OBSERVE · CONNECT · UNDERSTAND
FR EN
Read a domain

PUBLIC DOMAIN DOSSIER

scanapse.com

What is observed, how to verify it and what changed

4 public observations are documented in this dossier.

1 structuring public dependencies are visible.

1 useful changes are retained since the previous reading.

2 points still require confirmation or cannot be observed from outside.

Measured 2026-09-04 13:29 UTC First observation 2026-09-04 12:30 UTC Latest observation 2026-09-04 13:29 UTC
History Compare JSON Markdown

TIME

What changed over time

Compared with the previous stored reading

0Appeared
1Modified
36Stable
0Disappeared
Modified

Http header

SHORT VIEW

Four readings before the detail

The 12 historical angles remain available below for deeper inspection.

Identity & governance

  • Not testedCanary detection
  • Not observable from outsideOrigin host
  • ObservedDepends on providerInfomaniak

Infrastructure & transport

  • Not testedPost quantum tls
  • ObservedTls issuerC = US, O = Let's Encrypt, CN = YR1

Mail & trust

  • ObservedSpf policyhardfail
  • ObservedDmarc policyreject

Dependencies & exposure

  • Not observable from outsideData location

Explanatory record

What Scanapse understands about this domain

Scanapse has enough material to describe 11 of 12 knowledge angles for scanapse.com. 4 questions remain open with the available public evidence.

Measured on 2026-09-04 13:29 UTC Engine 2.5.3

Read the domain folder

The key points for reading this domain folder

Four key points to understand what Scanapse observed, what can reasonably be retained, and what still needs verification.

Key points

Worth looking at today

Only a few items are shown when they add something genuinely useful to the reading.

DEPENDENCIES

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Territorial and legal context

Which legal context can reasonably be retained

Scanapse distinguishes established, probable and to-confirm jurisdiction and always explains which clues support the reading.

To confirm To confirm

Why this context appears

  • No sufficiently reliable public jurisdiction clue was found in the report

What this does not establish

  • Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
  • The applicable jurisdiction requires additional public or organisational evidence.

Regulatory frameworks

Useful texts for this context

References are selected from the observed context. Their presence explains potential relevance, never automatic compliance.

To confirmTo determine

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

This section provides documentary context. It is not legal advice, certification or a compliance verdict.

Trajectory

Useful changes since the previous reading

Only differences that help interpretation are highlighted. Stable or purely technical variations remain available in the evidence.

No significant change retained

The available comparison does not surface a change worth highlighting in the public reading.

12 knowledge angles

12 angles to understand the domain

Each angle explains what is known, why it matters, how to read it, its purpose and its limits.

01
Documented Change observed

Domain identity

Public evidence provides enough material to document this angle

Angle 01

Domain identity

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

10evidence
8changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
10
Signals
1
Changes
8
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_exchanger dns 23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802 
"mta-gw.infomaniak.ch"
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns 924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f 
"185.125.27.195"
spf_record dns 264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2 
"v=spf1 include:spf.infomaniak.ch -all"
02
Documented Change observed

Infrastructure

Public evidence provides enough material to document this angle

Angle 02

Infrastructure

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
8changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
2
Changes
8

Unknowns and limitations

2 items still require qualification

module_finding resilience 40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
dependency_provider dependencies e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_exchanger dns 23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802 
"mta-gw.infomaniak.ch"
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns 924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f 
"185.125.27.195"
spf_record dns 264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2 
"v=spf1 include:spf.infomaniak.ch -all"
03
Partial Change observed

Encryption and transport

This angle is only partially documented by public evidence

Angle 03

Encryption and transport

Partial Change observed

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
6changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
6

Unknowns and limitations

1 items still require qualification

module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
tls_issuer tls 9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2 
"C = US, O = Let's Encrypt, CN = YR1"
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
tls_valid_to tls 2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60 
"2026-10-02T17:49:22+00:00"
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]
http_header headers dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b 
[
    "no-referrer"
]
http_header headers f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc 
[
    "Apache"
]
http_header headers fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
]
http_header headers 0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217 
[
    "require-corp"
]
04
Documented Change observed

