PUBLIC DOSSIER / DATED OBSERVATION

musterpage.ch

2026-10-09 20:55 UTC Scope completed

Compare Export PDF ↗New reading

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

9 public observations are documented in this dossier.

7 structuring public dependencies are visible.

No useful change is retained since the previous reading.

4 points still require confirmation or cannot be observed from outside.

Distinct evidence: 56
Retained signals: 3
Identified products: 2

General information

Domain name: musterpage.ch
Reading state: Scope completed
Registered on: Not available
Registrar: Undetermined
Stated expiration: Not available
Registry outcome: Source unavailable

View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE

musterpage.ch2026-10-09 20:55 UTC

Musterpage CMS Worpdress Theme by RESIGN.

Angles: 11/12
Evidence: 56
Signals: 3

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

2 recorded IP address(es) / 1 country estimate(s) available

194.124.232.180SwitzerlandConnected IP
2001:67c:1984::232:180:1SwitzerlandDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Technologies and services

View all (2) →

nginxTechnology clue BootstrapTechnology clue

Key signals

Inspect →

No summary signal retained. This does not mean “no risk”.

Each finding remains linked to its scope, evidence and limitations.

Visible relationships

Explore all →

musterpage.chspecter.mva-n.netuses nameserver

musterpage.ch194.124.232.180resolves to

musterpage.chmail.musterpage.chdepends on provider

musterpage.chnginxuses technology

Retained evidence

Open the record →

2026-10-09 20:55 UTCdependency_provider 2026-10-09 20:55 UTCtechnology 2026-10-09 20:55 UTCmodule_finding 2026-10-09 20:55 UTCmodule_finding

Domain timeline

View history →

2026-10-09 20:55 UTCRetained observation

Only retained observations are shown. No earlier event is reconstructed.

The twelve reading angles

Domain identityObserved InfrastructureReview needed Encryption and transportObserved Mail and trustObserved DNS and governanceObserved External dependenciesReview needed Observable technologiesObserved Public exposureObserved Documentary trustObserved Security signalsObserved Evolution over timeUndetermined Evidence and traceabilityReview needed

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host: musterpage.ch
Registry query domain: musterpage.ch
Registered on: Not available
Registrar: Not available
Stated expiration: Not available
Collection outcome: Source unavailable

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

Estimate from the local dataset recorded with this measurement. This country locates neither the organisation nor its data; a proxy or anycast network may represent several points of presence.

2 recorded IP address(es) / 1 country estimate(s) available

194.124.232.180SwitzerlandConnected IP
2001:67c:1984::232:180:1SwitzerlandDNS only

Country-level estimates do not locate an organisation or its stored data.IP Geolocation by DB-IP · 2026-09 · CC BY 4.0. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

A country-code domain is only a contextual clue and does not prove where the organisation is legally established.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

nginx

Technology fingerprint

HTTP Server header

2026-10-09 20:55 UTC

Clue source ↗

Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

Bootstrap

Technology fingerprint

Bootstrap asset filename

2026-10-09 20:55 UTC

Clue source ↗

Rule and scope

2026.09-v3.1

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

musterpage.chspecter.mva-n.net

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

57cacec0914b04dd7eb0 →

Retained structured value

{"id":"0375389e443a90ca4e484b6ca1ac91d12eab91688fa1f77b1662ec09900ccfc1","subject":"musterpage.ch","predicate":"uses_nameserver","object":"specter.mva-n.net","state":"observed","evidence_ids":["57cacec0914b04dd7eb0074a31fd084b0cb7dcbe0d0d269c0f112009feda22b7"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.ch194.124.232.180

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

1cbc77ab805cfcbe54b0 →

Retained structured value

{"id":"2be81254cf7f69d4bb30e898fcd98b32f2ab581c77babe40ab74217b1b54f978","subject":"musterpage.ch","predicate":"resolves_to","object":"194.124.232.180","state":"observed","evidence_ids":["1cbc77ab805cfcbe54b013b10c2f9c2fa42f9eb3dc06140a9d6e1a09fe0a08cf"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chmail.musterpage.ch

