PUBLIC DOSSIER / DATED OBSERVATION

scanapse.com

2026-09-05 22:47 UTC Scope completed

Compare Export PDF ↗New reading

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

4 public observations are documented in this dossier.

1 structuring public dependencies are visible.

No useful change is retained since the previous reading.

4 points still require confirmation or cannot be observed from outside.

Distinct evidence: 43
Retained signals: 4
Identified products: 2

General information

Domain name: scanapse.com
Reading state: Scope completed
Registered on: Not available
Registrar: Undetermined
Stated expiration: Not available
Registry outcome: Not collected in this observation

View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE

scanapse.com2026-09-05 22:47 UTC

Title not collected

Angles: 11/12
Evidence: 43
Signals: 4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Technologies and services

View all (2) →

ApacheTechnology clue ScanapseTechnology clue

Key signals

Inspect →

Critical function concentrationView

Each finding remains linked to its scope, evidence and limitations.

Visible relationships

Explore all →

scanapse.comInfomaniakdepends on provider

scanapse.comns12.infomaniak.chuses nameserver

scanapse.com185.125.27.195resolves to

scanapse.commta-gw.infomaniak.chuses mail exchanger

Retained evidence

Open the record →

2026-09-05 22:47 UTChttp_header 2026-09-05 22:47 UTCcanary_signal 2026-09-05 22:47 UTCmodule_finding 2026-09-05 22:47 UTCspf_policy

Domain timeline

View history →

2026-09-20 16:09 UTCRetained observation 2026-09-20 16:51 UTCRetained observation 2026-09-20 16:52 UTCRetained observation 2026-09-20 19:08 UTCRetained observation

Only retained observations are shown. No earlier event is reconstructed.

The twelve reading angles

Domain identityObserved InfrastructureReview needed Encryption and transportObserved Mail and trustReview needed DNS and governanceReview needed External dependenciesReview needed Observable technologiesObserved Public exposureObserved Documentary trustObserved Security signalsReview needed Evolution over timeUndetermined Evidence and traceabilityReview needed

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host: scanapse.com
Registry query domain: Not collected
Registered on: Not available
Registrar: Not available
Stated expiration: Not available
Collection outcome: Not collected in this observation

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

Apache

Technology fingerprint

HTTP Server header

2026-09-05 22:47 UTC

Rule and scope

Historical rule

Does not establish effective execution or a server technology that is not exposed.

Scanapse

Technology fingerprint

HTML generator metadata

2026-09-05 22:47 UTC

Rule and scope

Historical rule

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

scanapse.comInfomaniak

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

e3ec6aff0e2d6a8cf10e →b08fbd19a50126cf9c95 →e6b9d153a87d3c9388fe →

Retained structured value

{"id":"088e52ef6184e4724128819832c20c73bcd1eda01fdbf2da32168418bfd3ff5a","subject":"scanapse.com","predicate":"depends_on_provider","object":"Infomaniak","state":"corroborated","evidence_ids":["e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4","b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3","e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.comns12.infomaniak.ch

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

b08fbd19a50126cf9c95 →

Retained structured value

{"id":"238eb6ebd78fa0f1028731ba00094456d0ad4df27b4c0fab40b2f6a885f83b73","subject":"scanapse.com","predicate":"uses_nameserver","object":"ns12.infomaniak.ch","state":"observed","evidence_ids":["b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.com185.125.27.195

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

924ed9c22a9f2c0858ca →

Retained structured value

{"id":"571afbdc3e9c74e8ddaf72d04f212f34c03d277ce30168e27c74b8e02caabae2","subject":"scanapse.com","predicate":"resolves_to","object":"185.125.27.195","state":"observed","evidence_ids":["924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.commta-gw.infomaniak.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

23d09204c1928598be4a →

Retained structured value

{"id":"6317f90bc775ec55b368d17ad0488851ff64e9aaee6b60f66b7c98825f06bd12","subject":"scanapse.com","predicate":"uses_mail_exchanger","object":"mta-gw.infomaniak.ch","state":"observed","evidence_ids":["23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.com2001:1600::aaaa:0:0:80:5a

