OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

pierokif.com

What is observed, how to verify it and what changed

6 public observations are documented in this dossier.

3 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 20:06 UTC First observation 2026-09-04 20:06 UTC Latest observation 2026-09-04 20:06 UTC
History JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not observable from outsideOrigin host
  • Not testedCanary detection
  • ObservedDepends on providerCloudflare

Infrastructure & transport

  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YE1
  • Not testedPost quantum tls

Mail & trust

  • ObservedSpf policyhardfail
  • ObservedDmarc policyreject

Dependencies & exposure

  • ObservedDepends on providerInfomaniak
  • Not observable from outsideData location
  • ObservedDepends on providerGoogle

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for pierokif.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 20:06 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
1
Changes
0
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns a4f223c41fd4be795a9eebc129e7766186ae2421affc53db68e499f2d3d0f637 
"grannbo.ns.cloudflare.com"
dns_address dns c185b8a3d5fa5a0ad2bebae07f7d4fb0e5b1bf8059341fa825490cebab0197d4 
"2606:4700:3034::6815:4049"
dns_address dns a363182b8a80aa076b95519d4fe537c9718e23d2a9d546a99a49fedb510fcbfc 
"2606:4700:3035::ac43:b274"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

17evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
17
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

module_finding resilience 05a5f3876aa3c6015d3e37d37055ae4d712e7334850d2fa275bc6d2aa2a3d260 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
dependency_provider dependencies 811382125ad73af7487df4d7879398593260721b4961e15dddbf38425d07947f 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies c3b236415d4204c48f21169c0ec7acbb2a3a274057ebc224657a4d1399ea6ce7 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns a4f223c41fd4be795a9eebc129e7766186ae2421affc53db68e499f2d3d0f637 
"grannbo.ns.cloudflare.com"
dependency_provider dependencies 47e520108dffbe9e096641870a4c1d3d96972a77a329dd91ec1c57cbfa191555 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
dns_address dns c185b8a3d5fa5a0ad2bebae07f7d4fb0e5b1bf8059341fa825490cebab0197d4 
"2606:4700:3034::6815:4049"
dns_address dns a363182b8a80aa076b95519d4fe537c9718e23d2a9d546a99a49fedb510fcbfc 
"2606:4700:3035::ac43:b274"
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
tls_valid_to tls baed3539170b5e49526ea4727e03a5a2e613161ce66a240ba4a08449fc617621 
"2026-10-20T17:25:13+00:00"
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 7566aa20549c8d9fad10c50abaaec8dffcf5efb47ad96c2567ddf95ea8b283a0 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers a3fa3df20f701a1d2fc1f98a73060f5d63ad9293124180144704bc3a6548a90a 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b185e038d2525112f368b37f74c6367ed9acdd45eac10f1b851c42f55cc02ab2 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 2ff79c7e80d9e527271dfdaec1ef56de7c96f97df7cfd0d640d928d155756631 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers d7baf97a6ec1b9081734513ba2ad997802831fe9b1ec57b5bd49c5f51abd8599 