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

24da1cccbad9712a3729 →

Retained structured value

{"id":"50e1a016cc3127ed7a3948a2fe4f616aab5e52392d0bb043d126f4d0904d031c","subject":"musterpage.ch","predicate":"depends_on_provider","object":"mail.musterpage.ch","state":"observed","evidence_ids":["24da1cccbad9712a3729a12b9876cded079bf9417b993b4e0876f8d01078bfb5"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chnginx

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

a9fbcdb76ecec45d3f57 →

Retained structured value

{"id":"81b2117f477754455bf5f6ad530c7a32ac3fc1d947148dc81e8adf72cbb188c6","subject":"musterpage.ch","predicate":"uses_technology","object":"nginx","state":"observed","evidence_ids":["a9fbcdb76ecec45d3f57feb05f86c853eca4cfaf832e154959c4a15657f3be14"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.ch2001:67c:1984::232:180:1

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

c08e72f33ea4de46700c →

Retained structured value

{"id":"85cf448e632946d01057d40a59acb945d890f0f849435274c7ef52f42e0b67a1","subject":"musterpage.ch","predicate":"resolves_to","object":"2001:67c:1984::232:180:1","state":"observed","evidence_ids":["c08e72f33ea4de46700cfb737b8a7fa9aece3e8234aeea66d81bf466f14500f3"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chmaxcdn.bootstrapcdn.com

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

9085071f0625ef554061 →

Retained structured value

{"id":"8ebbf2706217688b8420f92bfc9edf3bca4bd73f75be3287b754adf86e502b24","subject":"musterpage.ch","predicate":"depends_on_provider","object":"maxcdn.bootstrapcdn.com","state":"observed","evidence_ids":["9085071f0625ef55406122fef00e8d13c5b9b80c1342a0ea0908f1ebb7291fe9"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chVimeo

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

f949301138decc97021d →

Retained structured value

{"id":"90e7966d67c6b61d7777403b22b6b5a5e153bd1ef804a96199e8444d62d85454","subject":"musterpage.ch","predicate":"depends_on_provider","object":"Vimeo","state":"observed","evidence_ids":["f949301138decc97021d0e94929d2c4a87fb90847a84f86bd7e7f8ea60523d4e"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chresign.raq.ch

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

3b4cf30c365aa19ee0fc →

Retained structured value

{"id":"cc0aed94fd1d0e80f9ee380a1af178e1ce6a5bd9eeea0285c8f13137af0912e5","subject":"musterpage.ch","predicate":"uses_nameserver","object":"resign.raq.ch","state":"observed","evidence_ids":["3b4cf30c365aa19ee0fcd8d5f53cc8249bd96866dd7ab0b2905ab0a3a5253c5c"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chGoogle

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

2681b83d40c1259f10a1 →

Retained structured value

{"id":"cc4f55e8c97de45ae42f02f912f50807f2d89a34a54d7cc9c5dd03388572f882","subject":"musterpage.ch","predicate":"depends_on_provider","object":"Google","state":"observed","evidence_ids":["2681b83d40c1259f10a1340e6ed02e381060179fb1c137dacf5e21f004e86409"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chuse.typekit.net

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

451e744707d801262cbd →

Retained structured value

{"id":"ce25905d37d9f91d3f30b887501128e1fcea3e18925243e5c5b40337d13ef012","subject":"musterpage.ch","predicate":"depends_on_provider","object":"use.typekit.net","state":"observed","evidence_ids":["451e744707d801262cbd7fe9f411f966a431e62893ab1dbea675dc4ed8bfe641"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chBootstrap

