{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.6.2",
    "pattern_version": "2026.09.4",
    "scan_id": "222cab87d3b23369c9096a27",
    "domain": "0bla.com",
    "scanned_at": "2026-09-04T22:03:56+00:00",
    "evidence_count": 52,
    "evidence": [
        {
            "id": "88ad8c62903bd998f00bb720f5f43ccfb945b9bd9b3a3ccbf29df62328a7a597",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "01ab80dc6727dc0fa12ba0e19b2a49a3b4833c69caa148ac08fe5d52809baeef"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "ssl.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "adc9a815da67d5f82ae7e399d086a871229c59b5b0ad39f17ae7da745f6bc93a",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "092b99ea9e0c8dacab41fb6d2b04a025637e4bf0d70c549638c1c054ad3f8265"
            ],
            "excerpt": "2026-11-14T14:07:24+00:00",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d1f0ec4fd038ee2230ac6e73a9f74266c74aa50137d4311d891de59b401ba1dd",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0a245c6902f0830d9777c86e0759256c1296210fd2d9052e865368dc6b64745e"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "207f1b2c1ef93c9272920ea1a2e109a3cf02531185ac5b4653164d6db2fabdf1",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0cc9bc390a4df5fa6c04f94e5f7e74d8146dc9d3305511a1793851953b81c502"
            ],
            "excerpt": "2606:4700:3031::ac43:831e",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d43e5cde3fe6cf816545dc84a4a3bb7fbde32a48db22f62ae00e1c9027e5be8b",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1334543dc80ec767381ee2341ff772fef3ba60f3a248919066cbc7d3e88e17de"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "iodef",
                "value": "mailto:security@0bla.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d7169fed1697eea2b2342dd1aacf8b1ec8dd699fcf096e775e7455806d4f0fe3",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "195e0057508225067e867d3ce451cb09d1dc03cc0ff056bd79c4bfa13778121d"
            ],
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "de033d871f02b262bf9935ed22c148d2b43b6cce9d9f22f40ea670386c7f6448",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "25e63a148519a0c6e70f766059adb1e3e2f048763b972e5eff95d81d7fea766a"
            ],
            "excerpt": "172.67.131.30",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "a54f9fbcc16ae5780cb09d69d4a5823a722d9fb2c97129381f608b2d794cd298",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2c2c76fd5550d85fdaa06fb15ffb8b5760e78cdcf18d4db3ddd815d7ee67603a"
            ],
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "5e3e1e052d05d6230058755bd5d275af0105a4983e61202871fbb675544a89c8",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "30b32db6f12cc199e64be4d57fdc544d8508badabe572a984fb861cbf3452aec"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "pki.goog; cansignhttpexchanges=yes"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "7b37751c85e01b43c68201673910aedaaf302200936008d6d1421d6d185d601d",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31076a38061eb86036f6196fb06236672291ef7a64f362b7d83a2cf1e071d9b0"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "c65dd2899db54c1c547a7081dbbeb53f1ce50af461eb40f6c4412fe2fe2c3069",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "342df1419820ed7c3f130062e633f9d9a5f2bdd1f8f386f3d8c25a40ca51731a"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "1e0e4c2e7194c71cacc567eaaaf27145eae61b010f85458201f63823d2b0949f",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "46751715d441952495a9b03c572f3d6e0bf3714cce379ada11b1e59cc715c38f"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mta-gw.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 1,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d5b9592f4d70de7f8757b01ecbda71c02d07aedaba965761c6cb3be7e21bc6f4",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "510b5cd36ca6deb3460f2c54f152f7116ecea16c3c571b686f8d22e3fe985af1"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "3b9bde6ae5bfa31f0e699c1d3c45c75c2882bff2511e9bded8859a9f3ccdf018",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "510d8d9236a465364bad76aed6a938b64d0ca1afb5ffe44704b92d24c0520e1a"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "bb5792415779adf9aae1cbd8b32de9e9132938c1ab8ae9090ff6541c7f9d1f95",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "52aad5340686585d5de92696480cf3cd07762fe5691e932797dd292cf2c69403"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "ssl.