{
    "evidence": null,
    "severity": "low"
}
tls_issuer tls 6e89b343553c5d07e73dcd6f01cd3d57a4fdbc84b5d537d2877d7524156d7c93 
"C = US, O = Let's Encrypt, CN = YE1"
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
mail_policy_flag mail_trust c12c69488c9f3400ae0d5c8c623d1937a605cad415bdb49f9e08aa20637f1eb4 
false
mail_policy_flag mail_trust e422a9ad1a1a0f48b07ec6d3d1596e6a678ee7467c85492d7c8640e97f771c5d 
false
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
spf_policy mail_trust ffa5f2c40086f7973c905217efc7383b4e46d771dca09787d20a703d030a5d18 
"hardfail"
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
mail_policy_flag mail_trust 5939330148c71e8aa9accfcee80f37c5230cafef79f943a1201e150d05d8ca15 
false
dmarc_policy mail_trust 1fc874253293c28946329c7e0938207cbe2cf6d8197b83cb9114ec8158610b31 
"reject"
module_finding mail_trust b0cb41e51d23e65dc546d674306d42a28724cb3cb92fac2eeac5d569def651d0 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns a4f223c41fd4be795a9eebc129e7766186ae2421affc53db68e499f2d3d0f637 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 13b6a78352a61d89df98718c9d815e7cc8bb8ae2a2975901dcf8daf7622d0af7 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding mail_trust 7c66e68c955c56aa0664e2c852e6ef07a8727a4b3cd7490aff602c9448ba3911 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns c185b8a3d5fa5a0ad2bebae07f7d4fb0e5b1bf8059341fa825490cebab0197d4 
"2606:4700:3034::6815:4049"
dns_address dns a363182b8a80aa076b95519d4fe537c9718e23d2a9d546a99a49fedb510fcbfc 
"2606:4700:3035::ac43:b274"
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
mail_policy_flag mail_trust c12c69488c9f3400ae0d5c8c623d1937a605cad415bdb49f9e08aa20637f1eb4 
false
mail_policy_flag mail_trust e422a9ad1a1a0f48b07ec6d3d1596e6a678ee7467c85492d7c8640e97f771c5d 
false
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
spf_policy mail_trust ffa5f2c40086f7973c905217efc7383b4e46d771dca09787d20a703d030a5d18 
"hardfail"
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
mail_policy_flag mail_trust 5939330148c71e8aa9accfcee80f37c5230cafef79f943a1201e150d05d8ca15 
false
dmarc_policy mail_trust 1fc874253293c28946329c7e0938207cbe2cf6d8197b83cb9114ec8158610b31 
"reject"
module_finding mail_trust b0cb41e51d23e65dc546d674306d42a28724cb3cb92fac2eeac5d569def651d0 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns a4f223c41fd4be795a9eebc129e7766186ae2421affc53db68e499f2d3d0f637 
"grannbo.ns.cloudflare.com"
module_finding mail_trust 13b6a78352a61d89df98718c9d815e7cc8bb8ae2a2975901dcf8daf7622d0af7 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding mail_trust 7c66e68c955c56aa0664e2c852e6ef07a8727a4b3cd7490aff602c9448ba3911 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns c185b8a3d5fa5a0ad2bebae07f7d4fb0e5b1bf8059341fa825490cebab0197d4 
"2606:4700:3034::6815:4049"
dns_address dns a363182b8a80aa076b95519d4fe537c9718e23d2a9d546a99a49fedb510fcbfc 
"2606:4700:3035::ac43:b274"
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

16evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
16
Signals
2
Changes
0
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
dependency_provider dependencies 811382125ad73af7487df4d7879398593260721b4961e15dddbf38425d07947f 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies c3b236415d4204c48f21169c0ec7acbb2a3a274057ebc224657a4d1399ea6ce7 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns a4f223c41fd4be795a9eebc129e7766186ae2421affc53db68e499f2d3d0f637 
"grannbo.ns.cloudflare.com"
dependency_provider dependencies 47e520108dffbe9e096641870a4c1d3d96972a77a329dd91ec1c57cbfa191555 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
dns_address dns c185b8a3d5fa5a0ad2bebae07f7d4fb0e5b1bf8059341fa825490cebab0197d4 
"2606:4700:3034::6815:4049"
dns_address dns a363182b8a80aa076b95519d4fe537c9718e23d2a9d546a99a49fedb510fcbfc 
"2606:4700:3035::ac43:b274"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

11evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
11
Signals
0
Changes
0
technology technology a963fb3b858f673d3dd8996f3c19a9c0abb9e7c6257b82f4ca8d5983c183c25b 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding headers 7566aa20549c8d9fad10c50abaaec8dffcf5efb47ad96c2567ddf95ea8b283a0 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers a3fa3df20f701a1d2fc1f98a73060f5d63ad9293124180144704bc3a6548a90a 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b185e038d2525112f368b37f74c6367ed9acdd45eac10f1b851c42f55cc02ab2 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 2ff79c7e80d9e527271dfdaec1ef56de7c96f97df7cfd0d640d928d155756631 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers d7baf97a6ec1b9081734513ba2ad997802831fe9b1ec57b5bd49c5f51abd8599 
{
    "evidence": null,
    "severity": "low"
}
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding resilience 05a5f3876aa3c6015d3e37d37055ae4d712e7334850d2fa275bc6d2aa2a3d260 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency d72291a1b05dae2cb0b8fb5521b8d19f548e6a7ae3c2061b1cfebde148414f49 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency c997e5748fe46d3d0f8fece01a73ab790519bb50041cdd3a46f4d39ba07f8913 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust b0cb41e51d23e65dc546d674306d42a28724cb3cb92fac2eeac5d569def651d0 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 7566aa20549c8d9fad10c50abaaec8dffcf5efb47ad96c2567ddf95ea8b283a0 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers a3fa3df20f701a1d2fc1f98a73060f5d63ad9293124180144704bc3a6548a90a 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b185e038d2525112f368b37f74c6367ed9acdd45eac10f1b851c42f55cc02ab2 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 2ff79c7e80d9e527271dfdaec1ef56de7c96f97df7cfd0d640d928d155756631 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust 13b6a78352a61d89df98718c9d815e7cc8bb8ae2a2975901dcf8daf7622d0af7 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding mail_trust 7c66e68c955c56aa0664e2c852e6ef07a8727a4b3cd7490aff602c9448ba3911 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers d7baf97a6ec1b9081734513ba2ad997802831fe9b1ec57b5bd49c5f51abd8599 
{
    "evidence": null,
    "severity": "low"
}
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
0
Changes
0
module_finding resilience 05a5f3876aa3c6015d3e37d37055ae4d712e7334850d2fa275bc6d2aa2a3d260 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency d72291a1b05dae2cb0b8fb5521b8d19f548e6a7ae3c2061b1cfebde148414f49 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency c997e5748fe46d3d0f8fece01a73ab790519bb50041cdd3a46f4d39ba07f8913 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust b0cb41e51d23e65dc546d674306d42a28724cb3cb92fac2eeac5d569def651d0 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 7566aa20549c8d9fad10c50abaaec8dffcf5efb47ad96c2567ddf95ea8b283a0 
{
    "evidence": null,
    "severity": "critical"
}
module_finding headers a3fa3df20f701a1d2fc1f98a73060f5d63ad9293124180144704bc3a6548a90a 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers b185e038d2525112f368b37f74c6367ed9acdd45eac10f1b851c42f55cc02ab2 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers 2ff79c7e80d9e527271dfdaec1ef56de7c96f97df7cfd0d640d928d155756631 
{
    "evidence": null,
    "severity": "medium"
}
module_finding dns 7565a5a95d8a8396d49cf46961077b91a7a3f5e9effa74e5cc33e9c7535f451a 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust 13b6a78352a61d89df98718c9d815e7cc8bb8ae2a2975901dcf8daf7622d0af7 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
module_finding mail_trust 7c66e68c955c56aa0664e2c852e6ef07a8727a4b3cd7490aff602c9448ba3911 
{
    "evidence": null,
    "severity": "low"
}
module_finding headers d7baf97a6ec1b9081734513ba2ad997802831fe9b1ec57b5bd49c5f51abd8599 
{
    "evidence": null,
    "severity": "low"
}
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

36evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
36
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

