{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "alphatraining64.com",
    "measured_at": "2026-09-06T01:58:16+00:00",
    "engine_version": "2.9.2.1",
    "pattern_version": "2026.09.4",
    "summary": [
        "4 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "40 évolutions utiles sont retenues depuis la lecture précédente.",
        "4 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 4,
        "deduced": 0,
        "to_confirm": 2,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 1
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "29a8ea819452cabc67cc18569537ef9e8435f1153c1343ed2bb78177a37b8871",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "72bc5d01237950d21ae609486cbadaa274f0b2762ea070783357c3e5088bce7d",
                    "title": "Canary detection",
                    "value": false,
                    "state": "to_confirm",
                    "state_label": "À confirmer",
                    "evidence_ids": [
                        "e0cfb8b63b52ae4a83463c681669b8deb1b0af94865876dead64ac35a7e06d7c"
                    ],
                    "rationale": "no_known_passive_signature_observed"
                },
                {
                    "id": "93a7add19d3f7ff06da8cb42e1dfe8bba80b3d7804c9eeb8fe44f9cc2dce8041",
                    "title": "Openpgp",
                    "value": null,
                    "state": "to_confirm",
                    "state_label": "À confirmer",
                    "evidence_ids": [
                        "239f4fe5491569e71fad3c28d3af14ebff1846ab7afb8fac082ae3383a91dd3e"
                    ],
                    "rationale": "security_txt_encryption_not_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 2,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "48d30931a014428cef221ed3c210092abd48cad5a3db01607b35dffa08d1c020",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "0dfef6f8dffd7e48c5cd8aab82eabb360b338875c0693a12b1185bb47cc54f2a"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "9c6f738fe02b742a813e36974e02b3b5e103b5f3a6bbb21737e659f8bb2b77cd",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [
                        "2223fe764a87f58549f298574437d77028c32a04594ce38aad2b35abd0c6c2ab"
                    ],
                    "rationale": "client_capability_unavailable"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "3aa320a46f12187027c2e834741a4cb3543ee8b860d9f1af18a991fae0ed4cb1",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "dcabdf9bee51cffe94c0f090c37563c1f52af47acf782abb0e40942999d3c142",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "2406bdd19b0732942bd01b66f7f30fb94e3670f58db7e3e4da1248392dd5cb49",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T20:04:58+00:00",
        "last_observed_at": "2026-09-06T01:58:16+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 14,
            "modified": 2,
            "stable": 25,
            "disappeared": 24
        },
        "meaningful_change_count": 40,
        "change_summary": {
            "appeared": 14,
            "modified": 2,
            "disappeared": 24,
            "stable": 25,
            "meaningful": 40,
            "volatile_filtered": 0,
            "unresolved": 0
        },
        "changes": [
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Canary signal",
                "before": null,
                "after": {
                    "matches": [],
                    "reason": "no_known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "not_observed"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Csp evidence",
                "before": null,
                "after": {
                    "enforced": true,
                    "frame_ancestors": true,
                    "hash_present": false,
                    "nonce_present": true,
                    "object_src": true,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dependency provider",
                "before": {
                    "critical": false,
                    "hosts": [
                        "cdnjs.cloudflare.com"
                    ],
                    "id": "cloudflare",
                    "known": true,
                    "name": "Cloudflare",
                    "observation_count": 1,
                    "services": [
                        "cdn",
                        "security"
                    ],
                    "tracker": false
                },
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dependency provider",
                "before": {
                    "critical": false,
                    "hosts": [
                        "formspree.io"
                    ],
                    "id": "host-8eec65f47bed",
                    "known": false,
                    "name": "formspree.io",
                    "observation_count": 1,
