PUBLIC DOSSIER / DATED OBSERVATION

webpion.com

2026-09-06 01:57 UTC Scope completed

Compare Export PDF ↗New reading

Summary

11/ 12

Documented angles

Reading coverage, not a security grade.

4 public observations are documented in this dossier.

1 structuring public dependencies are visible.

9 useful changes are retained since the previous reading.

4 points still require confirmation or cannot be observed from outside.

Distinct evidence: 41
Retained signals: 4
Identified products: 1

General information

Domain name: webpion.com
Reading state: Scope completed
Registered on: Not available
Registrar: Undetermined
Stated expiration: Not available
Registry outcome: Not collected in this observation

View information and sources →

Domain registration, not the website or company creation date.

Documentary footprint

S / SCANAPSE

webpion.com2026-09-06 01:57 UTC

Title not collected

Angles: 11/12
Evidence: 41
Signals: 4

Preview of the retained dossier, not a screenshot of the target.

View observed content →

Estimated countries of observed IPs

View details →

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Technologies and services

View all (1) →

ApacheTechnology clue

Key signals

Inspect →

Critical function concentrationView

Each finding remains linked to its scope, evidence and limitations.

Visible relationships

Explore all →

webpion.comns12.infomaniak.chuses nameserver

webpion.comInfomaniakdepends on provider

webpion.com185.125.27.197resolves to

webpion.comApacheuses technology

Retained evidence

Open the record →

2026-09-06 01:57 UTCpost_quantum_tls 2026-09-06 01:57 UTCmail_policy_flag 2026-09-06 01:57 UTChttp_header 2026-09-06 01:57 UTCcanary_signal

Domain timeline

View history →

2026-09-04 19:30 UTCRetained observation 2026-09-06 01:57 UTCRetained observation

Only retained observations are shown. No earlier event is reconstructed.

The twelve reading angles

Domain identityObserved InfrastructureReview needed Encryption and transportObserved Mail and trustReview needed DNS and governanceReview needed External dependenciesReview needed Observable technologiesObserved Public exposureObserved Documentary trustObserved Security signalsReview needed Evolution over timeUndetermined Evidence and traceabilityReview needed

02 / IDENTITY & CONTEXT

The domain, without assumptions

Domain registration

Observed host: webpion.com
Registry query domain: Not collected
Registered on: Not available
Registrar: Not available
Stated expiration: Not available
Collection outcome: Not collected in this observation

Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.

Estimated countries of observed IPs

Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.

0 recorded IP address(es) / 0 country estimate(s) available

Country-level estimates do not locate an organisation or its stored data. Natural Earth

Context and documentary references

Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.

Regulatory context to determine

The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.

Applicability requires review; not a legal determination.

Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.

The applicable jurisdiction requires additional public or organisational evidence.

03 / TECHNICAL CLUES

Visible technologies and services

A resource or response header is a public clue, not a server inspection.

Apache

Technology fingerprint

HTTP Server header

2026-09-06 01:57 UTC

Rule and scope

Historical rule

Does not establish effective execution or a server technology that is not exposed.

04 / WHAT CONNECTS

Visible domain relationships

Technical relationships, not ownership links or assumed partnerships.

webpion.comns12.infomaniak.ch

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

f1e9cc92b93115635c46 →

Retained structured value

{"id":"1ed1270afb9a813ff927271109f538a3859cb717b192be40f5be76aac07b7312","subject":"webpion.com","predicate":"uses_nameserver","object":"ns12.infomaniak.ch","state":"observed","evidence_ids":["f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.comInfomaniak

depends on provider

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

b6e680444df523946c73 →f1e9cc92b93115635c46 →59146a487c9683d55f76 →

Retained structured value

{"id":"297fafe4664e84ea14aeb65354cc0a7c2475e1cbdaff524b4bb59efd44fb6b8d","subject":"webpion.com","predicate":"depends_on_provider","object":"Infomaniak","state":"corroborated","evidence_ids":["b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4","f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d","59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.com185.125.27.197

