OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

roastmyurl.com

What is observed, how to verify it and what changed

5 public observations are documented in this dossier.

2 structuring public dependencies are visible.

No useful change is retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 19:28 UTC First observation 2026-09-04 19:28 UTC Latest observation 2026-09-04 19:28 UTC
History JSON Markdown

TIME

What changed over time

Initial reference point created today

0Appeared
0Modified
0Stable
0Disappeared

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not observable from outsideOrigin host
  • Not testedCanary detection
  • ObservedDepends on providerCloudflare

Infrastructure & transport

  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YE1
  • Not testedPost quantum tls

Mail & trust

  • ObservedDmarc policyreject
  • ObservedSpf policyhardfail

Dependencies & exposure

  • ObservedDepends on providerInfomaniak
  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for roastmyurl.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 19:28 UTC Engine 2.6.0.1

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Cloudflare is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented First observation

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
1
Changes
0
dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
spf_record dns 34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15 
"v=spf1 include:spf.infomaniak.ch -all"
dns_nameserver dns 414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3 
"quentin.ns.cloudflare.com"
dns_address dns 4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a 
"172.67.130.230"
dns_address dns 5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e 
"2606:4700:3036::6815:39a"
02
Documented First observation

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
module_finding resilience a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
dependency_provider dependencies f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dependency_provider dependencies d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
module_finding resilience 71ac8be680166513d07012c0ceddc011d01ebb5846949494dce08f2f1e45c4a7 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies ed39242653123ccd8bb2d1383b5933469d9710fde464e26d1566d20ad3b613be 
{
    "evidence": "75%",
    "severity": "medium"
}
spf_record dns 34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15 
"v=spf1 include:spf.infomaniak.ch -all"
dns_nameserver dns 414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3 
"quentin.ns.cloudflare.com"
dns_address dns 4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a 
"172.67.130.230"
dns_address dns 5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e 
"2606:4700:3036::6815:39a"
03
Partial First observation

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
tls_valid_to tls ae543adb5e87ab5a278e6c4d547973932dd64323cc08a0bd0f4e63496007e7ff 
"2026-11-25T04:35:23+00:00"
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
http_header headers c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4 
[
    "cloudflare"
]
http_header headers 927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d 
[
    "same-origin"
]
tls_issuer tls 706449136d2030fd061b134c5f0bc41bb16cbba704930ceeabfd78e686db42c9 
"C = US, O = Let's Encrypt, CN = YE1"
http_header headers e9c6d90ca55fd8918131c04853e1eae86b4b026f16f1b6eec4dc0f9c77458c7b 
[
    "DENY"
]
04
Documented First observation

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust 871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0 
"reject"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
spf_policy mail_trust 268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f 
"hardfail"
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust f1cf34ef794c96293ab72d2a313f1fef11df843381bfad16357f48222a1856c2 
false
spf_record dns 34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust 611d2a0748d1bfeb45912da1c298781a3e7fcd842cf5de1d10cfcd65196c03a6 
false
mail_policy_flag mail_trust fc5ebb40b22244dfe6776c95feee0e971cd57ee6cf040a177cdb3c09fd15f5a8 
false
module_finding mail_trust 27f2cd93056c00ec0920b0ffd43913197d194b5b4949c2c24a93f8aaabd8a75d 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3 
"quentin.ns.cloudflare.com"
dns_address dns 4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a 
"172.67.130.230"
dns_address dns 5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e 
"2606:4700:3036::6815:39a"
05
Documented First observation

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
2
Changes
0
dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust 871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0 
"reject"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
spf_policy mail_trust 268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f 
"hardfail"
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust f1cf34ef794c96293ab72d2a313f1fef11df843381bfad16357f48222a1856c2 
false
spf_record dns 34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15 
"v=spf1 include:spf.infomaniak.ch -all"
mail_policy_flag mail_trust 611d2a0748d1bfeb45912da1c298781a3e7fcd842cf5de1d10cfcd65196c03a6 
false
mail_policy_flag mail_trust fc5ebb40b22244dfe6776c95feee0e971cd57ee6cf040a177cdb3c09fd15f5a8 
false
module_finding mail_trust 27f2cd93056c00ec0920b0ffd43913197d194b5b4949c2c24a93f8aaabd8a75d 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_nameserver dns 414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3 
"quentin.ns.cloudflare.com"
dns_address dns 4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a 
"172.67.130.230"
dns_address dns 5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e 
"2606:4700:3036::6815:39a"
06
Documented First observation

