d2 
"ns11.infomaniak.ch"
spf_record dns 0568a4895883a2e57ea5f9fe401781271f2300ab9a63f9e2c8c494cb872a36aa 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns a9a3a0c1a491044a2708a6a25091eb764212d01c59283472d05bb9a39addbfcb 
"2001:1600::aaaa:0:0:80:5b"
dmarc_record dns 39ce03684e816f66b103b0a73c541dc5a4cea9c08adeb557fe5edd015a660d20 
"v=DMARC1; p=reject;"
dns_address dns ad5bd6577eea5f284b7716d7ac06cfde7a6da5c1e3524c4b9b2c0e4f1f4d8d31 
"185.125.27.197"
02
Documented Change observed

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

17evidence
12changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
17
Signals
2
Changes
12

Unknowns and limitations

2 items still require qualification

module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
dependency_provider dependencies 8b79bf4b733f071f942f8d96d772dce9d3d8361916a510ef35be60b8dd3c515b 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
module_finding resilience 67bb0bee69287953c2e76c7c6fa73f82ce0ab0969ac8911db4dfe7d83fe0637b 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
mail_exchanger dns 55215c0824f785b0ea3b4f0240fdba5a1ddd3b982f1ac0ca27fb951164e8fdd6 
"mta-gw.infomaniak.ch"
dns_nameserver dns a83ac9bc43057f811aff4b06b73a9f6ea93bdf7ed7ba3a949eb366f16b7db7d2 
"ns11.infomaniak.ch"
module_finding resilience dc180003b0c6676685d2cc849b860b41bf83738121e61f6e8d98d91a903bb023 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
dependency_provider dependencies d5288b886cd647050c21f8f7046c2e9de81b51d144f220d8949628ad883a217e 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding dependencies da70d393c471054bc43c78ef0b6d9aef6f446cc73ee3467ba90213fc217253c9 
{
    "evidence": "75%",
    "severity": "medium"
}
spf_record dns 0568a4895883a2e57ea5f9fe401781271f2300ab9a63f9e2c8c494cb872a36aa 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns a9a3a0c1a491044a2708a6a25091eb764212d01c59283472d05bb9a39addbfcb 
"2001:1600::aaaa:0:0:80:5b"
dmarc_record dns 39ce03684e816f66b103b0a73c541dc5a4cea9c08adeb557fe5edd015a660d20 
"v=DMARC1; p=reject;"
dns_address dns ad5bd6577eea5f284b7716d7ac06cfde7a6da5c1e3524c4b9b2c0e4f1f4d8d31 
"185.125.27.197"
03
Partial Change observed

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial Change observed

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
14changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
14

Unknowns and limitations

1 items still require qualification

module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
tls_issuer tls afeaedeb39649ff50a930846bc6e0f0e37385379a13a2e3d398e9c6bf017fc7c 
"C = US, O = Let's Encrypt, CN = YR2"
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
tls_valid_to tls ef30ab8a3bedeac4f0fc3128da07076453ea7ecd6cbc83fa81fa9d928809f25f 
"2026-11-16T17:45:43+00:00"
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 0e7b0a9f947977bb2d97c3c1a5daec7a4424e9523cea9e4838174d723c1c1ee3 
[
    "max-age=16000000"
]
module_finding headers e8c4c32a43c5f468d528e349bd8d3793134f681c265baf7087518bf6562f50d2 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers ab4023e031e75c615d0a857ad6ae15c1e2907db561fb8935f88e94b63edc4154 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 026064fb0c5acc2d39a72003c4c31eb62dabb1a4c8f31753ddf285678b2b847d 
{
    "evidence": null,
    "severity": "low"
}
04
Documented Change observed