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

3551500de28f0e0d3079 →

Retained structured value

{"id":"39f004c59b40aebe47576be7cd1523989614914765b0e7216bdd016e0ddb812e","subject":"webpion.com","predicate":"resolves_to","object":"185.125.27.197","state":"observed","evidence_ids":["3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.comApache

uses technology

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

a49fa82350b21cf35f8c →

Retained structured value

{"id":"671024d8185ae0e90d25cf795e45b861c390ff0892288b8924313b198f1c70c1","subject":"webpion.com","predicate":"uses_technology","object":"Apache","state":"observed","evidence_ids":["a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.commta-gw.infomaniak.ch

uses mail exchanger

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

dbf70259cc34b8b8dd8b →

Retained structured value

{"id":"6c80561ca7dce0648bbf17af4d8ca0ec7f87c32d89437cb051fe8c4821ef3331","subject":"webpion.com","predicate":"uses_mail_exchanger","object":"mta-gw.infomaniak.ch","state":"observed","evidence_ids":["dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.com2001:1600::aaaa:0:0:80:5b

resolves to

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

c5f3a7ddf44b7fb5ede7 →

Retained structured value

{"id":"cac66792356959af1dfd23c1007802d3a348bfd472bc5dc175a0e939bddc26ce","subject":"webpion.com","predicate":"resolves_to","object":"2001:1600::aaaa:0:0:80:5b","state":"observed","evidence_ids":["c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

webpion.comns11.infomaniak.ch

uses nameserver

Why this connection?

Recorded technical relationship, not a partnership or ownership link.

b6e680444df523946c73 →

Retained structured value

{"id":"fefcf31f08bebdbd0e3f11f241f40ed250c8f762a9e45d297ae06629dbbd5204","subject":"webpion.com","predicate":"uses_nameserver","object":"ns11.infomaniak.ch","state":"observed","evidence_ids":["b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4"],"first_seen_at":"2026-09-06T01:57:48+00:00","last_seen_at":"2026-09-06T01:57:48+00:00"}

05 / POINTS TO EXAMINE

Signals, context and limitations

Critical function concentration

Infomaniak is associated with 3 critical function(s) or observations in the visible scope.

This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.

Inspect evidence ↓

All retained signals (4)

Observed DMARC policy

This signal alone does not prove actual alignment for every mail flow.

Effective data location cannot be determined

A provider headquarters, an IP address, or a CDN is not proof of data location.

Origin hosting cannot be determined

Edge presence must not be treated as origin hosting.

Visible provider dependencies

Provider visibility does not describe contracts, subprocessors, or actual processing location.

Retained technical findings and limitations

Network reachability

DNS and email

Single DNS provider The name servers appear to belong to the same provider domain.

["ns11.infomaniak.ch","ns12.infomaniak.ch"]

CAA not published No authorized certificate authority is declared in DNS.

DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.

{"status":"not_tested","reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred."}

Email trust

TLS reporting not declared No TLS-RPT record was observed.

MTA-STS not declared The MTA-STS version DNS signal was not observed.

Single MX relay Only one mail relay was observed.

[{"host":"mta-gw.infomaniak.ch","priority":5}]

TLS transport

Security headers

CSP allows unsafe-inline The policy permits inline execution or styling without cryptographic proof.

default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests

COEP missing Embedded resource isolation is not enabled.

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Concentrated DNS All observed name servers appear to depend on the same operator domain.

["ns11.infomaniak.ch","ns12.infomaniak.ch"]

Transparency

origin_host

data_location

Full structured details remain in the JSON report. Missing information is not reconstructed.

06 / THE INSPECTED PAGE

Declared public content

Observed title: Not collected
Description: Not collected
Declared structured-data types: Not documented

The target’s JavaScript is not executed. A website declaration does not certify its identity.

07 / REVIEWED REFERENCES

Reviewed external references

Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.

No reviewed external reference recorded.