                    "services": [
                        "unknown"
                    ],
                    "tracker": false
                },
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dependency provider",
                "before": {
                    "critical": false,
                    "hosts": [
                        "fonts.googleapis.com",
                        "fonts.gstatic.com"
                    ],
                    "id": "google",
                    "known": true,
                    "name": "Google",
                    "observation_count": 3,
                    "services": [
                        "analytics",
                        "captcha",
                        "fonts",
                        "maps",
                        "video"
                    ],
                    "tracker": false
                },
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dependency provider",
                "before": {
                    "critical": false,
                    "hosts": [
                        "images.unsplash.com"
                    ],
                    "id": "host-63978de5251d",
                    "known": false,
                    "name": "images.unsplash.com",
                    "observation_count": 8,
                    "services": [
                        "unknown"
                    ],
                    "tracker": false
                },
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dnssec evidence",
                "before": null,
                "after": {
                    "chain_consistency": {
                        "reason": "insufficient_record_evidence",
                        "state": "untested"
                    },
                    "dnskey": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "ds": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "validation": {
                        "reason": "no_validating_resolver",
                        "state": "untested"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Http header",
                "before": null,
                "after": [
                    "default-src 'none'; base-uri 'none'; connect-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-fOgiln7blLtwRLx5kx8zEg69'; style-src 'self'; worker-src 'none'"
                ],
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Http header",
                "before": null,
                "after": [
                    "same-origin"
                ],
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Http header",
                "before": null,
                "after": [
                    "same-origin"
                ],
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Http header",
                "before": null,
                "after": [
                    "camera=(), geolocation=(), microphone=(), payment=(), usb=(), browsing-topics=()"
                ],
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Http header",
                "before": null,
                "after": [
                    "strict-origin-when-cross-origin"
                ],
                "direction": "indeterminate"
            }
        ],
        "history_count": 2
    },
    "observations": [
        {
            "id": "18747d37c7c8d2c0d319fb4dd0d366be3fe9fe518a4d7107a618c4043f622044",
            "type": "canary_signal",
            "subject": "alphatraining64.com",
            "predicate": "canary_detection",
            "value": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "source": "advanced_canary",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2ce1593cddc08c8455bb075e7929a8011d0e6bdf98eebb73846f9df3e5fab03a",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2f4854c195f0821c0f53b2223ee694e47a249b268a15ef322fc32bc426a1edc9",
            "type": "tls_valid_to",
            "subject": "alphatraining64.com",
            "predicate": "valid_to",
            "value": "2026-10-10T22:06:56+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "31452526d5c9180c1f3e4c011cc5c9cc5b7e94ed718c6b4c40a1130fd8dce862",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "396baa22ad1235ff4bc65d6d9bcdab3e150579b5c81a119b0c7f30a617245ec8",
            "type": "technology",
            "subject": "alphatraining64.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "3d2f07295e45957d04c8215eb40289ac1d10fe4551f2b1ac01e2c7edfb6e252e",
            "type": "mail_policy_flag",
            "subject": "alphatraining64.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4207e84f347d69d38d2b0d5b931a36c817e24492d5befaf784c5b0776da0ccf3",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4744a5b35d767ac09712bc0645fb76a1ec2b8eea3ab7548315b9722e3f36ee89",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4f9455509df409634737323bb10c264b18c7b94453e22958de9192507580c467",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "517a1e8484bc60d6e5f8d4dc68617df1c12df75f609651fbcaf9f2099dfabc39",