mail_policy_flag mail_trust c12c69488c9f3400ae0d5c8c623d1937a605cad415bdb49f9e08aa20637f1eb4 
false
module_finding resilience 05a5f3876aa3c6015d3e37d37055ae4d712e7334850d2fa275bc6d2aa2a3d260 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
mail_policy_flag mail_trust e422a9ad1a1a0f48b07ec6d3d1596e6a678ee7467c85492d7c8640e97f771c5d 
false
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
tls_valid_to tls baed3539170b5e49526ea4727e03a5a2e613161ce66a240ba4a08449fc617621 
"2026-10-20T17:25:13+00:00"
module_finding transparency d72291a1b05dae2cb0b8fb5521b8d19f548e6a7ae3c2061b1cfebde148414f49 
{
    "evidence": null,
    "severity": "medium"
}
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
spf_policy mail_trust ffa5f2c40086f7973c905217efc7383b4e46d771dca09787d20a703d030a5d18 
"hardfail"
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency c997e5748fe46d3d0f8fece01a73ab790519bb50041cdd3a46f4d39ba07f8913 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"
mail_policy_flag mail_trust 5939330148c71e8aa9accfcee80f37c5230cafef79f943a1201e150d05d8ca15 
false
dmarc_policy mail_trust 1fc874253293c28946329c7e0938207cbe2cf6d8197b83cb9114ec8158610b31 
"reject"
module_finding mail_trust b0cb41e51d23e65dc546d674306d42a28724cb3cb92fac2eeac5d569def651d0 
{
    "evidence": null,
    "severity": "low"
}
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

40evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
40
Signals
3
Changes
0
mail_policy_flag mail_trust c12c69488c9f3400ae0d5c8c623d1937a605cad415bdb49f9e08aa20637f1eb4 
false
module_finding resilience 05a5f3876aa3c6015d3e37d37055ae4d712e7334850d2fa275bc6d2aa2a3d260 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
technology technology a963fb3b858f673d3dd8996f3c19a9c0abb9e7c6257b82f4ca8d5983c183c25b 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
mail_policy_flag mail_trust e422a9ad1a1a0f48b07ec6d3d1596e6a678ee7467c85492d7c8640e97f771c5d 
false
mail_exchanger dns 212baa22268c0cf8abe61e3182e0f210877d332c8e8e4ba1909575641726e184 
"mta-gw.infomaniak.ch"
dependency_provider dependencies 811382125ad73af7487df4d7879398593260721b4961e15dddbf38425d07947f 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}
http_header headers d2baf743feb6cdeec086814b379c36d9fb36bc258ffd7f702413610038c9b5f4 
[
    "cloudflare"
]
module_finding dns 417ebd0e90bb0e5be5217bc6b4c97fa2f2e90d8993e88261a8bfa4e96ffb8ec2 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
module_finding headers 130845260d1b5f28045d42d1298ffe6ca6cc04a35f027571642a7ab59b5453c7 
{
    "evidence": null,
    "severity": "high"
}
spf_record dns 085ee960ab3ddad675fe0e4d8d5550ebbc2faaf100a1d40354deb099934a3d4e 
"v=spf1 include:spf.infomaniak.ch -all"
dependency_provider dependencies c3b236415d4204c48f21169c0ec7acbb2a3a274057ebc224657a4d1399ea6ce7 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
tls_valid_to tls baed3539170b5e49526ea4727e03a5a2e613161ce66a240ba4a08449fc617621 
"2026-10-20T17:25:13+00:00"
module_finding transparency d72291a1b05dae2cb0b8fb5521b8d19f548e6a7ae3c2061b1cfebde148414f49 
{
    "evidence": null,
    "severity": "medium"
}
dns_address dns 04159783be7a2407758c855196b0a64d42bce462126696128df32379e585545c 
"172.67.178.116"
module_finding dns c98f2dba0697c7dd2463370b0dca46d3068effb6bb4dda56cc12fc2e9c15db4f 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding headers acea05e4743039f938c5d7878b13932c245f13cc394d13ec623bd6160f502e4c 
{
    "evidence": null,
    "severity": "medium"
}
dmarc_record dns 1cf7e94b29b165d1045eaf55a546db8aa6538fb2a62f27a879b9cf8a1c247573 
"v=DMARC1; p=reject;"
module_finding headers ff82c33e0c55457c46a214a2e04f247591066e71346543edb9826426f0ebefbe 
{
    "evidence": null,
    "severity": "info"
}
module_finding sovereignty 19ec666f23279ff4550e535ef561b6259cdc319a395268f6d8cf716c5b584ae5 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}
spf_policy mail_trust ffa5f2c40086f7973c905217efc7383b4e46d771dca09787d20a703d030a5d18 
"hardfail"
dns_nameserver dns adccfbc7495881dbfecad86cbb06f19d98bf1eb443687c7d6082a0c58861fe71 
"quentin.ns.cloudflare.com"
module_finding headers 249641c3c19f4a3c564511788570f07d690bba1de8b679f422363e7385add39d 
{
    "evidence": null,
    "severity": "high"
}
module_finding transparency c997e5748fe46d3d0f8fece01a73ab790519bb50041cdd3a46f4d39ba07f8913 
{
    "evidence": null,
    "severity": "low"
}
dns_address dns 6474394e90b47b681bb51b713d61c4d4395b66ca767f3a161dc74a94ea3e3a05 
"104.21.64.73"