08 / PUBLIC RESOURCES

Documents and references

No enriched document in this observation. Historical evidence remains accessible below.

09 / TIME CHANGES THE READING

The domain timeline

Comparison with the previous stored reading.

2026-09-06 01:57 UTC
Displayed reading
Open →
2026-09-04 19:30 UTC
Retained observation
Open →Compare

Open dedicated history →

New

Canary signal

→ {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}

New

Csp evidence

→ {"enforced":true,"frame_ancestors":true,"hash_present":false,"nonce_present":true,"object_src":true,"report_only":false,"reporting_endpoint":false,"state":"observed","strict_dynamic":false,"trusted_types":false}

New

Dnssec evidence

→ {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}

New

Mail transport evidence

→ {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}

New

Modern transport evidence

→ {"alpn":{"state":"untested","value":""},"certificate":{"cipher":"","issuer":"C = US, O = Let's Encrypt, CN = YR2","protocol":"","san_count":0,"state":"observed","valid_from":"2026-08-29T21:40:46+00:00","valid_to":"2026-11-27T21:40:45+00:00"},"http2":{"negotiated":"3","state":"untested"},"http3_advertised":{"alt_svc":"","state":"not_observed"},"ipv4":{"addresses":["185.125.27.197"],"state":"observed"},"ipv6":{"addresses":["2001:1600::aaaa:0:0:80:5b"],"state":"observed"}}

Modified

Module finding

{"evidence":{"reason":"No external validating resolver is used; DS validation is intentionally not inferred.","status":"not_tested"},"severity":"info"} → {"evidence":{"reason":"No external validating resolver is used; cryptographic validation is intentionally not inferred.","status":"not_tested"},"severity":"info"}

Modified

Module finding

{"evidence":"default-src 'none'; script-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; script-src-attr 'none'; style-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests","severity":"high"} → {"evidence":"default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests","severity":"high"}

New

Openpgp discovery

→ {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}

New

Post quantum tls

→ {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}

10 / KEEP THE READING VERIFIABLE

Evidence, not a score

The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.

Export evidence JSON Full JSON report Methodology

Domain identityObserved

What is being observed and which public markers identify it?

Observed : Dns address : 2001:1600::aaaa:0:0:80:5b / Observed : Dmarc record : v=DMARC1; p=reject;

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Dmarc record Observed

v=DMARC1; p=reject;

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

Dns nameserver Observed

ns12.infomaniak.ch

dns

Technical finding Observed

Signal importance : low

dns

Dns address Observed

185.125.27.197

dns

2ec2f8803eb2a029a41c 3551500de28f0e0d3079 48c15a422df5cff16491 541d6057648e0ce17292 b6e680444df523946c73 c5f3a7ddf44b7fb5ede7 d5c05bb364c59c937923 dbf70259cc34b8b8dd8b e4ee4bce749cdabbc5c3 f1e9cc92b93115635c46

InfrastructureReview needed

Which public infrastructures appear to serve the service?

Undetermined : Data location : Value not available / Undetermined : Provider dependency : Infomaniak

Data location Undetermined

Value not available

provider_metadata_does_not_prove_processing_location

Provider dependency Undetermined

Infomaniak

independent_provider_evidence_converges

Origin host Undetermined

Value not available

public_edge_does_not_reveal_origin

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Dmarc record Observed

v=DMARC1; p=reject;

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

2ec2f8803eb2a029a41c 3551500de28f0e0d3079 48c15a422df5cff16491 541d6057648e0ce17292 59146a487c9683d55f76 b6e680444df523946c73 c5f3a7ddf44b7fb5ede7 d13cc8dfd1b0b83a3330 d5c05bb364c59c937923 dbf70259cc34b8b8dd8b e4ee4bce749cdabbc5c3 f1e9cc92b93115635c46

Encryption and transportObserved

How are public exchanges protected and presented?

Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YR2 / Not tested : Post-quantum TLS negotiation : No measurement performed

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YR2

certificate_observed

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Http header Observed

default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

Evidence : default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests ; Signal importance : high

headers

Tls issuer Observed

C = US, O = Let's Encrypt, CN = YR2

tls

0db156dd3991cb14f1a8 114a667186a1976cabc1 1e3428f4b98c7587d53b 2e9f6fdc56f5c8d5f14b 375cb07cf515fa96bc82 4ae531f63461053f6b15 614b86f2e6875ec42cad 6d8bba61446461a70253 a34f66d98f036c401521 a59cddd01fa574d07913 aaef4152b05d64093edd d2aec703bf8dcce76e5a e50e69c5cae91ab7b111

Mail and trustReview needed

Which mail protections and policies are publicly observable?

Observed : DMARC policy : reject / Observed : SPF policy : hardfail

DMARC policy Observed

reject

mail_policy_observed

SPF policy Observed

hardfail

mail_policy_observed

Mail policy flag Observed

mail_trust

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Dmarc record Observed

v=DMARC1; p=reject;

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

167f5d1ae37bd9e0b89f 2ec2f8803eb2a029a41c 3551500de28f0e0d3079 3bf12834d9f5b91cab01 48c15a422df5cff16491 541d6057648e0ce17292 66abf6ee82fac24f766f 6ce4d7186dbf26c9eb9a 8975f5da10b317f8db03 afbb1eb86dacd0e72b5d b6e680444df523946c73 c5f3a7ddf44b7fb5ede7 c93371b477c71ebe7de8 d5c05bb364c59c937923 dbf70259cc34b8b8dd8b e137d9d8dbed4013f4e1 e4ee4bce749cdabbc5c3 f1e9cc92b93115635c46

DNS and governanceReview needed

Which public DNS controls are visible and what remains undetermined?

Observed : Mail policy flag : No / Observed : Dns address : 2001:1600::aaaa:0:0:80:5b

Mail policy flag Observed

mail_trust

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Dmarc record Observed

v=DMARC1; p=reject;

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

Dns nameserver Observed

ns12.infomaniak.ch

dns

SPF policy Observed

hardfail

mail_trust

External dependenciesReview needed

Which external domains, providers or resources does the site visibly depend on?

Undetermined : Provider dependency : Infomaniak / Observed : Dns address : 2001:1600::aaaa:0:0:80:5b

Provider dependency Undetermined

Infomaniak

independent_provider_evidence_converges

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Dmarc record Observed

v=DMARC1; p=reject;

dns

Dns nameserver Observed

ns11.infomaniak.ch

dns

Dns nameserver Observed

ns12.infomaniak.ch

dns

Technical finding Observed

Signal importance : low

dns

2ec2f8803eb2a029a41c 3551500de28f0e0d3079 48c15a422df5cff16491 541d6057648e0ce17292 59146a487c9683d55f76 b6e680444df523946c73 c5f3a7ddf44b7fb5ede7 d5c05bb364c59c937923 dbf70259cc34b8b8dd8b e4ee4bce749cdabbc5c3 f1e9cc92b93115635c46

Observable technologiesObserved

Which technologies can reasonably be inferred from public traces?

Observed : Http header : default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests / Observed : Technical finding : Signal importance : info

Http header Observed

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

headers

Http header Observed

same-origin

headers

Http header Observed

accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()

headers

Http header Observed

Apache

headers

0db156dd3991cb14f1a8 114a667186a1976cabc1 2e9f6fdc56f5c8d5f14b 375cb07cf515fa96bc82 4ae531f63461053f6b15 614b86f2e6875ec42cad 6d8bba61446461a70253 a34f66d98f036c401521 a49fa82350b21cf35f8c a59cddd01fa574d07913 aaef4152b05d64093edd e50e69c5cae91ab7b111

Public exposureObserved

Which elements, endpoints or artefacts are publicly exposed?