            "type": "openpgp_discovery",
            "subject": "alphatraining64.com",
            "predicate": "openpgp",
            "value": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "source": "advanced_openpgp",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "5314c9f415b0cc4dbc2665dba82bef96ac899c918c74d8781e61a2557e31341e",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "549a8a46ef65ff74880b42ce0760520e477825da3c673da73a8c7391c50aaabd",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "590cf8eb088f72cb36120897f8d6a92450af263004e2a2a4ac95b67368f454a8",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6429bd45c2ce9cc2f4ce19ab494f86d3c1bf37bd63d197b8a09fbc1659341672",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "referrer-policy",
            "value": [
                "strict-origin-when-cross-origin"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6a2115fc0c61f90629b80b69767d2d3b8913769b22345ab5cdb4b8d8cfda8b40",
            "type": "dns_nameserver",
            "subject": "alphatraining64.com",
            "predicate": "uses_nameserver",
            "value": "ns12.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "767d685f7519ca154682b93ec482a0f9e5d790264d7dbd7ce329eee01a0fd012",
            "type": "dmarc_policy",
            "subject": "alphatraining64.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "7db0471de6c6d1778071f3497e813bb0b6c4145af89c98b5c830b6637f6eacde",
            "type": "post_quantum_tls",
            "subject": "alphatraining64.com",
            "predicate": "post_quantum_tls",
            "value": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "source": "advanced_post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "808ba4ae43071b7b641d0ebcf573fc4f46e43bdae3768674bf4d1d87700ae0ab",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "80f63c3c6a7a52f1b82fd4db4d1f8680814b0d0bef957ce44f4ed3b9733b7437",
            "type": "mail_exchanger",
            "subject": "alphatraining64.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "8864b6d02208fa081c62e6c0ddb8a553f0f8f1e3ac1b99d363dcb1e87020b37c",
            "type": "dns_nameserver",
            "subject": "alphatraining64.com",
            "predicate": "uses_nameserver",
            "value": "ns11.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "88a45b2863bf3f62aabbfdf5e83ea2afab2c46f2c06f347f0a2b729d9f7637c7",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "permissions-policy",
            "value": [
                "camera=(), geolocation=(), microphone=(), payment=(), usb=(), browsing-topics=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "90752633b484eec3e727fe3ca1a241e814265b5de69512b854182fc309a897ea",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "9227ee025b7c71ecf67796dec9a5574725e6c2f246b5152460e26aebe7c6bcb4",
            "type": "dmarc_record",
            "subject": "alphatraining64.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "9a0ab2fd1029fbe459788363e5950f1e25f61bbf005ef6ba4f533193f25cca8b",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "b61ae0e4e94770f97084c28f96c8b5a28c2f41490bf37626da8dbe36e99471ea",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "bda24c3de40f8c076f3aa053b95bac6982f053767675634a340fc69b7a51def6",
            "type": "mail_policy_flag",
            "subject": "alphatraining64.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "c22f26eccba72d28638edc8313fbb28ccc5b12a6afeb92a43b456474a33b8135",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "ca44830ba004b7795bc436e0381a011dd12d8327bb5b0e6df8e29cf09c3604ac",
            "type": "http_header",
            "subject": "alphatraining64.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; base-uri 'none'; connect-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-fOgiln7blLtwRLx5kx8zEg69'; style-src 'self'; worker-src 'none'"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d188e555097e6238ceea8932b4c99f8ac0d7eebe4994040a97c209117d84841e",
            "type": "spf_record",
            "subject": "alphatraining64.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d93e6f4b142f4e36329510a0c6db126cd61ab861ec7a2c17083d46677ed83a17",
            "type": "tls_issuer",
            "subject": "alphatraining64.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "de681602b57ac93d290dfae7e30e80020292763f90f05800571504497d384194",
            "type": "module_finding",
            "subject": "alphatraining64.com",
            "predicate": "headers:coep_missing",
            "value": {
                "evidence": null,
                "severity": "info"
            },
            "source": "finding_coep_missing",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "e132d61ba4f0b3c92ad98501086fb8fb3afd596e703e0f5a6a976263fcaf0ab1",