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "8f9dc4bd6de6804762c744fbcf0b0e0e4c9588b17ce8ce4091110923fc8fce3f",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "54e5de4cac7cd65a4e47b49f0d81b05160641348285173d62c8783e057b19daf"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "letsencrypt.org"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "7ee4b64795ef4a6e6534952234b96bd9f56d21c6ca4b048cfaffaad7f494f390",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "597536ca19b7e8290349aee57c614efda7aad21313b76cbac6a6a12713cd9749"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "21dc11d89d8c1177c7a4e18ac8c4b905a4fca9242ff6045007de2a89f31cc7eb",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6026b05133e9c7491767d487c5566073c16379712ad6b1328098113739617419"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YE2",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "10761c231b097efd961779c8d2b92571b4e273bc515e35c8aeebf9ce85175491",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6a3a433395f1b01f8d2229d5530a4ddf9bbecbe951cb5751782136d5e9c6d071"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "ccdef8c7fb74aa33117385797c19bdaa7fbe8b2f18d38ff2441d73ecc8c8cedc",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6b2480b819c42928348f15459e0bd296dca0ef3f039d02f469d0a056682e273d"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "digicert.com; cansignhttpexchanges=yes"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "88679ad179cb067a132405fb4f25ec9f3f069a7c8c34774f90cd3895b840aaaf",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6c4fb719756bcca7f94388b4addb38bc8be32a47a2968703556fa325c86501bc"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "6b0c2c30edba58bdfe31ce5a794d5e4b0822a2b2db70bb2e18e584933f009d1e",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6d6de54afa95621934aad639fe43ec8a486aa0dc52d7502b5d8f3428c1df560c"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "pki.goog; cansignhttpexchanges=yes"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "ddf530c83b6c4327f0d5e274b8b375ec49abebf2df443881f5c5844ad0a23c56",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7ab80510c77db4259c11dc2e49ae76ee964efa601dc2676c115ab0fba6e74677"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "digicert.com; cansignhttpexchanges=yes"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "56620bd8950e7d7cf2791f5383d20ee1b7d0a73fc17187d65a8325ab39555ad9",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7f151a5741365cacf6e592da353cf130a1e74c3826a3423d8c6a4ef19fa736c9"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "4eb279513f07f7ffaf2d19b40322bf2a5fe70ee7860a7e2dc2316155e07e36f7",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "86888108d586bf51296ba2a406b468e5420d5ef2e2843ba7d3a66aeda35005f4"
            ],
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d9c070d8aabd6091d2da9921501fcbd55f28197b7172fa9b902163b8bae4c911",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "86a9bf06915b0b346b7c6783764572549070255bcede4ebd9aec787841ab91e0"
            ],
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "037f43d5216309eb9484949c2279c8859aabf22d171a5cbb4d8db072fae8c2e8",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "87ee1f1223eb715429e927df2af26a3e1e5b4b87cd58bfd0d902c0dec09d7c97"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "sectigo.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "59eb97e829254deb99b459244fcc2d3a5a8961d624a02a8bfc9c4108494b6593",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "880788e18d04f516b7a45c71657ee146556b3b932618c87538217add62185c43"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "62d1cae4295ebafc158cfdf3376b5df32792020e351bd313facf36ed682860e8",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "893a5c9c5816aab040d79288015b1cfcb976d147794ec9c3d46a139082aa7d46"
            ],
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "b96af84d3df776bf9533e24e351a6bb00667b7eabe09fd90334b87eafdddf360",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8fe8a758154c45e7e1ffd8851c33f4cfd76aa052afed4dff04ab2aaec46e6f0c"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "c099f90048a3e5a61db9d52ebb13caf086f7f50cbab2c492dce69514be0a74d0",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "921790d2d2a0361dd6a0da6dae32f3cf5017efc5f5fc2ad047d1f453ac9258da"
            ],
            "excerpt": "104.21.9.251",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "149e0762b4d1aef0ca24356cbdec1d5e744d64c8e802f7503e718dbb6e5de490",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "92c0befa7856981ce21b815150c4aae70451dcbcff6aa8a998c1942f5193400a"
            ],
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d26139656facab0d01e620bb2e116538d8f2d04c27a44fe8c9456bc1b65dd1fe",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a156676504ca4b8553d53c647797be09d2c4ab1726eee5f4358afbdd1b005fd4"
            ],
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-6DRbkX9AG5HKlbENqeuAtw=='; style-src 'self' 'nonce-6DRbkX9AG5HKlbENqeuAtw=='; font-src 'self'; img-src 'self' data: https://lh3.googleusercontent.com; connect-src 'self'; manifest-src 'self'; form-action 'self' https://formspree.io; frame-ancestors 'none'; base-uri 'none'; object-src 'none';"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "5016f5635b4c25f714994c29cb61d9fa510681318c77f419c45b5155a2037a40",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "afc74aeed34d5fe6862033eef48e36ccab98f345256d7011929ae5a3624723a8"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "63f8b030f669d39f019fb867caec7a28532ce4831c40d252909046a3c8b84e6a",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b42b0e10a918204e4bb2035c65a0337f60130770938272fc1ea942060c95f3a2"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "comodoca.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "f0894a119cef6eef2b09badecadc47b6cb754099b0bb94cfeb181b2b1af40cf2",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c86af7b484b5bbc04599deab1b17cc489c9e64e6f3966654e58a9c23f7a7ffad"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "b0ad5a58e67d2bdbbca7a0340d53653b2c5bf49be88dac2dbfdefcd58f6cae24",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cac628424193913c332bc48a4827f81b9cbff91e794a18e0489bf0adf350b118"