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
11changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
11
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_policy mail_trust a4ba02289dc2380bb30f87b76f3559d0aaa6b1c2d5290615a9aa0c58be92f486 
"reject"
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
mail_policy_flag mail_trust 64d5dfa5a506c7e38e1313451f08c7c984d6c16c15ccdabeac9c8a0974dbe74e 
false
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 3fb6ed135953c9c7036ed5c59b8b1a50871a47462b5f81b0818e67760fb47973 
false
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
spf_policy mail_trust 20cb4464e7a9b1399b01c2bdaf7b787c5ac250e50cc8b288f9e12c70be5f539d 
"hardfail"
mail_exchanger dns 55215c0824f785b0ea3b4f0240fdba5a1ddd3b982f1ac0ca27fb951164e8fdd6 
"mta-gw.infomaniak.ch"
dns_nameserver dns a83ac9bc43057f811aff4b06b73a9f6ea93bdf7ed7ba3a949eb366f16b7db7d2 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 1f0cf551eaf523c8c291a4a0cbfd1fe73026f60374b9ebdaba3770240819fc1e 
false
spf_record dns 0568a4895883a2e57ea5f9fe401781271f2300ab9a63f9e2c8c494cb872a36aa 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns a9a3a0c1a491044a2708a6a25091eb764212d01c59283472d05bb9a39addbfcb 
"2001:1600::aaaa:0:0:80:5b"
dmarc_record dns 39ce03684e816f66b103b0a73c541dc5a4cea9c08adeb557fe5edd015a660d20 
"v=DMARC1; p=reject;"
dns_address dns ad5bd6577eea5f284b7716d7ac06cfde7a6da5c1e3524c4b9b2c0e4f1f4d8d31 
"185.125.27.197"
05
Documented Change observed

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
8changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
8
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_policy mail_trust a4ba02289dc2380bb30f87b76f3559d0aaa6b1c2d5290615a9aa0c58be92f486 
"reject"
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
mail_policy_flag mail_trust 64d5dfa5a506c7e38e1313451f08c7c984d6c16c15ccdabeac9c8a0974dbe74e 
false
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 3fb6ed135953c9c7036ed5c59b8b1a50871a47462b5f81b0818e67760fb47973 
false
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
spf_policy mail_trust 20cb4464e7a9b1399b01c2bdaf7b787c5ac250e50cc8b288f9e12c70be5f539d 
"hardfail"
mail_exchanger dns 55215c0824f785b0ea3b4f0240fdba5a1ddd3b982f1ac0ca27fb951164e8fdd6 
"mta-gw.infomaniak.ch"
dns_nameserver dns a83ac9bc43057f811aff4b06b73a9f6ea93bdf7ed7ba3a949eb366f16b7db7d2 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 1f0cf551eaf523c8c291a4a0cbfd1fe73026f60374b9ebdaba3770240819fc1e 
false
spf_record dns 0568a4895883a2e57ea5f9fe401781271f2300ab9a63f9e2c8c494cb872a36aa 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns a9a3a0c1a491044a2708a6a25091eb764212d01c59283472d05bb9a39addbfcb 
"2001:1600::aaaa:0:0:80:5b"
dmarc_record dns 39ce03684e816f66b103b0a73c541dc5a4cea9c08adeb557fe5edd015a660d20 
"v=DMARC1; p=reject;"
dns_address dns ad5bd6577eea5f284b7716d7ac06cfde7a6da5c1e3524c4b9b2c0e4f1f4d8d31 
"185.125.27.197"
06
Documented Change observed

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

17evidence
9changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
17
Signals
2
Changes
9
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding supply_chain 63ba04d7074b832a7b475aa6a138e9582b175eb811ed0c7936c562661fa0d7f0 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
module_finding supply_chain 61838770ce331c3943eefe0ab428e96aac3a46eae70905f50d75c8ece365ed9a 
{
    "evidence": 11,
    "severity": "low"
}
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
dependency_provider dependencies 8b79bf4b733f071f942f8d96d772dce9d3d8361916a510ef35be60b8dd3c515b 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}
mail_exchanger dns 55215c0824f785b0ea3b4f0240fdba5a1ddd3b982f1ac0ca27fb951164e8fdd6 
"mta-gw.infomaniak.ch"
dns_nameserver dns a83ac9bc43057f811aff4b06b73a9f6ea93bdf7ed7ba3a949eb366f16b7db7d2 
"ns11.infomaniak.ch"
dependency_provider dependencies d5288b886cd647050c21f8f7046c2e9de81b51d144f220d8949628ad883a217e 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding dependencies da70d393c471054bc43c78ef0b6d9aef6f446cc73ee3467ba90213fc217253c9 
{
    "evidence": "75%",
    "severity": "medium"
}
spf_record dns 0568a4895883a2e57ea5f9fe401781271f2300ab9a63f9e2c8c494cb872a36aa 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns a9a3a0c1a491044a2708a6a25091eb764212d01c59283472d05bb9a39addbfcb 
"2001:1600::aaaa:0:0:80:5b"
dmarc_record dns 39ce03684e816f66b103b0a73c541dc5a4cea9c08adeb557fe5edd015a660d20 
"v=DMARC1; p=reject;"
dns_address dns ad5bd6577eea5f284b7716d7ac06cfde7a6da5c1e3524c4b9b2c0e4f1f4d8d31 
"185.125.27.197"
07
Documented Change observed