            "type": "mail_transport_evidence",
            "subject": "alphatraining64.com",
            "predicate": "mail_transport_depth",
            "value": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "source": "advanced_mail_transport",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "e18cd8870a9ad1ac94597cfae1ce78778edd8522eaacc612a02d738a282276f3",
            "type": "dependency_provider",
            "subject": "alphatraining64.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "e8d662197654703ae2c7a05e9bb1de933afc607004faeb6d469db1edb5a56747",
            "type": "dns_address",
            "subject": "alphatraining64.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5a",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "ec53041e628ae749711374975d96d673bc4446d9581be3afa4880a3da54ee34d",
            "type": "dns_address",
            "subject": "alphatraining64.com",
            "predicate": "resolves_to",
            "value": "185.125.27.195",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "ecc5aef04d0b8e2dff28389f35922562aaf00b5565c2d0c60fa6ea625b016c7d",
            "type": "spf_policy",
            "subject": "alphatraining64.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "ef1a66434716e3f45fe55dba4aed0cd463e5e5b9e41da23444afd16b5155570e",
            "type": "modern_transport_evidence",
            "subject": "alphatraining64.com",
            "predicate": "modern_transport",
            "value": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-07-12T22:06:57+00:00",
                    "valid_to": "2026-10-10T22:06:56+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "source": "advanced_modern_transport",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "f247abab579b9abeeed12203123f2401dcfe1f79c7011e777f978893ee0b63b1",
            "type": "mail_policy_flag",
            "subject": "alphatraining64.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "f8706f78d206f29b80431f73c0f6d6e5c9201494357c5daecda1eebbc75336f5",
            "type": "csp_evidence",
            "subject": "alphatraining64.com",
            "predicate": "csp_depth",
            "value": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "source": "advanced_csp",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "fe34b075385ab901de14de46f2d215448d75209e3009111b78810b380bc8b1b7",
            "type": "dnssec_evidence",
            "subject": "alphatraining64.com",
            "predicate": "dnssec_depth",
            "value": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "source": "advanced_dnssec",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T01:58:16+00:00"
        }
    ],
    "claims": [
        {
            "id": "2406bdd19b0732942bd01b66f7f30fb94e3670f58db7e3e4da1248392dd5cb49",
            "subject": "alphatraining64.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "29a8ea819452cabc67cc18569537ef9e8435f1153c1343ed2bb78177a37b8871",
            "subject": "alphatraining64.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "3aa320a46f12187027c2e834741a4cb3543ee8b860d9f1af18a991fae0ed4cb1",
            "subject": "alphatraining64.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "48d30931a014428cef221ed3c210092abd48cad5a3db01607b35dffa08d1c020",
            "subject": "alphatraining64.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "0dfef6f8dffd7e48c5cd8aab82eabb360b338875c0693a12b1185bb47cc54f2a"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "72bc5d01237950d21ae609486cbadaa274f0b2762ea070783357c3e5088bce7d",
            "subject": "alphatraining64.com",
            "predicate": "canary_detection",
            "value": false,
            "state": "to_confirm",
            "rationale": "no_known_passive_signature_observed",
            "evidence_ids": [
                "e0cfb8b63b52ae4a83463c681669b8deb1b0af94865876dead64ac35a7e06d7c"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "93a7add19d3f7ff06da8cb42e1dfe8bba80b3d7804c9eeb8fe44f9cc2dce8041",
            "subject": "alphatraining64.com",
            "predicate": "openpgp",
            "value": null,
            "state": "to_confirm",
            "rationale": "security_txt_encryption_not_observed",
            "evidence_ids": [
                "239f4fe5491569e71fad3c28d3af14ebff1846ab7afb8fac082ae3383a91dd3e"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "9c6f738fe02b742a813e36974e02b3b5e103b5f3a6bbb21737e659f8bb2b77cd",
            "subject": "alphatraining64.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "client_capability_unavailable",
            "evidence_ids": [
                "2223fe764a87f58549f298574437d77028c32a04594ce38aad2b35abd0c6c2ab"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "ca0b3a5ceead8e717f5ad1e2f58e33327334421afe42943b2b50e30f17b5893f",
