{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.9.2.1",
    "pattern_version": "2026.09.4",
    "scan_id": "cb89f0dc503fdcaa7973698d",
    "domain": "alphatraining64.com",
    "scanned_at": "2026-09-06T01:58:16+00:00",
    "evidence_count": 40,
    "evidence": [
        {
            "id": "e0cfb8b63b52ae4a83463c681669b8deb1b0af94865876dead64ac35a7e06d7c",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "18747d37c7c8d2c0d319fb4dd0d366be3fe9fe518a4d7107a618c4043f622044"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "50836183a6632e43bad3c32aad9339a2af2e7faf2ab9a4d02dd0eab564f4dc77",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2ce1593cddc08c8455bb075e7929a8011d0e6bdf98eebb73846f9df3e5fab03a"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "14f53828e0c358ce6af0f60d1bb7acf4407d9b4c2e07aa64f95cb70fb557779c",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2f4854c195f0821c0f53b2223ee694e47a249b268a15ef322fc32bc426a1edc9"
            ],
            "excerpt": "2026-10-10T22:06:56+00:00",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "9919b71666a6d5ec323da38938248304c6a9a1cf014eba38f20298c9eb1c9cc6",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31452526d5c9180c1f3e4c011cc5c9cc5b7e94ed718c6b4c40a1130fd8dce862"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "5088ed3027d8c04804f585e7ded389816e63ae09834c75aa21f3c9d9ec7efa48",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "396baa22ad1235ff4bc65d6d9bcdab3e150579b5c81a119b0c7f30a617245ec8"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4e22812df6e67f96e674045f289122b84bc1c06ec4f07fa96fac161c77ce96d7",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3d2f07295e45957d04c8215eb40289ac1d10fe4551f2b1ac01e2c7edfb6e252e"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d2262957ddc1a54a6fbe4150df5642764832ae691b7cdf822d997de9bde891e6",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4207e84f347d69d38d2b0d5b931a36c817e24492d5befaf784c5b0776da0ccf3"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "b424d9591fe23f8239f38d8f36043905e70477fa36c99ca402cc3e1495f9be41",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4744a5b35d767ac09712bc0645fb76a1ec2b8eea3ab7548315b9722e3f36ee89"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "d49fc28b6ac8edebc38804b8ba13f3fdc38d8e0c57649ac22e789ca1a3944c95",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4f9455509df409634737323bb10c264b18c7b94453e22958de9192507580c467"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "239f4fe5491569e71fad3c28d3af14ebff1846ab7afb8fac082ae3383a91dd3e",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "517a1e8484bc60d6e5f8d4dc68617df1c12df75f609651fbcaf9f2099dfabc39"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "3f8e66950ae1ab6fb85e4a709c49fd2d95307b6bdbd03b275ea5111971fe9476",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5314c9f415b0cc4dbc2665dba82bef96ac899c918c74d8781e61a2557e31341e"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "76384d1531b17bd8a82e9ff3aaeb1882dad43d6e72dfa62c3214a99ead7effec",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "549a8a46ef65ff74880b42ce0760520e477825da3c673da73a8c7391c50aaabd"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "0a8357527614c71911971cd2bd7c8298089529f20d71ce3c6418f3d55168c2ed",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "590cf8eb088f72cb36120897f8d6a92450af263004e2a2a4ac95b67368f454a8"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "46b1459e43254af92a7faf2bc056463c85ff55382fc015a36dc071b88998d7e3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6429bd45c2ce9cc2f4ce19ab494f86d3c1bf37bd63d197b8a09fbc1659341672"
            ],
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "fe4ee14a5c1362db83cae82716482b4ef3256d9ed717fb0fbba94f57bcc567f6",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6a2115fc0c61f90629b80b69767d2d3b8913769b22345ab5cdb4b8d8cfda8b40"
            ],
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "63ce8f9b54b57d943975c2aae21fa2133d4edfbefb539cb56a1fa16cf923c266",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "767d685f7519ca154682b93ec482a0f9e5d790264d7dbd7ce329eee01a0fd012"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2223fe764a87f58549f298574437d77028c32a04594ce38aad2b35abd0c6c2ab",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7db0471de6c6d1778071f3497e813bb0b6c4145af89c98b5c830b6637f6eacde"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "227dc6f501b71d82f9a79673c197ac8896c96513f279cdc713c751b5f96654bd",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "808ba4ae43071b7b641d0ebcf573fc4f46e43bdae3768674bf4d1d87700ae0ab"
            ],
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6aa9fa9d739df72d315dc69a2157a2c275788c88e4e8f03e4b5aa84dc5829816",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "80f63c3c6a7a52f1b82fd4db4d1f8680814b0d0bef957ce44f4ed3b9733b7437"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "72ee9d4fdc0ea7c10eaf7caceb5c10bfca69aeea184ce3f577ffd0c2c5c5b991",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8864b6d02208fa081c62e6c0ddb8a553f0f8f1e3ac1b99d363dcb1e87020b37c"
            ],
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1e6794682d19880f0b8e2de92013ad293cab940040606a04069a49c786d0de37",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "88a45b2863bf3f62aabbfdf5e83ea2afab2c46f2c06f347f0a2b729d9f7637c7"