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
1changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
1
module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
technology technology 5b684c423a0fa612bd792b9a754e3fdd05a3051fd839e50199bcc053576c0eae 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 0e7b0a9f947977bb2d97c3c1a5daec7a4424e9523cea9e4838174d723c1c1ee3 
[
    "max-age=16000000"
]
module_finding headers e8c4c32a43c5f468d528e349bd8d3793134f681c265baf7087518bf6562f50d2 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers ab4023e031e75c615d0a857ad6ae15c1e2907db561fb8935f88e94b63edc4154 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 026064fb0c5acc2d39a72003c4c31eb62dabb1a4c8f31753ddf285678b2b847d 
{
    "evidence": null,
    "severity": "low"
}
08
Partial Change observed

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial Change observed

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

28evidence
10changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
28
Signals
0
Changes
10

Unknowns and limitations

1 items still require qualification

module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 63ba04d7074b832a7b475aa6a138e9582b175eb811ed0c7936c562661fa0d7f0 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding supply_chain 61838770ce331c3943eefe0ab428e96aac3a46eae70905f50d75c8ece365ed9a 
{
    "evidence": 11,
    "severity": "low"
}
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding transparency d8c70f990315fcbb8673e7bee02ad7993e9f0d5fab29ceec8fc746f8beb7c3a5 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 0e7b0a9f947977bb2d97c3c1a5daec7a4424e9523cea9e4838174d723c1c1ee3 
[
    "max-age=16000000"
]
module_finding headers e8c4c32a43c5f468d528e349bd8d3793134f681c265baf7087518bf6562f50d2 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency f2f02732a3d1f474a347238076acb54bd78efb3d4b3d85cb99a12f4ae5283faa 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding resilience 67bb0bee69287953c2e76c7c6fa73f82ce0ab0969ac8911db4dfe7d83fe0637b 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
module_finding transparency 0dcea8b5b00ca902fdb29bebf78628f5113b95d6f84a40320ab5dd898e16cecb 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience dc180003b0c6676685d2cc849b860b41bf83738121e61f6e8d98d91a903bb023 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
09
Documented Change observed

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

28evidence
4changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
28
Signals
0
Changes
4
module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 63ba04d7074b832a7b475aa6a138e9582b175eb811ed0c7936c562661fa0d7f0 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding supply_chain 61838770ce331c3943eefe0ab428e96aac3a46eae70905f50d75c8ece365ed9a 
{
    "evidence": 11,
    "severity": "low"
}
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding transparency d8c70f990315fcbb8673e7bee02ad7993e9f0d5fab29ceec8fc746f8beb7c3a5 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 0e7b0a9f947977bb2d97c3c1a5daec7a4424e9523cea9e4838174d723c1c1ee3 
[
    "max-age=16000000"
]
module_finding headers e8c4c32a43c5f468d528e349bd8d3793134f681c265baf7087518bf6562f50d2 
{
    "evidence": null,
    "severity": "critical"
}
module_finding transparency f2f02732a3d1f474a347238076acb54bd78efb3d4b3d85cb99a12f4ae5283faa 
{
    "evidence": 404,
    "severity": "medium"
}
module_finding resilience 67bb0bee69287953c2e76c7c6fa73f82ce0ab0969ac8911db4dfe7d83fe0637b 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}
module_finding transparency 0dcea8b5b00ca902fdb29bebf78628f5113b95d6f84a40320ab5dd898e16cecb 
{
    "evidence": null,
    "severity": "medium"
}
module_finding resilience dc180003b0c6676685d2cc849b860b41bf83738121e61f6e8d98d91a903bb023 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
10
Documented Change observed