Mail and trust

Public evidence provides enough material to document this angle

Angle 04

Mail and trust

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
11changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
11
spf_policy mail_trust 91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c 
"hardfail"
mail_policy_flag mail_trust efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95 
false
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e 
"reject"
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431 
false
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55 
false
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_exchanger dns 23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802 
"mta-gw.infomaniak.ch"
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns 924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f 
"185.125.27.195"
spf_record dns 264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2 
"v=spf1 include:spf.infomaniak.ch -all"
05
Documented Change observed

DNS and governance

Public evidence provides enough material to document this angle

Angle 05

DNS and governance

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
8changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
2
Changes
8
spf_policy mail_trust 91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c 
"hardfail"
mail_policy_flag mail_trust efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95 
false
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e 
"reject"
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431 
false
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55 
false
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_exchanger dns 23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802 
"mta-gw.infomaniak.ch"
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns 924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f 
"185.125.27.195"
spf_record dns 264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2 
"v=spf1 include:spf.infomaniak.ch -all"
06
Documented Change observed

External dependencies

Public evidence provides enough material to document this angle

Angle 06

External dependencies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

12evidence
2changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
12
Signals
2
Changes
2
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
dependency_provider dependencies e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
cookie privacy 8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85 
{
    "http_only": true,
    "name": "scanapse_csrf",
    "same_site": "strict",
    "secure": true
}
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
mail_exchanger dns 23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802 
"mta-gw.infomaniak.ch"
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
dns_address dns 924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f 
"185.125.27.195"
spf_record dns 264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2 
"v=spf1 include:spf.infomaniak.ch -all"
07
Documented Change observed

Observable technologies

Public evidence provides enough material to document this angle

Angle 07

Observable technologies

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

13evidence
2changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
13
Signals
0
Changes
2
module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
technology technology c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]
http_header headers dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b 
[
    "no-referrer"
]
technology technology 127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd 
{
    "name": "Scanapse",
    "version": "",
    "version_exposed": false
}
http_header headers f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc 
[
    "Apache"
]
http_header headers fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
]
http_header headers 0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217 
[
    "require-corp"
]
08
Partial Change observed

Public exposure

This angle is only partially documented by public evidence

Angle 08

Public exposure

Partial Change observed

This angle is only partially documented by public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

19evidence
1changes
1open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
19
Signals
0
Changes
1

Unknowns and limitations

1 items still require qualification

module_finding resilience 40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]
cookie privacy 8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85 
{
    "http_only": true,
    "name": "scanapse_csrf",
    "same_site": "strict",
    "secure": true
}
http_header headers dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b 
[
    "no-referrer"
]
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc 
[
    "Apache"
]
http_header headers fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
]
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
http_header headers 0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217 
[
    "require-corp"
]
09
Documented Stable

Documentary trust

Public evidence provides enough material to document this angle

Angle 09

Documentary trust

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

18evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
18
Signals
0
Changes
0
module_finding resilience 40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]
http_header headers dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b 
[
    "no-referrer"
]
module_finding dns 00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}
http_header headers f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc 
[
    "Apache"
]
http_header headers fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
]
module_finding dns 0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}
http_header headers 0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217 
[
    "require-corp"
]
10
Documented Change observed

Security signals

Public evidence provides enough material to document this angle

Angle 10

Security signals

Documented Change observed

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

33evidence
20changes
2open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
33
Signals
2
Changes
20

Unknowns and limitations

2 items still require qualification

module_finding resilience 40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
spf_policy mail_trust 91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c 
"hardfail"
mail_policy_flag mail_trust efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95 
false
module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
tls_issuer tls 9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2 
"C = US, O = Let's Encrypt, CN = YR1"
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e 
"reject"
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431 
false
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
tls_valid_to tls 2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60 
"2026-10-02T17:49:22+00:00"
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55 
false
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]
cookie privacy 8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85 
{
    "http_only": true,
    "name": "scanapse_csrf",
    "same_site": "strict",
    "secure": true
}
dns_address dns 1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f 
"2001:1600::aaaa:0:0:80:5a"
11
To determine First observation

Evolution over time

This angle still needs additional public evidence

Angle 11

Evolution over time

To determine First observation

This angle still needs additional public evidence

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

0evidence
37changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
0
Signals
0
Changes
37
12
Documented Stable

Evidence and traceability

Public evidence provides enough material to document this angle

Angle 12

Evidence and traceability

Documented Stable

Public evidence provides enough material to document this angle

01

Why it matters

This angle matters because it helps turn isolated public signals into information that can support a decision.