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

1e39a04d5a3aee5ca4e4 →

Retained structured value

{"id":"c1b42157e3b87410d3a287b09b83150f50c06fc4f236e38e41c96039a74ed7ee","subject":"scanapse.com","predicate":"resolves_to","object":"2001:1600::aaaa:0:0:80:5a","state":"observed","evidence_ids":["1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.comScanapse

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

127dc5baed27ae8f1c79 →

Retained structured value

{"id":"da7ef623014b7c76123bad5294fda050add9541858546a1af37c2c7735f21b1d","subject":"scanapse.com","predicate":"uses_technology","object":"Scanapse","state":"observed","evidence_ids":["127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.comns11.infomaniak.ch

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

e3ec6aff0e2d6a8cf10e →

Retained structured value

{"id":"eede05d6eebd34e2ac23bf81950210cd1fc62b3bac6c9d377da948d163a1b409","subject":"scanapse.com","predicate":"uses_nameserver","object":"ns11.infomaniak.ch","state":"observed","evidence_ids":["e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

scanapse.comApache

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

c07cc9bc85acb5ea3545 →

Retained structured value

{"id":"fa2544dd7cada52d5b7f118ad0080c0c83c21cdffee47197aa3eb4832c6e6ddc","subject":"scanapse.com","predicate":"uses_technology","object":"Apache","state":"observed","evidence_ids":["c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada"],"first_seen_at":"2026-09-05T22:47:56+00:00","last_seen_at":"2026-09-05T22:47:56+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓

All retained signals (4)

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["ns12.infomaniak.ch","ns11.infomaniak.ch"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

Single MX relay Only one mail relay was observed.

[{"host":"mta-gw.infomaniak.ch","priority":5}]

TLS transport

Security headers

HSTS limited to the host The HSTS rule does not explicitly cover subdomains.

max-age=63072000

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["ns12.infomaniak.ch","ns11.infomaniak.ch"]

Transparency

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title: Not collected
Description: Not collected
Declared structured-data types: Not documented

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

No enriched document in this observation. Historical evidence remains accessible below.

09 / TIME CHANGES THE READING

The domain timeline

Comparison with the previous stored reading.

2026-09-20 19:08 UTC
Retained observation
Open →Compare
2026-09-20 16:52 UTC
Retained observation
Open →Compare
2026-09-20 16:51 UTC
Retained observation
Open →Compare
2026-09-20 16:09 UTC
Retained observation
Open →Compare
2026-09-20 16:06 UTC
Retained observation
Open →Compare
2026-09-20 14:01 UTC
Retained observation
Open →Compare

Open dedicated history →

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Export evidence JSON Full JSON report Methodology

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Dmarc record : v=DMARC1; p=reject; / Observed : Technical finding : Signal importance : low

Dmarc record Observed

v=DMARC1; p=reject;

dns

Technical finding Observed

Signal importance : low

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

Dns nameserver Observed

ns12.infomaniak.ch

dns

Dns address Observed

2001:1600::aaaa:0:0:80:5a

dns

0190807f910062b1d8cf 0487e93a392d356f7489 1e39a04d5a3aee5ca4e4 23d09204c1928598be4a 264dbb2c5adda8c52861 924ed9c22a9f2c0858ca 95e394990f5d3b9926a5 b08fbd19a50126cf9c95 e3ec6aff0e2d6a8cf10e e9421e77731bd8811204

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Data location : Value not available / Undetermined : Origin host : Value not available

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Provider dependency Undetermined

Infomaniak

independent_provider_evidence_converges

Technical finding Observed

Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium

resilience

Dmarc record Observed

v=DMARC1; p=reject;

dns

Technical finding Observed

Signal importance : low

dns

0190807f910062b1d8cf 0487e93a392d356f7489 1e39a04d5a3aee5ca4e4 23d09204c1928598be4a 264dbb2c5adda8c52861 40e1e772246785260aa6 924ed9c22a9f2c0858ca 95e394990f5d3b9926a5 b08fbd19a50126cf9c95 e3ec6aff0e2d6a8cf10e e6b9d153a87d3c9388fe e9421e77731bd8811204

Encryption and transportObserved

How are public exchanges protected and presented?