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

fa5bc3d9911422277164 →

Retained structured value

{"id":"ce3144f617d3c207467eeeaa0baaf692c33bc0668eeb572294d927094d1b38f0","subject":"musterpage.ch","predicate":"uses_technology","object":"Bootstrap","state":"observed","evidence_ids":["fa5bc3d99114222771645b3e0ddd704555110eae5e9bacdd7572b90a23c02149"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

musterpage.chspecter.mva-n.net

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

f25a4e757ca783af00f1 →

Retained structured value

{"id":"cecf919960292d86a886ecc6e251d25864085c69e5c1a5bbe613e5401b269faf","subject":"musterpage.ch","predicate":"depends_on_provider","object":"specter.mva-n.net","state":"observed","evidence_ids":["f25a4e757ca783af00f14b871e19cdcca2b91e9377062debf1e92ee40baa2e30"],"first_seen_at":"2026-10-09T20:55:23+00:00","last_seen_at":"2026-10-09T20:55:23+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

No summary signal retained. This is not a finding of no risk.

All retained signals (3)

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Retained technical findings and limitations

Network reachability

DNS and email

DMARC not detected No DMARC policy was observed for the domain.

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

DMARC missing No DMARC policy was observed for a domain that receives email.

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

Single MX relay Only one mail relay was observed.

[{"host":"mail.musterpage.ch","priority":10}]

TLS transport

Security headers

Content-Security-Policy missing The browser receives no explicit resource loading policy.

HSTS missing The browser is not instructed to return exclusively over HTTPS.

nosniff missing The browser may try to interpret a content type differently from the declared type.

Anti-framing protection missing The page may potentially be embedded in a hostile iframe.

Referrer-Policy missing Referrer URLs may be transmitted with uncontrolled granularity.

Permissions-Policy missing Unused browser capabilities are not explicitly disabled.

COOP isolation missing The browsing context is not isolated from cross-origin windows.

CORP missing The cross-origin resource sharing policy is not explicit.

COEP missing Embedded resource isolation is not enabled.

Third-party resource control

Third-party scripts without declared integrity External scripts are loaded without an observable SRI hash. Some dynamic resources do not support SRI.

["use.typekit.net","ajax.googleapis.com"]

Inline event handlers Inline JavaScript attributes make a strict CSP harder to maintain.

External links without explicit isolation Links opened in a new tab do not declare rel=noopener or noreferrer.

Dependencies

Highly dependent ecosystem The public document reveals several third-party providers or services.

["specter.mva-n.net","resign.raq.ch","maxcdn.bootstrapcdn.com","use.typekit.net","Vimeo","Google","mail.musterpage.ch"]

Unattributed providers Some external hosts do not yet match the provider catalog.

["specter.mva-n.net","resign.raq.ch","maxcdn.bootstrapcdn.com","use.typekit.net","mail.musterpage.ch"]

Privacy

Technology footprint

Estimated sovereignty

Dependencies outside Europe Providers legally associated with countries outside Europe appear in the observed scope.

["Vimeo","Google"]

Jurisdictions to qualify The jurisdiction of some external hosts could not be reliably attributed.

["specter.mva-n.net","resign.raq.ch","maxcdn.bootstrapcdn.com","use.typekit.net","mail.musterpage.ch"]

Resilience

Transparency

security.txt missing or incomplete No usable /.well-known/security.txt file with a Contact field was observed.

Privacy information not found No obvious link to a privacy policy was identified on the page.

Legal notice not found No obvious legal link was identified in the public document.

Contact point not found No obvious contact link was identified.

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title: Musterpage CMS Worpdress Theme by RESIGN.
Description: RESIGN. Demo Webseite | Responsive Webdesign - Mobile Page, Mobile Theme
Declared structured-data types: Not documented

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

security.txt

Source unavailable

https://musterpage.ch/.well-known/security.txt

2026-10-09 20:55 UTC

09 / TIME CHANGES THE READING

The domain timeline

Initial reference point for this reading.

