PUBLIC DOSSIER / DATED OBSERVATION
Scope completed
Documented angles
Reading coverage, not a security grade.
4 public observations are documented in this dossier.
1 structuring public dependencies are visible.
8 useful changes are retained since the previous reading.
4 points still require confirmation or cannot be observed from outside.
Domain registration, not the website or company creation date.
Title not collected
Preview of the retained dossier, not a screenshot of the target.
View observed content →Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Each finding remains linked to its scope, evidence and limitations.
Only retained observations are shown. No earlier event is reconstructed.
02 / IDENTITY & CONTEXT
Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.
Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.
The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.
Applicability requires review; not a legal determination.
Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
The applicable jurisdiction requires additional public or organisational evidence.
03 / TECHNICAL CLUES
A resource or response header is a public clue, not a server inspection.
HTTP Server header
2026-09-05 07:18 UTC
Historical rule
Does not establish effective execution or a server technology that is not exposed.
HTML generator metadata
2026-09-05 07:18 UTC
Historical rule
Does not establish effective execution or a server technology that is not exposed.
04 / WHAT CONNECTS
Technical relationships, not ownership links or assumed partnerships.
depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"088e52ef6184e4724128819832c20c73bcd1eda01fdbf2da32168418bfd3ff5a","subject":"scanapse.com","predicate":"depends_on_provider","object":"Infomaniak","state":"corroborated","evidence_ids":["e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4","b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3","e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"238eb6ebd78fa0f1028731ba00094456d0ad4df27b4c0fab40b2f6a885f83b73","subject":"scanapse.com","predicate":"uses_nameserver","object":"ns12.infomaniak.ch","state":"observed","evidence_ids":["b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"571afbdc3e9c74e8ddaf72d04f212f34c03d277ce30168e27c74b8e02caabae2","subject":"scanapse.com","predicate":"resolves_to","object":"185.125.27.195","state":"observed","evidence_ids":["924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}uses mail exchanger
Recorded technical relationship, not a partnership or ownership link.
{"id":"6317f90bc775ec55b368d17ad0488851ff64e9aaee6b60f66b7c98825f06bd12","subject":"scanapse.com","predicate":"uses_mail_exchanger","object":"mta-gw.infomaniak.ch","state":"observed","evidence_ids":["23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"c1b42157e3b87410d3a287b09b83150f50c06fc4f236e38e41c96039a74ed7ee","subject":"scanapse.com","predicate":"resolves_to","object":"2001:1600::aaaa:0:0:80:5a","state":"observed","evidence_ids":["1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}uses technology
Recorded technical relationship, not a partnership or ownership link.
{"id":"da7ef623014b7c76123bad5294fda050add9541858546a1af37c2c7735f21b1d","subject":"scanapse.com","predicate":"uses_technology","object":"Scanapse","state":"observed","evidence_ids":["127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"eede05d6eebd34e2ac23bf81950210cd1fc62b3bac6c9d377da948d163a1b409","subject":"scanapse.com","predicate":"uses_nameserver","object":"ns11.infomaniak.ch","state":"observed","evidence_ids":["e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}uses technology
Recorded technical relationship, not a partnership or ownership link.
{"id":"fa2544dd7cada52d5b7f118ad0080c0c83c21cdffee47197aa3eb4832c6e6ddc","subject":"scanapse.com","predicate":"uses_technology","object":"Apache","state":"observed","evidence_ids":["c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada"],"first_seen_at":"2026-09-05T07:18:36+00:00","last_seen_at":"2026-09-05T07:18:36+00:00"}05 / POINTS TO EXAMINE
Infomaniak is associated with 3 critical function(s) or observations in the visible scope.
This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.
Inspect evidence ↓A provider headquarters, an IP address, or a CDN is not proof of data location.
This signal alone does not prove actual alignment for every mail flow.
Edge presence must not be treated as origin hosting.
Provider visibility does not describe contracts, subprocessors, or actual processing location.
Single DNS provider The name servers appear to belong to the same provider domain.
["ns12.infomaniak.ch","ns11.infomaniak.ch"]
CAA not published No authorized certificate authority is declared in DNS.
DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.
{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}TLS reporting not declared No TLS-RPT record was observed.
MTA-STS not declared The MTA-STS version DNS signal was not observed.
Single MX relay Only one mail relay was observed.
[{"host":"mta-gw.infomaniak.ch","priority":5}]HSTS limited to the host The HSTS rule does not explicitly cover subdomains.
max-age=63072000
Concentrated DNS All observed name servers appear to depend on the same operator domain.
["ns12.infomaniak.ch","ns11.infomaniak.ch"]
Full structured details remain in the JSON report. Missing information is not reconstructed.
06 / THE INSPECTED PAGE
The target’s JavaScript is not executed. A website declaration does not certify its identity.
07 / REVIEWED REFERENCES
Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.
No reviewed external reference recorded.
08 / PUBLIC RESOURCES
No enriched document in this observation. Historical evidence remains accessible below.
09 / TIME CHANGES THE READING
Comparison with the previous stored reading.
Retained observation
Retained observation
Retained observation
Retained observation
Retained observation
Retained observation
New
→ {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}
New
→ {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":true,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":false,"trusted_types":false}
New
→ {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}
New
→ {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
New
→ {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YR1","protocol":"","san_count":0,"state":"observed","valid_from":"2026-07-04T17:49:23+00:00","valid_to":"2026-10-02T17:49:22+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"","state":"not_observed"},"ipv4":{"addresses":["185.125.27.195"],"state":"observed"},"ipv6":{"addresses":["2001:1600::aaaa:0:0:80:5a"],"state":"observed"}}
Modified
{"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"} → {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
New
→ {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
New
→ {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
10 / KEEP THE READING VERIFIABLE
The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.