            ],
            "excerpt": [
                "camera=(), geolocation=(), microphone=(), payment=(), usb=(), browsing-topics=()"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "de062920a43f206533f9ff956441a57f55f0d5d977e9026b36c27a8ba9826ffd",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "90752633b484eec3e727fe3ca1a241e814265b5de69512b854182fc309a897ea"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "835bec594fc98290188ac35aa0ee8b7062d74f53dba5095ffab97491faf3e014",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9227ee025b7c71ecf67796dec9a5574725e6c2f246b5152460e26aebe7c6bcb4"
            ],
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "252bd91dca255921f6e054ee88b07418464d6f6e6172ea65887f32eb23f37fea",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9a0ab2fd1029fbe459788363e5950f1e25f61bbf005ef6ba4f533193f25cca8b"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "dd4805e8095982d431a55f6f9a511f46cf6a1af265ac6dfb781a83bb32b38a8f",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b61ae0e4e94770f97084c28f96c8b5a28c2f41490bf37626da8dbe36e99471ea"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "262f48316ea7420747986d5eebd4b7aa7c98ccef2bed3b79b251faff84109963",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bda24c3de40f8c076f3aa053b95bac6982f053767675634a340fc69b7a51def6"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "c357fb078c5748397fec72a6bcc2af8b0e8c0d3d3922cb7a65bd3c94073e911e",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c22f26eccba72d28638edc8313fbb28ccc5b12a6afeb92a43b456474a33b8135"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "7c035687678c697dece063f114c78493ad352bd12d492579784f3a0bb9997903",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ca44830ba004b7795bc436e0381a011dd12d8327bb5b0e6df8e29cf09c3604ac"
            ],
            "excerpt": [
                "default-src 'none'; base-uri 'none'; connect-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-fOgiln7blLtwRLx5kx8zEg69'; style-src 'self'; worker-src 'none'"
            ],
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "b14d59dc6cc8afc330ea6191ba959db10598d4b84f48ca04166c814dad95625f",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d188e555097e6238ceea8932b4c99f8ac0d7eebe4994040a97c209117d84841e"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "0dfef6f8dffd7e48c5cd8aab82eabb360b338875c0693a12b1185bb47cc54f2a",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d93e6f4b142f4e36329510a0c6db126cd61ab861ec7a2c17083d46677ed83a17"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1347d1fb9eaf9ca107370a1774fb4b914a115562a9513eb631f36ac14fe1e507",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "de681602b57ac93d290dfae7e30e80020292763f90f05800571504497d384194"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "4261ed6f8d88a91144ccd7787cecc7d95e3722392e6cbb9bc832d5bc7a42d331",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e132d61ba4f0b3c92ad98501086fb8fb3afd596e703e0f5a6a976263fcaf0ab1"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "2a29c8a881892fc8aa98d643422b21022987b7bcb636cf48e6f1762b88b69bea",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e18cd8870a9ad1ac94597cfae1ce78778edd8522eaacc612a02d738a282276f3"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "431e586d8dc21429fce7e8c1d809284919ff52537703d1741cb06961a30c3643",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e8d662197654703ae2c7a05e9bb1de933afc607004faeb6d469db1edb5a56747"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5a",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "3b5471adab339ffd600c9a2d939559542d41bf984862950ec5d747279ffd628f",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ec53041e628ae749711374975d96d673bc4446d9581be3afa4880a3da54ee34d"
            ],
            "excerpt": "185.125.27.195",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "70a76fb0da5ca39ec5dd4b0d81aa5ce22b72c6c2ec4249b8173a0e7ffffdc505",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ecc5aef04d0b8e2dff28389f35922562aaf00b5565c2d0c60fa6ea625b016c7d"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "8c924c523a88f2cf9caf129016a8f93fc6db5b82f3a95cf4409fd7b7984462ba",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ef1a66434716e3f45fe55dba4aed0cd463e5e5b9e41da23444afd16b5155570e"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-07-12T22:06:57+00:00",
                    "valid_to": "2026-10-10T22:06:56+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "1b916e5b0584617311f4b5fc0e60593cb61bd1a3aaed5474ca6c9d129da9074b",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f247abab579b9abeeed12203123f2401dcfe1f79c7011e777f978893ee0b63b1"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "f1c7ad947e996c144c9de076953b78c3f5304f82992d7c8b4a31cbcf25d8ff08",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f8706f78d206f29b80431f73c0f6d6e5c9201494357c5daecda1eebbc75336f5"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        },
        {
            "id": "6deb0eea9a2aa5c19e7c52eda477dcf76afc61fb3f1838c8aa87919fa0b1f652",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fe34b075385ab901de14de46f2d215448d75209e3009111b78810b380bc8b1b7"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:58:16+00:00",
            "last_seen_at": "2026-09-06T01:58:16+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}