2026-10-09 20:55 UTC
Displayed reading
Open →

Open dedicated history →

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Export evidence JSON Full JSON report Methodology

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Technical finding : Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info / Observed : Dns address : 2001:67c:1984::232:180:1

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns address Observed

2001:67c:1984::232:180:1

dns

Dns address Observed

194.124.232.180

dns

Technical finding Observed

Signal importance : medium

dns

Mail exchanger Observed

mail.musterpage.ch

dns

Dns nameserver Observed

specter.mva-n.net

dns

1cbc77ab805cfcbe54b0 289bb67fab75f5a04ec1 2d12678a8e62eaa68e39 3b4cf30c365aa19ee0fc 4d442980ceb7f66419ca 57cacec0914b04dd7eb0 8f8f498afb1079570413 c08e72f33ea4de46700c c855c2bf1d618cdfce45

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Observed : Provider dependency : maxcdn.bootstrapcdn.com / Observed : Provider dependency : use.typekit.net

Provider dependency Observed

maxcdn.bootstrapcdn.com

provider_observed_once

Provider dependency Observed

use.typekit.net

provider_observed_once

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Provider dependency Observed

Vimeo

provider_observed_once

Provider dependency Observed

specter.mva-n.net

provider_observed_once

Provider dependency Observed

resign.raq.ch

provider_observed_once

Encryption and transportObserved

How are public exchanges protected and presented?

Not tested : Post-quantum TLS negotiation : No measurement performed / Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YR1

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YR1

certificate_observed

Http header Observed

nginx

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

Signal importance : critical

headers

03947608d76fb9fde2d4 118fdcb7faf52531799f 31565155c282b7c0eda3 376fecdbb4b78caf7e80 52ea24387f52c8f604b9 7840cb2b0c6e381290f1 95a08811c46e398d27f0 9c58fdb6c317136487be b1a12fe2bad02a6f2116 c13e21b2b7e9ebb690cb cd46053273b3e0b7edcc f6075fb727bbbf2b232b

Mail and trustObserved

Which mail protections and policies are publicly observable?

Observed : SPF policy : hardfail / Observed : Technical finding : Signal importance : high

SPF policy Observed

hardfail

mail_policy_observed

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

Dns address Observed

2001:67c:1984::232:180:1

dns

Dns address Observed

194.124.232.180

dns

17e2e7878a8daf512ae9 1cbc77ab805cfcbe54b0 289bb67fab75f5a04ec1 2d12678a8e62eaa68e39 38a5be63fb50e2d6fd5a 3b4cf30c365aa19ee0fc 4d442980ceb7f66419ca 57cacec0914b04dd7eb0 5be6624d9c5a2f4e1a45 7a1d4ee117c5c386ead7 895804ad419c115ad6b3 8f8f498afb1079570413 bcf06a34311cc3c0d353 c08e72f33ea4de46700c c855c2bf1d618cdfce45 d43586b835495314bab7 ec47b19d8526ed15078e

DNS and governanceObserved

Which public DNS controls are visible and what remains undetermined?

Observed : Technical finding : Signal importance : high / Observed : Technical finding : Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

Dns address Observed

2001:67c:1984::232:180:1

dns

Dns address Observed

194.124.232.180

dns

Technical finding Observed

Signal importance : medium

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Observed : Provider dependency : maxcdn.bootstrapcdn.com / Observed : Provider dependency : use.typekit.net

Provider dependency Observed

maxcdn.bootstrapcdn.com

provider_observed_once

Provider dependency Observed

use.typekit.net

provider_observed_once

Provider dependency Observed

Vimeo

provider_observed_once

Provider dependency Observed

specter.mva-n.net

provider_observed_once

Provider dependency Observed

resign.raq.ch

provider_observed_once

Provider dependency Observed

mail.musterpage.ch

provider_observed_once

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Technology : Name : nginx ; Version exposed : No / Observed : Http header : nginx

Technology Observed

Name : nginx ; Version exposed : No

technology

Http header Observed

nginx

headers

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

Signal importance : critical

headers

Technical finding Observed

Signal importance : high

headers

03947608d76fb9fde2d4 118fdcb7faf52531799f 376fecdbb4b78caf7e80 52ea24387f52c8f604b9 7840cb2b0c6e381290f1 95a08811c46e398d27f0 9c58fdb6c317136487be a9fbcdb76ecec45d3f57 b1a12fe2bad02a6f2116 cd46053273b3e0b7edcc f6075fb727bbbf2b232b fa5bc3d9911422277164

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Technical finding : Signal importance : high

Canary statement detected To confirm

no_known_passive_signature_observed

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

nginx

headers

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

Technical finding Observed

Signal importance : low

headers

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

nginx

headers

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

Technical finding Observed

Signal importance : low

headers

Technical finding Observed

Evidence : 1 ; Signal importance : low

supply_chain

Security signalsObserved

Which protections or situations deserve particular attention?