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

42evidence
30changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
42
Signals
2
Changes
30

Unknowns and limitations

2 items still require qualification

module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_policy mail_trust a4ba02289dc2380bb30f87b76f3559d0aaa6b1c2d5290615a9aa0c58be92f486 
"reject"
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 63ba04d7074b832a7b475aa6a138e9582b175eb811ed0c7936c562661fa0d7f0 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
tls_issuer tls afeaedeb39649ff50a930846bc6e0f0e37385379a13a2e3d398e9c6bf017fc7c 
"C = US, O = Let's Encrypt, CN = YR2"
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
tls_valid_to tls ef30ab8a3bedeac4f0fc3128da07076453ea7ecd6cbc83fa81fa9d928809f25f 
"2026-11-16T17:45:43+00:00"
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding supply_chain 61838770ce331c3943eefe0ab428e96aac3a46eae70905f50d75c8ece365ed9a 
{
    "evidence": 11,
    "severity": "low"
}
mail_policy_flag mail_trust 64d5dfa5a506c7e38e1313451f08c7c984d6c16c15ccdabeac9c8a0974dbe74e 
false
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding transparency d8c70f990315fcbb8673e7bee02ad7993e9f0d5fab29ceec8fc746f8beb7c3a5 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 3fb6ed135953c9c7036ed5c59b8b1a50871a47462b5f81b0818e67760fb47973 
false
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 4a307d7579c8eb9c2295d40712bc21d443154b4311fcde1c0a8a99c823d2200b 
{
    "evidence": null,
    "severity": "low"
}
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
46changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
46
12
Documented Stable

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

45evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
45
Signals
3
Changes
0
module_finding headers 4770ac4e67709d68782c4dc829fc39db4495ae873f1860b887454882fe6c5546 
{
    "evidence": null,
    "severity": "high"
}
module_finding dns 21b404d0a1a8ed0dc78a848b6c494a4f66488aafb009cec7a6d0b23fcab17705 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_policy mail_trust a4ba02289dc2380bb30f87b76f3559d0aaa6b1c2d5290615a9aa0c58be92f486 
"reject"
module_finding dependencies 24a8331d4bc02ac7a8573464f0ed7b7dc34c2fffe55d55a8f14c2afa46112d9a 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding headers 1588b6f9f4222895dcd8b569cc73b8a223bc836e59646556b3b1e17e0b7aa2bc 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}
module_finding mail_trust 2bc0b702eb862eb05fbe01625582159592a99bfcadb73a18f543896427059e91 
{
    "evidence": null,
    "severity": "low"
}
module_finding supply_chain 63ba04d7074b832a7b475aa6a138e9582b175eb811ed0c7936c562661fa0d7f0 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
dns_nameserver dns 1da7c899fd2dbca2f42e94e0a01d8cbefaf83d8416b482cdf341942ad4ac2535 
"ns12.infomaniak.ch"
technology technology 5b684c423a0fa612bd792b9a754e3fdd05a3051fd839e50199bcc053576c0eae 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
tls_issuer tls afeaedeb39649ff50a930846bc6e0f0e37385379a13a2e3d398e9c6bf017fc7c 
"C = US, O = Let's Encrypt, CN = YR2"
module_finding headers 04e250c7d49493dd60f4475b1b9d353b9a03c1fce856a38344e8fd1d52d4d77c 
{
    "evidence": null,
    "severity": "medium"
}
tls_valid_to tls ef30ab8a3bedeac4f0fc3128da07076453ea7ecd6cbc83fa81fa9d928809f25f 
"2026-11-16T17:45:43+00:00"
module_finding headers 1b0d207fb036c54ec4408a0f442538d11c394b5f6fc875c4f9b036af295d1725 
{
    "evidence": null,
    "severity": "medium"
}
http_header headers 71f95349c80a02021e3decf60b05a1ecc627ef6330e7c241343a04eec37bc539 
[
    "Apache"
]
module_finding supply_chain 61838770ce331c3943eefe0ab428e96aac3a46eae70905f50d75c8ece365ed9a 
{
    "evidence": 11,
    "severity": "low"
}
mail_policy_flag mail_trust 64d5dfa5a506c7e38e1313451f08c7c984d6c16c15ccdabeac9c8a0974dbe74e 
false
module_finding sovereignty 64d16b2ed515a3fc73a2a096b926b34e1f5565306cfb88cc8f0999c18a298b54 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}
module_finding mail_trust 749fb058f296812585f0ec24740581a317a9a2cb3e18126e1db46c5f1a566401 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding transparency d8c70f990315fcbb8673e7bee02ad7993e9f0d5fab29ceec8fc746f8beb7c3a5 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns e9d963507b0912a80921ae35e624e1c7b941259898899cf0ed15a5d569b2e6c5 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
module_finding mail_trust 8b7131e3015636e7116ab1b7cf17c8c6e0661690190efe6a9f31e671e093cacd 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 3fb6ed135953c9c7036ed5c59b8b1a50871a47462b5f81b0818e67760fb47973 
false
module_finding headers 642bf3bc197873f6d94b8610c67fa062a550df0c5278bc64bd5cd6c288eeee48 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 8251a3f989ea638f112b5695cdf539629414b4a4bce1569b12a6b7e761edbdfb 
{
    "evidence": null,
    "severity": "low"
}