02

How to read it

Scanapse relates public observations, evidence and changes while keeping facts separate from interpretation.

03

What it is for

Provide a usable reading for technical teams, decision-makers and governance roles without exposing unnecessary internal mechanics.

04

What it does not prove

Public evidence is limited to the observed scope and does not prove internal, contractual or unobserved properties.

Material available for this angle

36evidence
0changes
0open questions
Show technical details for this angle

This level supports auditability and reproducibility. It is not required to understand the main reading.

Mapping version
2.3.1
Evidence
36
Signals
3
Changes
0
module_finding resilience 40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}
spf_policy mail_trust 91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c 
"hardfail"
mail_policy_flag mail_trust efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95 
false
module_finding headers 8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}
tls_issuer tls 9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2 
"C = US, O = Let's Encrypt, CN = YR1"
http_header headers 92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174 
[
    "same-origin"
]
technology technology c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}
dmarc_record dns e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393 
"v=DMARC1; p=reject;"
module_finding dns 95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71 
{
    "evidence": null,
    "severity": "low"
}
dmarc_policy mail_trust a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e 
"reject"
dns_nameserver dns e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4 
"ns11.infomaniak.ch"
mail_policy_flag mail_trust 0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431 
false
dependency_provider dependencies e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}
module_finding mail_trust bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755 
{
    "evidence": null,
    "severity": "low"
}
http_header headers e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce 
[
    "max-age=63072000"
]
http_header headers 06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]
tls_valid_to tls 2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60 
"2026-10-02T17:49:22+00:00"
module_finding mail_trust fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f 
{
    "evidence": null,
    "severity": "low"
}
mail_policy_flag mail_trust 1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55 
false
http_header headers 40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52 
[
    "same-origin"
]
dns_nameserver dns b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3 
"ns12.infomaniak.ch"
module_finding mail_trust 08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}
http_header headers 82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09 
[
    "DENY"
]
http_header headers a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b 
[
    "nosniff"
]

Overview

What the domain already shows, and what still needs clarification

An overview of visible relationships and uncertainty areas that still need verification.

Visible relations

Visible relations around the domain

Relations are grouped by function. They describe what is publicly visible, not contracts or the full internal architecture.

Observed domain scanapse.com

DNS

2
DNS server Observed

ns12.infomaniak.ch

DNS server Observed

ns11.infomaniak.ch

mail

1
Mail server Observed

mta-gw.infomaniak.ch

technology

2
Observed technology Observed

Scanapse

Observed technology Observed

Apache

external resources

1
External provider or resource Corroborated

Infomaniak

Open questions

4 areas to confirm

An unknown becomes useful information when it precisely explains what is missing to reach a conclusion.

To confirm

Origin hosting

An edge service does not reveal the origin hosting provider.

To confirm

Effective data location

Public provider metadata does not prove where data is actually processed.

To confirm

Post-quantum TLS exchange

This check was not run with a compatible client during this measurement.

To confirm

Public canary signal

Detection of this signal was not enabled for this measurement.

These items do not mean there is a problem. They simply show that useful information is still missing.

Sources and evidence

Evidence supporting this reading

36 evidence items are available. They remain collapsed to preserve a short reading and can be explored on demand.

36evidence items available

Each proof keeps its method, provenance, date, reliability and interpretation limits.

Download evidence JSON
Explore evidence
#01 module_finding

Evidence: module_finding

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "medium" }
Understand
Public observation
Source
module_finding
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "medium"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#02 Mail-related public records

Evidence: spf_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
hardfail
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT scanapse.com
View raw data 
hardfail

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#03 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#04 Public HTTP response

Evidence: module_finding

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
{ "evidence": "max-age=63072000", "severity": "low" }
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": "max-age=63072000",
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#05 Public TLS endpoint

Evidence: tls_issuer

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
C = US, O = Let's Encrypt, CN = YR1
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

openssl s_client -connect scanapse.com:443 -servername scanapse.com </dev/null
View raw data 
C = US, O = Let's Encrypt, CN = YR1