To confirm : Canary statement detected : No / Not tested : Post-quantum TLS negotiation : No measurement performed

Canary statement detected To confirm

no_known_passive_signature_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

nginx

headers

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Dependency provider : Critical : No ; Hosts : maxcdn.bootstrapcdn.com ; Id : host-54b274da0b0d ; Known : No ; Name : maxcdn.bootstrapcdn.com ; Observation count : 1 ; Services : unknown ; Tracker : No / Observed : Technology : Name : nginx ; Version exposed : No

Dependency provider Observed

Critical : No ; Hosts : maxcdn.bootstrapcdn.com ; Id : host-54b274da0b0d ; Known : No ; Name : maxcdn.bootstrapcdn.com ; Observation count : 1 ; Services : unknown ; Tracker : No

dependencies

Technology Observed

Name : nginx ; Version exposed : No

technology

Technical finding Observed

Signal importance : high

mail_trust

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Http header Observed

nginx

headers

Technical finding Observed

Evidence : Host : mail.musterpage.ch ; Priority : 10 ; Signal importance : low

mail_trust

03947608d76fb9fde2d4 09ba593d7c9c3f9ea9cc 0b2b100c8ddd9e055b45 118fdcb7faf52531799f 156d8c2f30117f90b336 17e2e7878a8daf512ae9 1cbc77ab805cfcbe54b0 1d01e92dbbec83315719 24da1cccbad9712a3729 2681b83d40c1259f10a1 289bb67fab75f5a04ec1 2acfcdece1b69ee2df21 2d12678a8e62eaa68e39 31565155c282b7c0eda3 376fecdbb4b78caf7e80 38a5be63fb50e2d6fd5a 3b4cf30c365aa19ee0fc 3f616d0a030c7d44eeea 451e744707d801262cbd 4b6beeb350e1b3f14ca9 4d442980ceb7f66419ca 52ea24387f52c8f604b9 57cacec0914b04dd7eb0 5be6624d9c5a2f4e1a45 61116653af8d8767b1ad 6363dec8c69ac8ee7550 7840cb2b0c6e381290f1 794022a568b2546ed3d3 7a1d4ee117c5c386ead7 895804ad419c115ad6b3 8a1705599e76d2693918 8f8f498afb1079570413 9085071f0625ef554061 95a08811c46e398d27f0 9c58fdb6c317136487be a9fbcdb76ecec45d3f57 ac1976cb5af02bf22e10 b1a12fe2bad02a6f2116 bcf06a34311cc3c0d353 c08e72f33ea4de46700c c13e21b2b7e9ebb690cb c6c6a25c49850b74019c c855c2bf1d618cdfce45 c9d1e3eaa5fed2d4c2bc cb67b539c11a568e0fe8 cd3ad8b02e7b7cb96f8a cd46053273b3e0b7edcc d43586b835495314bab7 d43c99612c9baddb8905 ec47b19d8526ed15078e f25a4e757ca783af00f1 f6075fb727bbbf2b232b f949301138decc97021d fa5bc3d9911422277164 fb556aa9f04850b7564f fc947d2520ed5570277c

Evidence record

The filter changes the display. Exports retain all evidence.

post_quantum_tls794022a568b2546ed3

Observed value: {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: pq_tls_probe
Method: Public observation
Limitations: A positive result does not make a site “post-quantum”, and a negative result does not prove no other client could negotiate it.

canary_signal156d8c2f30117f90b3

Observed value: {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: canary_passive
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_findingcb67b539c11a568e0f