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

17evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
17
Signals
2
Changes
0
dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
dependency_provider dependencies f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dependency_provider dependencies d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
cookie privacy 39e9afe9edc84cb0d44aac09dbfb1fa60792d99db2215cad315c07b2de3b35ad 
{
    "http_only": true,
    "name": "__Host-lang",
    "same_site": "lax",
    "secure": true
}
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies ed39242653123ccd8bb2d1383b5933469d9710fde464e26d1566d20ad3b613be 
{
    "evidence": "75%",
    "severity": "medium"
}
spf_record dns 34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15 
"v=spf1 include:spf.infomaniak.ch -all"
dns_nameserver dns 414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3 
"quentin.ns.cloudflare.com"
dns_address dns 4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a 
"172.67.130.230"
dns_address dns 5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e 
"2606:4700:3036::6815:39a"
07
Documented First observation

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

11evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
11
Signals
0
Changes
0
http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
technology technology 86d930d47c10d7884a2cb1ab7c15a1a7ae0ff93d2cb91fd69d77bded392fe33e 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
http_header headers c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4 
[
    "cloudflare"
]
http_header headers 927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d 
[
    "same-origin"
]
http_header headers e9c6d90ca55fd8918131c04853e1eae86b4b026f16f1b6eec4dc0f9c77458c7b 
[
    "DENY"
]
08
Partial First observation

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial First observation

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

21evidence
0changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
21
Signals
0
Changes
0

Unknowns and limitations

1 items still require qualification

module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding resilience a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
cookie privacy 39e9afe9edc84cb0d44aac09dbfb1fa60792d99db2215cad315c07b2de3b35ad 
{
    "http_only": true,
    "name": "__Host-lang",
    "same_site": "lax",
    "secure": true
}
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
http_header headers c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4 
[
    "cloudflare"
]
http_header headers 927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d 
[
    "same-origin"
]
module_finding resilience 71ac8be680166513d07012c0ceddc011d01ebb5846949494dce08f2f1e45c4a7 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies ed39242653123ccd8bb2d1383b5933469d9710fde464e26d1566d20ad3b613be 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding mail_trust 27f2cd93056c00ec0920b0ffd43913197d194b5b4949c2c24a93f8aaabd8a75d 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers e9c6d90ca55fd8918131c04853e1eae86b4b026f16f1b6eec4dc0f9c77458c7b 
[
    "DENY"
]
09
Documented First observation

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

20evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
20
Signals
0
Changes
0
module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding resilience a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
http_header headers c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4 
[
    "cloudflare"
]
http_header headers 927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d 
[
    "same-origin"
]
module_finding resilience 71ac8be680166513d07012c0ceddc011d01ebb5846949494dce08f2f1e45c4a7 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}
module_finding dns 1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a 
{
    "evidence": null,
    "severity": "low"
}
module_finding dependencies ed39242653123ccd8bb2d1383b5933469d9710fde464e26d1566d20ad3b613be 
{
    "evidence": "75%",
    "severity": "medium"
}
module_finding mail_trust 27f2cd93056c00ec0920b0ffd43913197d194b5b4949c2c24a93f8aaabd8a75d 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers e9c6d90ca55fd8918131c04853e1eae86b4b026f16f1b6eec4dc0f9c77458c7b 
[
    "DENY"
]
10
Documented First observation

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

37evidence
0changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
37
Signals
2
Changes
0

Unknowns and limitations

2 items still require qualification

dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust 871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0 
"reject"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls ae543adb5e87ab5a278e6c4d547973932dd64323cc08a0bd0f4e63496007e7ff 
"2026-11-25T04:35:23+00:00"
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
spf_policy mail_trust 268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f 
"hardfail"
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding resilience a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
cookie privacy 39e9afe9edc84cb0d44aac09dbfb1fa60792d99db2215cad315c07b2de3b35ad 
{
    "http_only": true,
    "name": "__Host-lang",
    "same_site": "lax",
    "secure": true
}
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"
http_header headers c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4 
[
    "cloudflare"
]
http_header headers 927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d 
[
    "same-origin"
]
mail_exchanger dns 071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55 
"mta-gw.infomaniak.ch"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
0
12
Documented First observation

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented First observation

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

40evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
40
Signals
3
Changes
0
dmarc_record dns 46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3 
"v=DMARC1; p=reject;"
dmarc_policy mail_trust 871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0 
"reject"
dns_address dns 5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf 
"104.21.3.154"
module_finding mail_trust 61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d 
[
    "no-referrer"
]
http_header headers d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738 
[
    "same-origin"
]
module_finding mail_trust 1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134 
{
    "evidence": null,
    "severity": "low"
}
tls_valid_to tls ae543adb5e87ab5a278e6c4d547973932dd64323cc08a0bd0f4e63496007e7ff 
"2026-11-25T04:35:23+00:00"
module_finding sovereignty 6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}
module_finding dns 03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
spf_policy mail_trust 268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f 
"hardfail"
http_header headers 4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce 
[
    "credentialless"
]
http_header headers ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]
technology technology 86d930d47c10d7884a2cb1ab7c15a1a7ae0ff93d2cb91fd69d77bded392fe33e 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}
http_header headers 15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]
http_header headers 6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728 
[
    "max-age=63072000; includeSubDomains; preload"
]
module_finding resilience a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}
http_header headers f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6 
[
    "nosniff"
]
dependency_provider dependencies f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dependency_provider dependencies d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}
cookie privacy 39e9afe9edc84cb0d44aac09dbfb1fa60792d99db2215cad315c07b2de3b35ad 
{
    "http_only": true,
    "name": "__Host-lang",
    "same_site": "lax",
    "secure": true
}
dns_nameserver dns 1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67 
"grannbo.ns.cloudflare.com"
module_finding dns d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}
dns_address dns 18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410 
"2606:4700:3033::ac43:82e6"