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#06 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#07 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Apache", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Apache",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#08 DNS public records

Evidence: dmarc_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=DMARC1; p=reject;
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=DMARC1; p=reject;

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#09 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": null, "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#10 Mail-related public records

Evidence: dmarc_policy

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
reject
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig TXT _dmarc.scanapse.com
View raw data 
reject

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#11 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns11.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS scanapse.com
View raw data 
ns11.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#12 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#13 Observed public resources

Evidence: dependency_provider

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "critical": true, "hosts": [ "mta-gw.infomaniak.ch", "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "id": "infomaniak", "known": true, "name": "Infomaniak", "observation_count": 3, "services": [ "dns", "hosting", "mail" ], "tracker": false }
Understand
Public HTML/resource dependency extraction and provider matching
Source
Observed public resources
Reliability
Medium
What this supports
Describe visible third-party dependencies
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "critical": true,
    "hosts": [
        "mta-gw.infomaniak.ch",
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "id": "infomaniak",
    "known": true,
    "name": "Infomaniak",
    "observation_count": 3,
    "services": [
        "dns",
        "hosting",
        "mail"
    ],
    "tracker": false
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#14 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#15 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "max-age=63072000" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "max-age=63072000"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#16 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#17 Public TLS endpoint

Evidence: tls_valid_to

TLS protects the observed connection between the scanner and the public service.

Active non-intrusive High
Why it matters

These elements document public-channel protection and the cryptographic mechanisms actually negotiated.

What to check next

Compare negotiated protocol, issuer, expiry, chain and cryptographic parameters with history. Check other public entry points separately.

Possible action

Address only observed gaps such as an expiring certificate, invalid chain, or unwanted protocol. Test changes in a controlled environment before deployment.

Observation
2026-10-02T17:49:22+00:00
Understand
TLS handshake and public certificate inspection
Source
Public TLS endpoint
Reliability
High
What this supports
Describe the TLS session and certificate presented to Scanapse
What this does not prove
Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
2026-10-02T17:49:22+00:00

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#18 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": null, "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": null,
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#19 Mail-related public records

Evidence: mail_policy_flag

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#20 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "same-origin" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "same-origin"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#21 DNS public records

Evidence: dns_nameserver

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
ns12.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig NS scanapse.com
View raw data 
ns12.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#22 Mail-related public records

Evidence: module_finding

Public mail policies show how the domain frames sending, authentication and email transport.

Active non-intrusive High
Why it matters

These mechanisms can reduce domain spoofing and document mail-transport posture.

What to check next

Relate SPF, DKIM when a selector is known, DMARC, MX, MTA-STS and TLS-RPT. Compare policy changes over time.

Possible action

Before strengthening a policy, inventory legitimate mail flows and verify alignment. Roll out changes progressively to avoid blocking authorized senders.

Observation
{ "evidence": [ { "host": "mta-gw.infomaniak.ch", "priority": 5 } ], "severity": "low" }
Understand
Public DNS and policy endpoint inspection
Source
Mail-related public records
Reliability
High
What this supports
Describe published mail authentication and transport policies
What this does not prove
They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        {
            "host": "mta-gw.infomaniak.ch",
            "priority": 5
        }
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#23 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "DENY" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "DENY"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#24 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "nosniff" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "nosniff"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#25 Observed public page

Evidence: cookie

Scanapse describes only privacy signals visible on the observed public journey.

Passive Medium
Why it matters

This separates what the browser actually encounters from what cannot be measured externally.

What to check next

Relate visible cookies and third parties to actual features, then compare those observations with internal documentation when the organisation has it.

Possible action

Remove unnecessary trackers or cookies and document the purposes of required elements. Any legal assessment must remain separate from the external scan.

Observation
{ "http_only": true, "name": "scanapse_csrf", "same_site": "strict", "secure": true }
Understand
Visible cookies and tracker signatures on the public response
Source
Observed public page
Reliability
Medium
What this supports
Describe visible privacy-related signals
What this does not prove
This observation is never a GDPR audit and does not reveal every purpose or internal processing activity.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "http_only": true,
    "name": "scanapse_csrf",
    "same_site": "strict",
    "secure": true
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#26 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
2001:1600::aaaa:0:0:80:5a
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A scanapse.com && dig AAAA scanapse.com
View raw data 
2001:1600::aaaa:0:0:80:5a

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#27 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "no-referrer" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "no-referrer"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#28 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": { "reason": "No external validating resolver is used; DS validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": {
        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
        "status": "not_tested"
    },
    "severity": "info"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#29 technology

Evidence: technology

Scanapse shows visible providers and third-party services on which the public service depends.