Observed value: {"evidence":3,"severity":"low"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: supply_chain
Method: Public page resource and integrity-attribute inspection
Limitations: Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

dependency_provider451e744707d801262c

Observed value: {"critical":false,"hosts":["use.typekit.net"],"id":"host-ec3e766bb1cf","known":false,"name":"use.typekit.net","observation_count":1,"services":["unknown"],"tracker":false}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: dependencies
Method: Public HTML/resource dependency extraction and provider matching
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

tls_issuerc13e21b2b7e9ebb690

Observed value: C = US, O = Let's Encrypt, CN = YR1
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: tls
Method: TLS handshake and public certificate inspection
Limitations: Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

dependency_provider8a1705599e76d26939

Observed value: {"critical":true,"hosts":["resign.raq.ch"],"id":"host-ab3c92ea6550","known":false,"name":"resign.raq.ch","observation_count":1,"services":["unknown"],"tracker":false}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: dependencies
Method: Public HTML/resource dependency extraction and provider matching
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_finding03947608d76fb9fde2

Observed value: {"evidence":null,"severity":"medium"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

modern_transport_evidencefb556aa9f04850b756

Observed value: {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YR1","protocol":"","san_count":0,"state":"observed","valid_from":"2026-10-09T13:33:02+00:00","valid_to":"2027-01-07T13:33:01+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"","state":"not_observed"},"ipv4":{"addresses":["194.124.232.180"],"state":"observed"},"ipv6":{"addresses":["2001:67c:1984::232:180:1"],"state":"observed"}}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: modern_transport
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

mail_policy_flag5be6624d9c5a2f4e1a

Observed value: false
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

mail_policy_flag7a1d4ee117c5c386ea

Observed value: false
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

module_finding1d01e92dbbec833157

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: transparency
Method: Public transparency artefact inspection
Limitations: A file being present does not prove response speed or overall organizational maturity.

mail_exchanger2d12678a8e62eaa68e

Observed value: mail.musterpage.ch
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

openpgp_discovery61116653af8d8767b1

Observed value: {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: openpgp_discovery
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_findingc9d1e3eaa5fed2d4c2

Observed value: {"evidence":null,"severity":"medium"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: transparency
Method: Public transparency artefact inspection
Limitations: A file being present does not prove response speed or overall organizational maturity.

dependency_providerf25a4e757ca783af00

Observed value: {"critical":true,"hosts":["specter.mva-n.net"],"id":"host-143fdcca65ce","known":false,"name":"specter.mva-n.net","observation_count":1,"services":["unknown"],"tracker":false}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: dependencies
Method: Public HTML/resource dependency extraction and provider matching
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

csp_evidence4b6beeb350e1b3f14c

Observed value: {"enforced":false,"frame_ancestors":false,"hash_present":false,"nonce_present":false,"object_src":false,"report_only":false,"reporting_endpoint":false,"state":"not_observed","strict_dynamic":false,"trusted_types":false}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: csp_depth
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_findingbcf06a34311cc3c0d3

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

module_finding52ea24387f52c8f604

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

module_findingd43586b835495314ba

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

module_findingac1976cb5af02bf22e

Observed value: {"evidence":["ajax.googleapis.com","use.typekit.net"],"severity":"medium"}
Source: release_fallback
Date: 2026-10-09T20:55:23+00:00
Collector: supply_chain
Method: Public page resource and integrity-attribute inspection
Limitations: Missing SRI does not mean a resource is malicious, and static parsing may miss dynamic loads.

An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗

Dossier overview

Summary

General information

Documentary footprint

Estimated countries of observed IPs

Technologies and services

Key signals

Visible relationships

Retained evidence

Domain timeline

The domain, without assumptions

Domain registration

Estimated countries of observed IPs

Regulatory context to determine

Visible technologies and services

nginx

Bootstrap

Visible domain relationships

Signals, context and limitations

Visible provider dependencies

Effective data location cannot be determined

Origin hosting cannot be determined

Network reachability

DNS and email

Email trust

TLS transport

Security headers

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Transparency

Declared public content

Reviewed external references

Documents and references

security.txt

The domain timeline

Evidence, not a score

Evidence record