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain roastmyurl.com

DNS

2
DNS server Observed

quentin.ns.cloudflare.com

DNS server Observed

grannbo.ns.cloudflare.com

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

1
Observed technology Observed

cloudflare

external resources

2
External provider or resource Corroborated

Cloudflare

External provider or resource Observed

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

40 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

40evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#02 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.roastmyurl.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#03 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
104.21.3.154
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A roastmyurl.com && dig AAAA roastmyurl.com
View raw data 
104.21.3.154

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#04 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#05 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "no-referrer" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "no-referrer"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#06 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#07 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#08 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-11-25T04:35:23+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-11-25T04:35:23+00:00

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#09 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "Cloudflare" ], "severity": "high" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "Cloudflare"
    ],
    "severity": "high"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#10 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#11 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT roastmyurl.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#12 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "credentialless" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "credentialless"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#13 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#14 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "cloudflare", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "cloudflare",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#15 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#16 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=63072000; includeSubDomains; preload" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=63072000; includeSubDomains; preload"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#17 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#18 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "nosniff" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "nosniff"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#19 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": false, "hosts": [ "mta-gw.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 1, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": false,
    "hosts": [
        "mta-gw.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 1,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#20 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "cloudflare.com", "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 3, "services": [ "cdn", "security" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "cloudflare.com",
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "id": "cloudflare",
    "known": true,
    "name": "Cloudflare",
    "observation_count": 3,
    "services": [
        "cdn",
        "security"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#21 Observed public page

Evidence: cookie

Scanapse describes only privacy signals visible on the observed public journey.

Passive Medium
Why it matters

This separates what the browser actually encounters from what cannot be measured externally.

What to check next

Relate visible cookies and third parties to actual features, then compare those observations with internal documentation when the organisation has it.

Possible action

Remove unnecessary trackers or cookies and document the purposes of required elements. Any legal assessment must remain separate from the external scan.

Observation
{ "http_only": true, "name": "__Host-lang", "same_site": "lax", "secure": true }
Understand
Visible cookies and tracker signatures on the public response
Source
Observed public page
Reliability
Medium
What this supports
Describe visible privacy-related signals
What this does not prove
This observation is never a GDPR audit and does not reveal every purpose or internal processing activity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "http_only": true,
    "name": "__Host-lang",
    "same_site": "lax",
    "secure": true
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#22 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
grannbo.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS roastmyurl.com
View raw data 
grannbo.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#23 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "grannbo.ns.cloudflare.com", "quentin.ns.cloudflare.com" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "grannbo.ns.cloudflare.com",
        "quentin.ns.cloudflare.com"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#24 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3033::ac43:82e6
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A roastmyurl.com && dig AAAA roastmyurl.com
View raw data 
2606:4700:3033::ac43:82e6

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#25 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "cloudflare" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "cloudflare"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#26 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#27 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX roastmyurl.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#28 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": { "provider": "Cloudflare", "share": 75 }, "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "provider": "Cloudflare",
        "share": 75
    },
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#29 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#30 Observed public resources

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": "75%", "severity": "medium" }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "75%",
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#31 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#32 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#33 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#34 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YE1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect roastmyurl.com:443 -servername roastmyurl.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YE1

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#35 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#36 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#37 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "DENY" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "DENY"
]

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#38 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
quentin.ns.cloudflare.com
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS roastmyurl.com
View raw data 
quentin.ns.cloudflare.com

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#39 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
172.67.130.230
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A roastmyurl.com && dig AAAA roastmyurl.com
View raw data 
172.67.130.230

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

#40 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2606:4700:3036::6815:39a
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A roastmyurl.com && dig AAAA roastmyurl.com
View raw data 
2606:4700:3036::6815:39a

Rule 2026.09.4 · 2026-09-04T19:28:56+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "57d71c658dd291fb865193ff21b0f9110c9093c9e8ca483ac9d51dcbfb53a4d1",
        "display_name": "roastmyurl.com",
        "slug": "roastmyurl-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "roastmyurl.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": false,
        "change_counts": [],
        "observation_count": 40,
        "evidence_count": 40,
        "provider_count": 2,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}