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain pierokif.com

DNS

2
DNS server Observed

grannbo.ns.cloudflare.com

DNS server Observed

quentin.ns.cloudflare.com

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

cloudflare

external resources

3
External provider or resource Observed

Google

External provider or resource Corroborated

Cloudflare

External provider or resource Observed

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

40 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

40evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#02 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#03 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "cloudflare", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#04 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#05 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX pierokif.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#06 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "fonts.googleapis.com" ], "id": "google", "known": true, "name": "Google", "observation_count": 1, "services": [ "analytics", "captcha", "fonts", "maps", "video" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "fonts.googleapis.com"
    ],
    "id": "google",
    "known": true,
    "name": "Google",
    "observation_count": 1,
    "services": [
        "analytics",
        "captcha",
        "fonts",
        "maps",
        "video"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#07 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "cloudflare" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "cloudflare"
]

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#08 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#09 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#10 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#11 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "mta-gw.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 1, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#12 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-10-20T17:25:13+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-10-20T17:25:13+00:00

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#13 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "medium" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#14 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
172.67.178.116
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A pierokif.com && dig AAAA pierokif.com
View raw data 
172.67.178.116

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#15 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#16 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#17 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#18 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "info" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#19 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Cloudflare", "Google" ], "severity": "high" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Cloudflare",
        "Google"
    ],
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#20 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT pierokif.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#21 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
quentin.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS pierokif.com
View raw data 
quentin.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#22 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "high" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#23 Public transparency endpoint

Evidence: module_finding

Public artefacts such as security.txt make some technical processes verifiable.

Passive Medium
Why it matters

A documented reporting channel supports responsible coordination when an issue is found.

What to check next

Check expiry, contact, Canonical, Policy, Encryption and any signature. Compare the file with previous scans.

Possible action

Publish a compliant security.txt only when a real handling channel exists, keep it current, and align contacts with the internal reporting process.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public transparency artefact inspection
Source
Public transparency endpoint
Reliability
Medium
What this supports
Describe published disclosure mechanisms
What this does not prove
A file being present does not prove response speed or overall organizational maturity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#24 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
104.21.64.73
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A pierokif.com && dig AAAA pierokif.com
View raw data 
104.21.64.73

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#25 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#26 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.pierokif.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#27 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#28 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "critical" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "critical"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#29 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#30 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#31 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "medium" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#32 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#33 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
grannbo.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS pierokif.com
View raw data 
grannbo.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#34 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "cloudflare.com", "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#35 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#36 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#37 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": null, "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#38 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YE1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect pierokif.com:443 -servername pierokif.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YE1

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#39 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3034::6815:4049
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A pierokif.com && dig AAAA pierokif.com
View raw data 
2606:4700:3034::6815:4049

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

#40 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3035::ac43:b274
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A pierokif.com && dig AAAA pierokif.com
View raw data 
2606:4700:3035::ac43:b274

Rule 2026.09.4 · 2026-09-04T20:06:06+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "fadfd868b95174548a306af9475b0d084e9d632ae7c19e92b935e4975ed811fd",
        "display_name": "pierokif.com",
        "slug": "pierokif-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "pierokif.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 40,
        "evidence_count": 40,
        "provider_count": 3,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}