Not tested : Post-quantum TLS negotiation : No measurement performed / Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YR1

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YR1

certificate_observed

Http header Observed

default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content

headers

Technical finding Observed

Evidence : max-age=63072000 ; Signal importance : low

headers

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YR1

tls

Http header Observed

same-origin

headers

0b6bc0f3645bd32fb0ad 1ee5515c70b8461cc39c 2e69bd55e0ed6664147c 40b56fe3bd50620d2467 82ec654d5f4b5ca7e876 8f6c3ba043069831b23e 92556c4f43fb1ff1c86b 9a641c3bf9ccf1bf618c a2fc4cc1b858e28a954d dea90928c3b67e932ea2 e7a93bc6f9bb672cd997 f1dc78e48edb80b7c63d fee19678db61552f5fc0

Mail and trustReview needed

Which mail protections and policies are publicly observable?

Observed : SPF policy : hardfail / Observed : DMARC policy : reject

SPF policy Observed

hardfail

mail_policy_observed

DMARC policy Observed

reject

mail_policy_observed

SPF policy Observed

hardfail

mail_trust

Mail policy flag Observed

mail_trust

Dmarc record Observed

v=DMARC1; p=reject;

dns

Technical finding Observed

Signal importance : low

dns

0190807f910062b1d8cf 0487e93a392d356f7489 08a532c8c1ca3a98ad8c 0cb1c128298f9ef945c1 1103842573f8a9470d2e 1e39a04d5a3aee5ca4e4 23d09204c1928598be4a 264dbb2c5adda8c52861 91dc0d842986c92186a0 924ed9c22a9f2c0858ca 95e394990f5d3b9926a5 a893249d8dfe4f684f33 b08fbd19a50126cf9c95 bd403401454b96fcdc6d e3ec6aff0e2d6a8cf10e e9421e77731bd8811204 efbdf55dc29b35213f82 fa41597cc0a4f62a4575

DNS and governanceReview needed

Which public DNS controls are visible and what remains undetermined?

Observed : SPF policy : hardfail / Observed : Mail policy flag : No

SPF policy Observed

hardfail

mail_trust

Mail policy flag Observed

mail_trust

Dmarc record Observed

v=DMARC1; p=reject;

dns

Technical finding Observed

Signal importance : low

dns

DMARC policy Observed

reject

mail_trust

Dns nameserver Observed

ns11.infomaniak.ch

dns

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Infomaniak / Observed : Dmarc record : v=DMARC1; p=reject;

Provider dependency Undetermined

Infomaniak

independent_provider_evidence_converges

Dmarc record Observed

v=DMARC1; p=reject;

dns

Technical finding Observed

Signal importance : low

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

Dependency provider Observed

Critical : Yes ; Hosts : mta-gw.infomaniak.ch ; ns11.infomaniak.ch ; ns12.infomaniak.ch ; Id : infomaniak ; Known : Yes ; Name : Infomaniak ; Observation count : 3 ; Services : dns ; hosting ; mail ; Tracker : No

dependencies

Technical finding Observed

Evidence : Reason : No external validating resolver is used; cryptographic validation is intentionally not inferred. ; Status : not_tested ; Signal importance : info

dns

0190807f910062b1d8cf 0487e93a392d356f7489 1e39a04d5a3aee5ca4e4 23d09204c1928598be4a 264dbb2c5adda8c52861 8b8b145600d8786b2618 924ed9c22a9f2c0858ca 95e394990f5d3b9926a5 b08fbd19a50126cf9c95 e3ec6aff0e2d6a8cf10e e6b9d153a87d3c9388fe e9421e77731bd8811204

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Http header : default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content / Observed : Technical finding : Evidence : max-age=63072000 ; Signal importance : low