To confirm : Canary statement detected : No / Observed : Http header : default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests

Canary statement detected To confirm

no_known_passive_signature_observed

Http header Observed

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

0db156dd3991cb14f1a8 114a667186a1976cabc1 167f5d1ae37bd9e0b89f 2e9f6fdc56f5c8d5f14b 375cb07cf515fa96bc82 48c15a422df5cff16491 4ae531f63461053f6b15 614b86f2e6875ec42cad 66abf6ee82fac24f766f 6d8bba61446461a70253 a34f66d98f036c401521 a59cddd01fa574d07913 aaef4152b05d64093edd d13cc8dfd1b0b83a3330 d5c05bb364c59c937923 e137d9d8dbed4013f4e1 e4ee4bce749cdabbc5c3 e50e69c5cae91ab7b111

Documentary trustObserved

Which public documents and transparency mechanisms are present?

Http header Observed

headers

Technical finding Observed

Signal importance : info

headers

Technical finding Observed

headers

Http header Observed

same-origin

headers

Technical finding Observed

Signal importance : low

dns

Http header Observed

headers

Security signalsReview needed

Which protections or situations deserve particular attention?

Not tested : Post-quantum TLS negotiation : No measurement performed / To confirm : Canary statement detected : No

Post-quantum TLS negotiation Not tested

No measurement performed

client_capability_unavailable

Canary statement detected To confirm

no_known_passive_signature_observed

Mail policy flag Observed

mail_trust

Http header Observed

headers

Technical finding Observed

Signal importance : info

headers

Dns address Observed

2001:1600::aaaa:0:0:80:5b

dns

Evolution over timeUndetermined

What appeared, disappeared, changed or remained stable since earlier scans?

The available evidence does not yet describe this pillar

Evidence and traceabilityReview needed

Which evidence, methods, dates and limitations support the displayed conclusions?

Observed : Post-quantum TLS negotiation : Capability : Capable : No ; Reason : proc_open_unavailable ; Reason : client_capability_unavailable ; State : untested / Observed : Mail policy flag : No

Post-quantum TLS negotiation Observed

Capability : Capable : No ; Reason : proc_open_unavailable ; Reason : client_capability_unavailable ; State : untested

pq_tls_probe

Mail policy flag Observed

mail_trust

Http header Observed

headers

Canary signal Observed

Reason : no_known_passive_signature_observed ; Signature version : 2026.09.1 ; State : not_observed

canary_passive

Technical finding Observed

Signal importance : info

headers

Dnssec evidence Observed

Chain consistency : Reason : insufficient_record_evidence ; State : untested ; Dnskey : Query supported : No ; State : untested ; Ds : Query supported : No ; State : untested ; Validation : Reason : no_validating_resolver ; State : untested

dnssec_depth

Evidence record

The filter changes the display. Exports retain all evidence.

post_quantum_tlsa0918d1e0b9fe99a95

Observed value: {"capability":{"capable":false,"groups":[],"reason":"proc_open_unavailable"},"group":null,"reason":"client_capability_unavailable","state":"untested"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: pq_tls_probe
Method: Public observation
Limitations: A positive result does not make a site “post-quantum”, and a negative result does not prove no other client could negotiate it.

mail_policy_flag3bf12834d9f5b91cab

Observed value: false
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

http_header0db156dd3991cb14f1

Observed value: ["default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"]
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

canary_signalc414b54b1e5345f96b

Observed value: {"matches":[],"reason":"no_known_passive_signature_observed","signature_version":"2026.09.1","state":"not_observed"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: canary_passive
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_finding6d8bba61446461a702

