PUBLIC DOSSIER / DATED OBSERVATION
Scope completed
Documented angles
Reading coverage, not a security grade.
4 public observations are documented in this dossier.
1 structuring public dependencies are visible.
No useful change is retained since the previous reading.
2 points still require confirmation or cannot be observed from outside.
Domain registration, not the website or company creation date.
Title not collected
Preview of the retained dossier, not a screenshot of the target.
View observed content →Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Each finding remains linked to its scope, evidence and limitations.
Only retained observations are shown. No earlier event is reconstructed.
02 / IDENTITY & CONTEXT
Registration is neither the founding of a company nor the first launch of a website. Personal contact details are not reproduced.
Geography was not collected in this snapshot. A new analysis is required after the service has been enabled.
0 recorded IP address(es) / 0 country estimate(s) available
Country-level estimates do not locate an organisation or its stored data. Natural Earth
Estimated IP countries and a provider’s context do not establish applicable jurisdiction or compliance.
The available public evidence does not establish a sufficiently reliable jurisdiction for automatic legal contextualisation.
Applicability requires review; not a legal determination.
Technical hosting, IP addresses, ASNs and CDN locations do not establish the applicable legal jurisdiction by themselves.
The applicable jurisdiction requires additional public or organisational evidence.
03 / TECHNICAL CLUES
A resource or response header is a public clue, not a server inspection.
HTTP Server header
2026-09-04 19:30 UTC
Historical rule
Does not establish effective execution or a server technology that is not exposed.
04 / WHAT CONNECTS
Technical relationships, not ownership links or assumed partnerships.
uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"1ed1270afb9a813ff927271109f538a3859cb717b192be40f5be76aac07b7312","subject":"webpion.com","predicate":"uses_nameserver","object":"ns12.infomaniak.ch","state":"observed","evidence_ids":["f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}depends on provider
Recorded technical relationship, not a partnership or ownership link.
{"id":"297fafe4664e84ea14aeb65354cc0a7c2475e1cbdaff524b4bb59efd44fb6b8d","subject":"webpion.com","predicate":"depends_on_provider","object":"Infomaniak","state":"corroborated","evidence_ids":["b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4","f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d","59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"39f004c59b40aebe47576be7cd1523989614914765b0e7216bdd016e0ddb812e","subject":"webpion.com","predicate":"resolves_to","object":"185.125.27.197","state":"observed","evidence_ids":["3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}uses technology
Recorded technical relationship, not a partnership or ownership link.
{"id":"671024d8185ae0e90d25cf795e45b861c390ff0892288b8924313b198f1c70c1","subject":"webpion.com","predicate":"uses_technology","object":"Apache","state":"observed","evidence_ids":["a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}uses mail exchanger
Recorded technical relationship, not a partnership or ownership link.
{"id":"6c80561ca7dce0648bbf17af4d8ca0ec7f87c32d89437cb051fe8c4821ef3331","subject":"webpion.com","predicate":"uses_mail_exchanger","object":"mta-gw.infomaniak.ch","state":"observed","evidence_ids":["dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}resolves to
Recorded technical relationship, not a partnership or ownership link.
{"id":"cac66792356959af1dfd23c1007802d3a348bfd472bc5dc175a0e939bddc26ce","subject":"webpion.com","predicate":"resolves_to","object":"2001:1600::aaaa:0:0:80:5b","state":"observed","evidence_ids":["c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}uses nameserver
Recorded technical relationship, not a partnership or ownership link.
{"id":"fefcf31f08bebdbd0e3f11f241f40ed250c8f762a9e45d297ae06629dbbd5204","subject":"webpion.com","predicate":"uses_nameserver","object":"ns11.infomaniak.ch","state":"observed","evidence_ids":["b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4"],"first_seen_at":"2026-09-04T19:30:56+00:00","last_seen_at":"2026-09-04T19:30:56+00:00"}05 / POINTS TO EXAMINE
Infomaniak is associated with 3 critical function(s) or observations in the visible scope.
This concentration is descriptive. It does not prove a future outage or the absence of failover mechanisms invisible to the scan.
Inspect evidence ↓This signal alone does not prove actual alignment for every mail flow.
A provider headquarters, an IP address, or a CDN is not proof of data location.
Edge presence must not be treated as origin hosting.
Provider visibility does not describe contracts, subprocessors, or actual processing location.
Single DNS provider The name servers appear to belong to the same provider domain.
["ns12.infomaniak.ch","ns11.infomaniak.ch"]
CAA not published No authorized certificate authority is declared in DNS.
DNSSEC not asserted The autonomous engine does not use a third-party resolver and therefore does not infer DNSSEC validation.
{"status":"not_tested","reason":"No external validating resolver is used; DS validation is intentionally not inferred."}TLS reporting not declared No TLS-RPT record was observed.
MTA-STS not declared The MTA-STS version DNS signal was not observed.
Single MX relay Only one mail relay was observed.
[{"host":"mta-gw.infomaniak.ch","priority":5}]CSP allows unsafe-inline The policy permits inline execution or styling without cryptographic proof.
default-src 'none'; script-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; script-src-attr 'none'; style-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests
COEP missing Embedded resource isolation is not enabled.
Concentrated DNS All observed name servers appear to depend on the same operator domain.
["ns12.infomaniak.ch","ns11.infomaniak.ch"]
Full structured details remain in the JSON report. Missing information is not reconstructed.
06 / THE INSPECTED PAGE
The target’s JavaScript is not executed. A website declaration does not certify its identity.
07 / REVIEWED REFERENCES
Sources reviewed in administration, not an exhaustive Internet search. They do not modify the historical measurement.
No reviewed external reference recorded.