Http header Observed

headers

Technical finding Observed

Evidence : max-age=63072000 ; Signal importance : low

headers

Http header Observed

same-origin

headers

Technology Observed

Name : Apache ; Version exposed : No

technology

Http header Observed

max-age=63072000

headers

Http header Observed

same-origin

headers

0b6bc0f3645bd32fb0ad 127dc5baed27ae8f1c79 1ee5515c70b8461cc39c 40b56fe3bd50620d2467 82ec654d5f4b5ca7e876 8f6c3ba043069831b23e 92556c4f43fb1ff1c86b a2fc4cc1b858e28a954d c07cc9bc85acb5ea3545 dea90928c3b67e932ea2 e7a93bc6f9bb672cd997 f1dc78e48edb80b7c63d fee19678db61552f5fc0

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Http header : default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content

Canary statement detected To confirm

no_known_passive_signature_observed

Http header Observed

headers

Technical finding Observed

Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium

resilience

Technical finding Observed

Evidence : max-age=63072000 ; Signal importance : low

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

0190807f910062b1d8cf 0487e93a392d356f7489 08a532c8c1ca3a98ad8c 0b6bc0f3645bd32fb0ad 1ee5515c70b8461cc39c 40b56fe3bd50620d2467 40e1e772246785260aa6 82ec654d5f4b5ca7e876 8b8b145600d8786b2618 8f6c3ba043069831b23e 92556c4f43fb1ff1c86b 95e394990f5d3b9926a5 a2fc4cc1b858e28a954d bd403401454b96fcdc6d dea90928c3b67e932ea2 e7a93bc6f9bb672cd997 f1dc78e48edb80b7c63d fa41597cc0a4f62a4575 fee19678db61552f5fc0

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Http header Observed

headers

Technical finding Observed

Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium

resilience

Technical finding Observed

Evidence : max-age=63072000 ; Signal importance : low

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

Technical finding Observed

Signal importance : low

mail_trust

0190807f910062b1d8cf 0487e93a392d356f7489 08a532c8c1ca3a98ad8c 0b6bc0f3645bd32fb0ad 1ee5515c70b8461cc39c 40b56fe3bd50620d2467 40e1e772246785260aa6 82ec654d5f4b5ca7e876 8f6c3ba043069831b23e 92556c4f43fb1ff1c86b 95e394990f5d3b9926a5 a2fc4cc1b858e28a954d bd403401454b96fcdc6d dea90928c3b67e932ea2 e7a93bc6f9bb672cd997 f1dc78e48edb80b7c63d fa41597cc0a4f62a4575 fee19678db61552f5fc0

Security signalsReview needed

Which protections or situations deserve particular attention?

Not tested : Post-quantum TLS negotiation : No measurement performed / To confirm : Canary statement detected : No

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Canary statement detected To confirm

no_known_passive_signature_observed

Http header Observed

headers

Technical finding Observed

Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium

resilience

SPF policy Observed

hardfail

mail_trust

Mail policy flag Observed

mail_trust

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Http header : default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content / Observed : Canary signal : Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed

Http header Observed

headers

Canary signal Observed

Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed

canary_passive

Technical finding Observed

Evidence : ns11.infomaniak.ch ; ns12.infomaniak.ch ; Signal importance : medium

resilience

SPF policy Observed

hardfail

mail_trust

Mail policy flag Observed

mail_trust

Technical finding Observed

Evidence : max-age=63072000 ; Signal importance : low

headers

0190807f910062b1d8cf 0487e93a392d356f7489 0683231285ac76cf23af 08a532c8c1ca3a98ad8c 0b6bc0f3645bd32fb0ad 0cb1c128298f9ef945c1 1103842573f8a9470d2e 127dc5baed27ae8f1c79 1e39a04d5a3aee5ca4e4 1e582816be3447103be3 1ee5515c70b8461cc39c 23d09204c1928598be4a 264dbb2c5adda8c52861 2e69bd55e0ed6664147c 40b56fe3bd50620d2467 40e1e772246785260aa6 495a36555c58f0c252f5 62db24a78514a3171023 6b4ce3abe2aae3c5ea8f 82ec654d5f4b5ca7e876 8b8b145600d8786b2618 8f6c3ba043069831b23e 91dc0d842986c92186a0 924ed9c22a9f2c0858ca 92556c4f43fb1ff1c86b 95e394990f5d3b9926a5 9a641c3bf9ccf1bf618c a2fc4cc1b858e28a954d a893249d8dfe4f684f33 b08fbd19a50126cf9c95 bd403401454b96fcdc6d c07cc9bc85acb5ea3545 c3e0ff64681e1d1cfc23 dea90928c3b67e932ea2 e3ec6aff0e2d6a8cf10e e6b9d153a87d3c9388fe e7a93bc6f9bb672cd997 e9191e8fd191bbca9ad3 e9421e77731bd8811204 efbdf55dc29b35213f82 f1dc78e48edb80b7c63d fa41597cc0a4f62a4575 fee19678db61552f5fc0

Evidence record

The filter changes the display. Exports retain all evidence.

http_header1ee5515c70b8461cc3

Observed value: ["default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"]
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

canary_signalc3e0ff64681e1d1cfc

Observed value: {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: canary_passive
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_finding40e1e772246785260a

Observed value: {"evidence":["ns11.infomaniak.ch","ns12.infomaniak.ch"],"severity":"medium"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: resilience
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

spf_policy91dc0d842986c92186

Observed value: hardfail
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

mail_policy_flagefbdf55dc29b35213f

Observed value: false
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

module_finding8f6c3ba043069831b2

Observed value: {"evidence":"max-age=63072000","severity":"low"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

tls_issuer9a641c3bf9ccf1bf61

Observed value: C = US, O = Let's Encrypt, CN = YR1
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: tls
Method: TLS handshake and public certificate inspection
Limitations: Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

http_header92556c4f43fb1ff1c8

Observed value: ["same-origin"]
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

technologyc07cc9bc85acb5ea35

Observed value: {"name":"Apache","version":"","version_exposed":false}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: technology
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

dmarc_recorde9421e77731bd88112

Observed value: v=DMARC1; p=reject;
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

module_finding95e394990f5d3b9926

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

dmarc_policya893249d8dfe4f684f

Observed value: reject
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

dns_nameservere3ec6aff0e2d6a8cf1

Observed value: ns11.infomaniak.ch
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

csp_evidence1e582816be3447103b

Observed value: {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":true,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":false,"trusted_types":false}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: csp_depth
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

mail_policy_flag0cb1c128298f9ef945

Observed value: false
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

dependency_providere6b9d153a87d3c9388

Observed value: {"critical":true,"hosts":["mta-gw.infomaniak.ch","ns11.infomaniak.ch","ns12.infomaniak.ch"],"id":"infomaniak","known":true,"name":"Infomaniak","observation_count":3,"services":["dns","hosting","mail"],"tracker":false}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: dependencies
Method: Public HTML/resource dependency extraction and provider matching
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_findingbd403401454b96fcdc

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

http_headere7a93bc6f9bb672cd9

Observed value: ["max-age=63072000"]
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

module_finding0487e93a392d356f74

Observed value: {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

tls_valid_to2e69bd55e0ed666414

Observed value: 2026-10-02T17:49:22+00:00
Source: release_fallback
Date: 2026-09-05T22:47:56+00:00
Collector: tls
Method: TLS handshake and public certificate inspection
Limitations: Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗

Dossier overview

Summary

General information

Documentary footprint

Estimated countries of observed IPs

Technologies and services

Key signals

Visible relationships

Retained evidence

Domain timeline

The domain, without assumptions

Domain registration

Estimated countries of observed IPs

Regulatory context to determine

Visible technologies and services

Apache

Scanapse

Visible domain relationships

Signals, context and limitations

Critical function concentration

Effective data location cannot be determined

Observed DMARC policy

Origin hosting cannot be determined

Visible provider dependencies

Network reachability

DNS and email

Email trust

TLS transport

Security headers

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Transparency

Declared public content

Reviewed external references

Documents and references

The domain timeline

Evidence, not a score

Evidence record