What is being observed and which public markers identify it?
Observed : Dmarc record : v=DMARC1; p=reject; / Observed : Technical finding : Signal importance : low
Dmarc record Observed
v=DMARC1; p=reject;
dns
Technical finding Observed
Signal importance : low
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Dns nameserver Observed
ns12.infomaniak.ch
dns
Dns address Observed
2001:1600::aaaa:0:0:80:5a
dns
Which public infrastructures appear to serve the service?
Undetermined : Data location : Value not available / Undetermined : Origin host : Value not available
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Provider dependency Undetermined
Infomaniak
independent_provider_evidence_converges
Technical finding Observed
Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
resilience
Dmarc record Observed
v=DMARC1; p=reject;
dns
Technical finding Observed
Signal importance : low
dns
How are public exchanges protected and presented?
Not tested : Post-quantum TLS negotiation : No measurement performed / Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YR1
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YR1
certificate_observed
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YR1
tls
Http header Observed
same-origin
headers
Http header Observed
default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-VcmMk5A5m0kdZfhP9Sx1Wsz-'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content
headers
Which mail protections and policies are publicly observable?
Observed : SPF policy : hardfail / Observed : DMARC policy : reject
SPF policy Observed
hardfail
mail_policy_observed
DMARC policy Observed
reject
mail_policy_observed
SPF policy Observed
hardfail
mail_trust
Mail policy flag Observed
No
mail_trust
Dmarc record Observed
v=DMARC1; p=reject;
dns
Technical finding Observed
Signal importance : low
dns
Which public DNS controls are visible and what remains undetermined?
Observed : SPF policy : hardfail / Observed : Mail policy flag : No
SPF policy Observed
hardfail
mail_trust
Mail policy flag Observed
No
mail_trust
Dmarc record Observed
v=DMARC1; p=reject;
dns
Technical finding Observed
Signal importance : low
dns
DMARC policy Observed
reject
mail_trust
Dns nameserver Observed
ns11.infomaniak.ch
dns
Which external domains, providers or resources does the site visibly depend on?
Undetermined : Provider dependency : Infomaniak / Observed : Dmarc record : v=DMARC1; p=reject;
Provider dependency Undetermined
Infomaniak
independent_provider_evidence_converges
Dmarc record Observed
v=DMARC1; p=reject;
dns
Technical finding Observed
Signal importance : low
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Dependency provider Observed
Critical : Yes ; Hosts : mta-gw.infomaniak.ch ; ns11.infomaniak.ch ; ns12.infomaniak.ch ; Id : infomaniak ; Known : Yes ; Name : Infomaniak ; Observation count : 3 ; Services : dns ; hosting ; mail ; Tracker : No
dependencies
Technical finding Observed
Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info
dns
Which technologies can reasonably be inferred from public traces?
Observed : Technical finding : Evidence : max-age=63072000 ; Signal importance : low / Observed : Http header : same-origin
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
Http header Observed
same-origin
headers
Technology Observed
Name : Apache ; Version exposed : No
technology
Http header Observed
default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-VcmMk5A5m0kdZfhP9Sx1Wsz-'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content
headers
Http header Observed
max-age=63072000
headers
Http header Observed
same-origin
headers
Which elements, endpoints or artefacts are publicly exposed?
To confirm : Canary statement detected : No / Observed : Technical finding : Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
Canary statement detected To confirm
No
no_known_passive_signature_observed
Technical finding Observed
Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
resilience
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
Http header Observed
same-origin
headers
Http header Observed
default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-VcmMk5A5m0kdZfhP9Sx1Wsz-'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content
headers
Technical finding Observed
Signal importance : low
dns
Which public documents and transparency mechanisms are present?
Observed : Technical finding : Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium / Observed : Technical finding : Evidence : max-age=63072000 ; Signal importance : low
Technical finding Observed
Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
resilience
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
Http header Observed
same-origin
headers
Http header Observed
default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-VcmMk5A5m0kdZfhP9Sx1Wsz-'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content
headers
Technical finding Observed
Signal importance : low
dns
Technical finding Observed
Signal importance : low
mail_trust
Which protections or situations deserve particular attention?
Not tested : Post-quantum TLS negotiation : No measurement performed / To confirm : Canary statement detected : No
Post-quantum TLS negotiation Not tested
No measurement performed
client_capability_unavailable
Canary statement detected To confirm
No
no_known_passive_signature_observed
Technical finding Observed
Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
resilience
SPF policy Observed
hardfail
mail_trust
Mail policy flag Observed
No
mail_trust
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Canary signal : Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed / Observed : Technical finding : Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
Canary signal Observed
Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed
canary_passive
Technical finding Observed
Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium
resilience
SPF policy Observed
hardfail
mail_trust
Mail policy flag Observed
No
mail_trust
Technical finding Observed
Evidence : max-age=63072000 ; Signal importance : low
headers
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YR1
tls
The filter changes the display. Exports retain all evidence.
6b4ce3abe2aae3c5ea62db24a78514a31710495a36555c58f0c252fa41597cc0a4f62a451103842573f8a9470d40b56fe3bd50620d24b08fbd19a50126cf9c08a532c8c1ca3a98ad82ec654d5f4b5ca7e8a2fc4cc1b858e28a958b8b145600d8786b261e39a04d5a3aee5ca4dea90928c3b67e932e127dc5baed27ae8f1cf1dc78e48edb80b7c6fee19678db61552f5f23d09204c1928598be0190807f910062b1d8e9191e8fd191bbca9a924ed9c22a9f2c0858Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.
Report an error or request clarification ↗