Passive Medium
Why it matters

Concentration on one actor or many third parties can affect continuity and governance.

What to check next

Identify each provider role, functions concentrated on the same actor, and dependencies that appeared or disappeared since the previous scan.

Possible action

For a critical dependency, document owner, contract, reversibility, failover and rationale. Diversify only after analysing the actual need.

Observation
{ "name": "Scanapse", "version": "", "version_exposed": false }
Understand
Public observation
Source
technology
Reliability
Medium
What this supports
Describe the observed public artefact
What this does not prove
A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "name": "Scanapse",
    "version": "",
    "version_exposed": false
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#30 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "Apache" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "Apache"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#31 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#32 DNS public records

Evidence: mail_exchanger

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
mta-gw.infomaniak.ch
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig MX scanapse.com
View raw data 
mta-gw.infomaniak.ch

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#33 DNS public records

Evidence: module_finding

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
{ "evidence": [ "ns11.infomaniak.ch", "ns12.infomaniak.ch" ], "severity": "low" }
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
{
    "evidence": [
        "ns11.infomaniak.ch",
        "ns12.infomaniak.ch"
    ],
    "severity": "low"
}

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#34 DNS public records

Evidence: dns_address

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
185.125.27.195
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

Verify it yourself

This command reproduces the public observation without changing the target.

dig A scanapse.com && dig AAAA scanapse.com
View raw data 
185.125.27.195

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#35 DNS public records

Evidence: spf_record

DNS shows how a domain resolves and which public services are associated with it.

Passive High
Why it matters

Consistent, verifiable resolution reduces some spoofing risks and helps explain entity dependencies.

What to check next

Compare NS, A/AAAA, MX, CAA and the DNSSEC chain with previous measurements to identify delegation or operator changes.

Possible action

If a change is unexpected, verify registrar and DNS-provider configuration before modifying anything. Document the failover mechanisms that actually exist.

Observation
v=spf1 include:spf.infomaniak.ch -all
Understand
Standard DNS resolution and record parsing
Source
DNS public records
Reliability
High
What this supports
Describe public DNS data observed at scan time
What this does not prove
Public DNS does not prove physical server location, contracts, or global availability.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
v=spf1 include:spf.infomaniak.ch -all

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

#36 Public HTTP response

Evidence: http_header

HTTP headers can ask the browser to enforce specific protections.

Active non-intrusive High
Why it matters

They are visible, verifiable browser-side defensive layers.

What to check next

Read each full policy, identify permissive or contradictory directives, and compare responses across the main public routes.

Possible action

Harden policies progressively from actual application needs. Avoid copying generic templates without functional testing.

Observation
[ "require-corp" ]
Understand
HTTP response-header inspection
Source
Public HTTP response
Reliability
High
What this supports
Describe defensive policies declared on the observed response
What this does not prove
A header being present does not prove it is optimal or that the application has no vulnerabilities.

Standards and reference context

Regulatory references are contextual only. Scanapse does not determine whether a framework applies to the organization and does not issue an automatic compliance verdict.

View raw data 
[
    "require-corp"
]

Rule 2026.09.4 · 2026-09-04T13:29:57+00:00

Show technical details 
{
    "schema_version": "2.0",
    "engine_version": "2.5.3",
    "pattern_version": "2026.09.4",
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "entity": {
        "id": "2bea11b1a78ef694fe639c4e237907487d32191c6fc28be1f2b25c48a418ee39",
        "display_name": "scanapse.com",
        "slug": "scanapse-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "scanapse.com"
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    },
    "trajectory_summary": {
        "has_previous_scan": true,
        "change_counts": {
            "modified": 1,
            "stable": 36
        },
        "observation_count": 36,
        "evidence_count": 36,
        "provider_count": 1,
        "strategic_signal_count": 1,
        "top_signal_count": 1
    }
}