            "subject": "alphatraining64.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6",
                "72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991",
                "2a29c8a881892fc8aa98d643422b21022987b7bcb636cf48e6f1762b88b69bea"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        },
        {
            "id": "dcabdf9bee51cffe94c0f090c37563c1f52af47acf782abb0e40942999d3c142",
            "subject": "alphatraining64.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "e0cfb8b63b52ae4a83463c681669b8deb1b0af94865876dead64ac35a7e06d7c",
            "observation_ids": [
                "18747d37c7c8d2c0d319fb4dd0d366be3fe9fe518a4d7107a618c4043f622044"
            ],
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77",
            "observation_ids": [
                "2ce1593cddc08c8455bb075e7929a8011d0e6bdf98eebb73846f9df3e5fab03a"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "14f53828e0c358ce6af0f60d1bb7acf4407d9b4c2e07aa64f95cb70fb557779c",
            "observation_ids": [
                "2f4854c195f0821c0f53b2223ee694e47a249b268a15ef322fc32bc426a1edc9"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-10-10T22:06:56+00:00",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6",
            "observation_ids": [
                "31452526d5c9180c1f3e4c011cc5c9cc5b7e94ed718c6b4c40a1130fd8dce862"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "5088ed3027d8c04804f585e7ded389816e63ae09834c75aa21f3c9d9ec7efa48",
            "observation_ids": [
                "396baa22ad1235ff4bc65d6d9bcdab3e150579b5c81a119b0c7f30a617245ec8"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7",
            "observation_ids": [
                "3d2f07295e45957d04c8215eb40289ac1d10fe4551f2b1ac01e2c7edfb6e252e"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d2262957ddc1a54a6fbe4150df5642764832ae691b7cdf822d997de9bde891e6",
            "observation_ids": [
                "4207e84f347d69d38d2b0d5b931a36c817e24492d5befaf784c5b0776da0ccf3"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "b424d9591fe23f8239f38d8f36043905e70477fa36c99ca402cc3e1495f9be41",
            "observation_ids": [
                "4744a5b35d767ac09712bc0645fb76a1ec2b8eea3ab7548315b9722e3f36ee89"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d49fc28b6ac8edebc38804b8ba13f3fdc38d8e0c57649ac22e789ca1a3944c95",
            "observation_ids": [
                "4f9455509df409634737323bb10c264b18c7b94453e22958de9192507580c467"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "239f4fe5491569e71fad3c28d3af14ebff1846ab7afb8fac082ae3383a91dd3e",
            "observation_ids": [
                "517a1e8484bc60d6e5f8d4dc68617df1c12df75f609651fbcaf9f2099dfabc39"
            ],
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476",
            "observation_ids": [
                "5314c9f415b0cc4dbc2665dba82bef96ac899c918c74d8781e61a2557e31341e"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "76384d1531b17bd8a82e9ff3aaeb1882dad43d6e72dfa62c3214a99ead7effec",
            "observation_ids": [
                "549a8a46ef65ff74880b42ce0760520e477825da3c673da73a8c7391c50aaabd"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed",
            "observation_ids": [
                "590cf8eb088f72cb36120897f8d6a92450af263004e2a2a4ac95b67368f454a8"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "46b1459e43254af92a7faf2bc056463c85ff55382fc015a36dc071b88998d7e3",
            "observation_ids": [
                "6429bd45c2ce9cc2f4ce19ab494f86d3c1bf37bd63d197b8a09fbc1659341672"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6",
            "observation_ids": [
                "6a2115fc0c61f90629b80b69767d2d3b8913769b22345ab5cdb4b8d8cfda8b40"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266",
            "observation_ids": [
                "767d685f7519ca154682b93ec482a0f9e5d790264d7dbd7ce329eee01a0fd012"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2223fe764a87f58549f298574437d77028c32a04594ce38aad2b35abd0c6c2ab",
            "observation_ids": [
                "7db0471de6c6d1778071f3497e813bb0b6c4145af89c98b5c830b6637f6eacde"
            ],
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "227dc6f501b71d82f9a79673c197ac8896c96513f279cdc713c751b5f96654bd",
            "observation_ids": [
                "808ba4ae43071b7b641d0ebcf573fc4f46e43bdae3768674bf4d1d87700ae0ab"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816",
            "observation_ids": [
                "80f63c3c6a7a52f1b82fd4db4d1f8680814b0d0bef957ce44f4ed3b9733b7437"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991",
            "observation_ids": [
                "8864b6d02208fa081c62e6c0ddb8a553f0f8f1e3ac1b99d363dcb1e87020b37c"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1e6794682d19880f0b8e2de92013ad293cab940040606a04069a49c786d0de37",