Observed value: {"evidence":null,"severity":"info"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

dnssec_evidence318e87ad28136a08b8

Observed value: {"chain_consistency":{"reason":"insufficient_record_evidence","state":"untested"},"dnskey":{"query_supported":false,"records":[],"state":"untested"},"ds":{"query_supported":false,"records":[],"state":"untested"},"validation":{"reason":"no_validating_resolver","state":"untested"}}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dnssec_depth
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

dns_addressc5f3a7ddf44b7fb5ed

Observed value: 2001:1600::aaaa:0:0:80:5b
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

dmarc_record2ec2f8803eb2a029a4

Observed value: v=DMARC1; p=reject;
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

module_finding4ae531f63461053f6b

Observed value: {"evidence":"default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests","severity":"high"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

dns_nameserverb6e680444df523946c

Observed value: ns11.infomaniak.ch
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

dns_nameserverf1e9cc92b93115635c

Observed value: ns12.infomaniak.ch
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

tls_issuer1e3428f4b98c7587d5

Observed value: C = US, O = Let's Encrypt, CN = YR2
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: tls
Method: TLS handshake and public certificate inspection
Limitations: Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

spf_policy6ce4d7186dbf26c9eb

Observed value: hardfail
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

openpgp_discoverycf44695149359b3247

Observed value: {"dns_openpgpkey":{"reason":"recipient_identity_required","state":"untested"},"fingerprint":null,"mechanisms":[],"reason":"security_txt_encryption_not_observed","state":"not_observed","wkd":{"reason":"wkd_not_fetched_without_identity","state":"untested"}}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: openpgp_discovery
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

http_header2e9f6fdc56f5c8d5f1

Observed value: ["same-origin"]
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

tls_valid_tod2aec703bf8dcce76e

Observed value: 2026-11-27T21:40:45+00:00
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: tls
Method: TLS handshake and public certificate inspection
Limitations: Strong TLS does not prove application security or origin-server security behind a CDN or reverse proxy.

module_findinge4ee4bce749cdabbc5

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: dns
Method: Standard DNS resolution and record parsing
Limitations: Public DNS does not prove physical server location, contracts, or global availability.

http_header375cb07cf515fa96bc

Observed value: ["accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"]
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: headers
Method: HTTP response-header inspection
Limitations: A header being present does not prove it is optimal or that the application has no vulnerabilities.

mail_transport_evidence87851603350dfa7478

Observed value: {"bimi":{"records":[],"state":"not_observed"},"dane_tlsa":{"query_supported":false,"reason":"tlsa_query_not_available","records":[],"state":"untested"},"dkim":{"reason":"no_selector_bruteforce","state":"untested"},"mta_sts":{"policy":null,"policy_state":"untested","records":[],"state":"not_observed"},"tls_rpt":{"records":[],"state":"not_observed"}}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: mail_transport
Method: Public observation
Limitations: A visible dependency does not prove data location, actual contractual jurisdiction, or hidden subcontractors.

module_finding66abf6ee82fac24f76

Observed value: {"evidence":null,"severity":"low"}
Source: release_fallback
Date: 2026-09-06T01:57:48+00:00
Collector: mail_trust
Method: Public DNS and policy endpoint inspection
Limitations: They do not prove actual deliverability, every recipient’s behavior, or the absence of phishing.

An explainable reading, not artificial certainty.

Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.

Report an error or request clarification ↗

Dossier overview

Summary

General information

Documentary footprint

Estimated countries of observed IPs

Technologies and services

Key signals

Visible relationships

Retained evidence

Domain timeline

The domain, without assumptions

Domain registration

Estimated countries of observed IPs

Regulatory context to determine

Visible technologies and services

Apache

Visible domain relationships

Signals, context and limitations

Critical function concentration

Observed DMARC policy

Effective data location cannot be determined

Origin hosting cannot be determined

Visible provider dependencies

Network reachability

DNS and email

Email trust

TLS transport

Security headers

Third-party resource control

Dependencies

Privacy

Technology footprint

Estimated sovereignty

Resilience

Transparency

Declared public content

Reviewed external references

Documents and references

The domain timeline

Canary signal

Csp evidence

Dnssec evidence

Mail transport evidence

Modern transport evidence

Module finding

Module finding

Openpgp discovery

Post quantum tls

Evidence, not a score

Evidence record