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain les5c.com

DNS

2
DNS server Observed

ns12.infomaniak.ch

DNS server Observed

ns11.infomaniak.ch

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

Apache

external resources

2
External provider or resource Corroborated

Infomaniak

External provider or resource Observed

formspree.io

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

45 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

45evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#02 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#03 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.les5c.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#04 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "formspree.io" ], "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#05 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=16000000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=16000000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#06 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#07 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": [ "formspree.io" ], "severity": "medium" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#08 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns12.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS les5c.com
View raw data 
ns12.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#09 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Apache", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#10 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YR2
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect les5c.com:443 -servername les5c.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YR2

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#11 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#12 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-11-16T17:45:43+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-11-16T17:45:43+00:00

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#13 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#14 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "Apache" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "Apache"
]

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#15 Observed public page

Evidence: module_finding

Third-party resources loaded by a page create visible execution dependencies.

Active non-intrusive Medium
Why it matters

An external resource executed in the browser extends the site’s trust chain.

What to check next

Identify executed third-party scripts and styles, their origin, stability, and SRI use when technically applicable.

Possible action

Remove unnecessary third-party resources, self-host when appropriate, and use SRI only when the resource and update lifecycle make it suitable.

Observation
{ "evidence": 11, "severity": "low" }
Understand
Public page resource and integrity-attribute inspection
Source
Observed public page
Reliability
Medium
What this supports
Describe visible supply-chain exposure and SRI use
What this does not prove
Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 11,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#16 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#17 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "formspree.io" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "formspree.io"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#18 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#19 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#20 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#21 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#22 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#23 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "info" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#24 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#25 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#26 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=16000000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=16000000"
]

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#27 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "critical" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "critical"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#28 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "formspree.io" ], "id": "host-8eec65f47bed", "known": false, "name": "formspree.io", "observation_count": 1, "services": [ "unknown" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "formspree.io"
    ],
    "id": "host-8eec65f47bed",
    "known": false,
    "name": "formspree.io",
    "observation_count": 1,
    "services": [
        "unknown"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#29 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": 404, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": 404,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#30 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Infomaniak", "share": 75 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Infomaniak",
        "share": 75
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#31 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT les5c.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#32 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX les5c.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#33 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#34 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns11.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS les5c.com
View raw data 
ns11.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#35 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#36 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#37 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#38 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "75%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "75%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#39 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#40 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2001:1600::aaaa:0:0:80:5b
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A les5c.com && dig AAAA les5c.com
View raw data 
2001:1600::aaaa:0:0:80:5b

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#41 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#42 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
185.125.27.197
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A les5c.com && dig AAAA les5c.com
View raw data 
185.125.27.197

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#43 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#44 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

#45 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T22:03:42+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.2",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "40c53d02807156b45c1ebccd08f6b28edfcb6dc73e8f4c708a358b47a366ccca",
        "display_name": "les5c.com",
        "slug": "les5c-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "les5c.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": true,
        "change_counts": {
            "modified": 1,
            "stable": 45
        },
        "observation_count": 45,
        "evidence_count": 45,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}