08 / PUBLIC RESOURCES
No enriched document in this observation. Historical evidence remains accessible below.
09 / TIME CHANGES THE READING
Initial reference point for this reading.
Retained observation
Displayed reading
10 / KEEP THE READING VERIFIABLE
The twelve angles organise the same evidence. An evidence item reused several times does not become several measurements.
What is being observed and which public markers identify it?
Observed : Dns address : 2001:1600::aaaa:0:0:80:5b / Observed : Dmarc record : v=DMARC1; p=reject;
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Dns nameserver Observed
ns12.infomaniak.ch
dns
Technical finding Observed
Signal importance : low
dns
Dns address Observed
185.125.27.197
dns
Which public infrastructures appear to serve the service?
Undetermined : Data location : Value not available / Undetermined : Provider dependency : Infomaniak
Data location Undetermined
Value not available
provider_metadata_does_not_prove_processing_location
Provider dependency Undetermined
Infomaniak
independent_provider_evidence_converges
Origin host Undetermined
Value not available
public_edge_does_not_reveal_origin
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
How are public exchanges protected and presented?
Observed : Tls issuer : C = US, O = Let's Encrypt, CN = YR2 / Not tested : Post-quantum TLS negotiation : No measurement performed
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YR2
certificate_observed
Post-quantum TLS negotiation Not tested
No measurement performed
pq_tls_client_not_enabled
Technical finding Observed
Signal importance : info
headers
Tls issuer Observed
C = US, O = Let's Encrypt, CN = YR2
tls
Http header Observed
same-origin
headers
Tls valid to Observed
2026-11-27T21:40:45+00:00
tls
Which mail protections and policies are publicly observable?
Observed : DMARC policy : reject / Observed : SPF policy : hardfail
DMARC policy Observed
reject
mail_policy_observed
SPF policy Observed
hardfail
mail_policy_observed
Mail policy flag Observed
No
mail_trust
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Which public DNS controls are visible and what remains undetermined?
Observed : Mail policy flag : No / Observed : Dns address : 2001:1600::aaaa:0:0:80:5b
Mail policy flag Observed
No
mail_trust
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Dns nameserver Observed
ns12.infomaniak.ch
dns
SPF policy Observed
hardfail
mail_trust
Which external domains, providers or resources does the site visibly depend on?
Undetermined : Provider dependency : Infomaniak / Observed : Dns address : 2001:1600::aaaa:0:0:80:5b
Provider dependency Undetermined
Infomaniak
independent_provider_evidence_converges
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Dns nameserver Observed
ns12.infomaniak.ch
dns
Technical finding Observed
Signal importance : low
dns
Which technologies can reasonably be inferred from public traces?
Observed : Technical finding : Signal importance : info / Observed : Http header : same-origin
Technical finding Observed
Signal importance : info
headers
Http header Observed
same-origin
headers
Http header Observed
accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()
headers
Http header Observed
Apache
headers
Http header Observed
DENY
headers
Http header Observed
same-origin
headers
Which elements, endpoints or artefacts are publicly exposed?
Not tested : Canary statement detected : No measurement performed / Observed : Technical finding : Signal importance : info
Canary statement detected Not tested
No measurement performed
canary_detection_not_enabled
Technical finding Observed
Signal importance : info
headers
Http header Observed
same-origin
headers
Technical finding Observed
Signal importance : low
dns
Http header Observed
accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()
headers
Technical finding Observed
Signal importance : low
mail_trust
Which public documents and transparency mechanisms are present?
Observed : Technical finding : Signal importance : info / Observed : Http header : same-origin
Technical finding Observed
Signal importance : info
headers
Http header Observed
same-origin
headers
Technical finding Observed
Signal importance : low
dns
Http header Observed
accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()
headers
Technical finding Observed
Signal importance : low
mail_trust
Http header Observed
Apache
headers
Which protections or situations deserve particular attention?
Not tested : Post-quantum TLS negotiation : No measurement performed / Not tested : Canary statement detected : No measurement performed
Post-quantum TLS negotiation Not tested
No measurement performed
pq_tls_client_not_enabled
Canary statement detected Not tested
No measurement performed
canary_detection_not_enabled
Mail policy flag Observed
No
mail_trust
Technical finding Observed
Signal importance : info
headers
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
What appeared, disappeared, changed or remained stable since earlier scans?
The available evidence does not yet describe this pillar
Which evidence, methods, dates and limitations support the displayed conclusions?
Observed : Mail policy flag : No / Observed : Technical finding : Signal importance : info
Mail policy flag Observed
No
mail_trust
Technical finding Observed
Signal importance : info
headers
Dns address Observed
2001:1600::aaaa:0:0:80:5b
dns
Dmarc record Observed
v=DMARC1; p=reject;
dns
Dns nameserver Observed
ns11.infomaniak.ch
dns
Dns nameserver Observed
ns12.infomaniak.ch
dns
The filter changes the display. Exports retain all evidence.
3bf12834d9f5b91cab6d8bba61446461a702c5f3a7ddf44b7fb5ed2ec2f8803eb2a029a4b6e680444df523946cf1e9cc92b93115635c1e3428f4b98c7587d56ce4d7186dbf26c9eb2e9f6fdc56f5c8d5f1d2aec703bf8dcce76ee4ee4bce749cdabbc5375cb07cf515fa96bc66abf6ee82fac24f763551500de28f0e0d30afbb1eb86dacd0e72baaef4152b05d64093e167f5d1ae37bd9e0b8dbf70259cc34b8b8dd59146a487c9683d55fd19e5bb35a762cdb58Public access, collection budgets and available sources limit this dossier. A hash or signature is not certification of its conclusions.
Report an error or request clarification ↗