            ],
            "excerpt": {
                "evidence": {
                    "provider": "Cloudflare",
                    "share": 75
                },
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "8ccbaadfcc6c918d5e778066343b1db4b87a37f7aeddf4b9678b404abfd606f0",
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cd99134712a4c94d6d07ec6f3fbe94a48af7a329dd77bc82e8d65452d3148572"
            ],
            "excerpt": {
                "evidence": "75%",
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "ccfebcf15da5a47827204050350684ada8dd8899402e9b1c616bdcc40eeefccc",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ce708b5c571bcf56a606ae2a9feb89d9451f0161a92a3f53454175eb5c5bc424"
            ],
            "excerpt": "david.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "2c96bf79009e3da0b26f3bb242714bf8688dff9bea0ee98e716456d332021d44",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d17a5085567ad0751a5c5b52b406d9da5ef55b3f6687a061c517a8a6f40ef670"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "5e9521ede080a1c057f28385fac51c9179b8ae24348d0b33ae40f29ff0c7aedb",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d630f9f05ccceaf1c606cd38da4e5cba1ab6e57bf6a515c43371fc9269606a02"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "6e1b6642ae0be1b699f94701ae4f8dc33cc4fa8ecd952afff450941b7286f16f",
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d7d978e4fb09a3f5f528df36bc5245d2bddb3d95ba6742b4db8bd7ab3b01d6bd"
            ],
            "excerpt": {
                "http_only": true,
                "name": "id",
                "same_site": "lax",
                "secure": true
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "2fe58c9ddf755f8e208dc5110e3a161a125ce466a0b39ed5f95fd80be46d65d5",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d97eb421d6d054adc1f241dbf24f0d69b0b88bbfa226ae098a853768bf0a3721"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "letsencrypt.org"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "e75648c3a622b5ec3d1b9e870a914226c3172852862e8a91dbeeb8eb37ad35f9",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9e3d2fbd70a8ba0c2d0a4eca46cd346a72f285e244fbbf3e44f075806d796a7"
            ],
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "648edc8155510db097dbcd3755bfc96f81f7eac7bc035edb2473d3f0c534aff2",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ddbb71abc531b9cb0bf88f692feaf91cf08b49b6342d039a63519b16cfbfdfd8"
            ],
            "excerpt": "2606:4700:3032::6815:9fb",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "efb500af6db39365bf96852e04c914f70f4c2d094686882c00d67e4523eaad71",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "dde2a4816fd6dbbcc68d8e147aaf14dcbea1faf9c0571a3a6ece4123ee568993"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "1026f34962c595ee1b6a9391fe509ab38e7574202f94cda7da9f441c06fd5db5",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "dfeea6ea4cb82cabd90aa8f1a3fa62068db5f63846b287f379189d5ab7be69dc"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issue",
                "value": "comodoca.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "1c5cf97fe6ac4ac6b506f33800e2b8f17e48e8560656ac00c04ae81bbf2fa297",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eaf480c2db932d3599611497c4bdb03623c4302a4cd8641d82e40ea0c1bc8f14"
            ],
            "excerpt": "thea.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "c5cce1f4222e68060866b0d0c3f3bac20918460b9c12f4521229f995e3f492b6",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ebd67af0a0a30217eff5159a04df4666e6cbddb96074194da864865ce9461565"
            ],
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "ae536ebe725e679d84e372cb0ccdbff1ec0f44c0816d63ee0fef09f1793c6ccb",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ef5c19d00e9792324d25702e7f705a61d0e076815faa063b4393d679082f2618"
            ],
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "b6e518b345db7042821c72f0e5087203237ed8a995ffbe7d7f4b16f684131d62",
            "evidence_type": "caa_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f489a968bc139417e564227641fb54b6cd347aebd97671a0f1412c313d386ee2"
            ],
            "excerpt": {
                "flags": 0,
                "tag": "issuewild",
                "value": "sectigo.com"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        },
        {
            "id": "d3dbc9690edfe94fa2ace0868b6854f43b777a49c2e9ccb5755b2ff167708d59",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fe36983fb3249e350f07355b82e8b3f143ea84308748205089c63a9c3d754798"
            ],
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T22:03:56+00:00",
            "last_seen_at": "2026-09-04T22:03:56+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}