            "observation_ids": [
                "88a45b2863bf3f62aabbfdf5e83ea2afab2c46f2c06f347f0a2b729d9f7637c7"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "camera=(), geolocation=(), microphone=(), payment=(), usb=(), browsing-topics=()"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd",
            "observation_ids": [
                "90752633b484eec3e727fe3ca1a241e814265b5de69512b854182fc309a897ea"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014",
            "observation_ids": [
                "9227ee025b7c71ecf67796dec9a5574725e6c2f246b5152460e26aebe7c6bcb4"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea",
            "observation_ids": [
                "9a0ab2fd1029fbe459788363e5950f1e25f61bbf005ef6ba4f533193f25cca8b"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "dd4805e8095982d431a55f6f9a511f46cf6a1af265ac6dfb781a83bb32b38a8f",
            "observation_ids": [
                "b61ae0e4e94770f97084c28f96c8b5a28c2f41490bf37626da8dbe36e99471ea"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "262f48316ea7420747986d5eebd4b7aa7c98ccef2bed3b79b251faff84109963",
            "observation_ids": [
                "bda24c3de40f8c076f3aa053b95bac6982f053767675634a340fc69b7a51def6"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e",
            "observation_ids": [
                "c22f26eccba72d28638edc8313fbb28ccc5b12a6afeb92a43b456474a33b8135"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "7c035687678c697dece063f114c78493ad352bd12d492579784f3a0bb9997903",
            "observation_ids": [
                "ca44830ba004b7795bc436e0381a011dd12d8327bb5b0e6df8e29cf09c3604ac"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; base-uri 'none'; connect-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-fOgiln7blLtwRLx5kx8zEg69'; style-src 'self'; worker-src 'none'"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f",
            "observation_ids": [
                "d188e555097e6238ceea8932b4c99f8ac0d7eebe4994040a97c209117d84841e"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "0dfef6f8dffd7e48c5cd8aab82eabb360b338875c0693a12b1185bb47cc54f2a",
            "observation_ids": [
                "d93e6f4b142f4e36329510a0c6db126cd61ab861ec7a2c17083d46677ed83a17"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1347d1fb9eaf9ca107370a1774fb4b914a115562a9513eb631f36ac14fe1e507",
            "observation_ids": [
                "de681602b57ac93d290dfae7e30e80020292763f90f05800571504497d384194"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4261ed6f8d88a91144ccd7787cecc7d95e3722392e6cbb9bc832d5bc7a42d331",
            "observation_ids": [
                "e132d61ba4f0b3c92ad98501086fb8fb3afd596e703e0f5a6a976263fcaf0ab1"
            ],
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2a29c8a881892fc8aa98d643422b21022987b7bcb636cf48e6f1762b88b69bea",
            "observation_ids": [
                "e18cd8870a9ad1ac94597cfae1ce78778edd8522eaacc612a02d738a282276f3"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643",
            "observation_ids": [
                "e8d662197654703ae2c7a05e9bb1de933afc607004faeb6d469db1edb5a56747"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5a",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f",
            "observation_ids": [
                "ec53041e628ae749711374975d96d673bc4446d9581be3afa4880a3da54ee34d"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.195",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505",
            "observation_ids": [
                "ecc5aef04d0b8e2dff28389f35922562aaf00b5565c2d0c60fa6ea625b016c7d"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "8c924c523a88f2cf9caf129016a8f93fc6db5b82f3a95cf4409fd7b7984462ba",
            "observation_ids": [
                "ef1a66434716e3f45fe55dba4aed0cd463e5e5b9e41da23444afd16b5155570e"
            ],
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-07-12T22:06:57+00:00",
                    "valid_to": "2026-10-10T22:06:56+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1b916e5b0584617311f4b5fc0e60593cb61bd1a3aaed5474ca6c9d129da9074b",
            "observation_ids": [
                "f247abab579b9abeeed12203123f2401dcfe1f79c7011e777f978893ee0b63b1"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "f1c7ad947e996c144c9de076953b78c3f5304f82992d7c8b4a31cbcf25d8ff08",
            "observation_ids": [
                "f8706f78d206f29b80431f73c0f6d6e5c9201494357c5daecda1eebbc75336f5"
            ],
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6deb0eea9a2aa5c19e7c52eda477dcf76afc61fb3f1838c8aa87919fa0b1f652",
            "observation_ids": [
                "fe34b075385ab901de14de46f2d215448d75209e3009111b78810b380bc8b1b7"
            ],
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "44bd71f6aaf96e33ab10ce73469d03c45506fb0da7fb1cd96596956f4edbdf2d"
}