{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "darfoufa.com",
    "measured_at": "2026-09-04T19:34:09+00:00",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "summary": [
        "3 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "Aucune évolution utile n’est retenue depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 3,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "18af701bd492b14924223136f2d4e05039091c0773e9f0e07bcb54370f84840f",
                    "title": "Depends on provider",
                    "value": "OVHcloud",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "4812963b2a4ee296bdb646d565d1813753193b13e85b5cc7368ec2d2f1e32bba",
                        "0961c865d3699291e541caea89381e85d921514d32225d2d21e2b2da786e1c35",
                        "feb7593b3cf89689461e7d222099bacd97e0b2b287c30b79d13a13ba9a559abb"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "6b87ec5acb7d01e86c8307b782fcb234c7773e55bbed42cb99f981bd19278b9d",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "94ec9f87aaa75cf940076286041df5577c082f8f493fcedf74253295b9643c42",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "e0af62ce51950457e0a26bca7b6cc239d086da113dbf0fe0e2d4f0cb3f553c1f",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "458ee8e291926a8313e41be3f16125d53cb4f5e15757cb9488baceb56970d405"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "f471c5de76aca1f0527fc2deccd85ae1a6ca07e103a438fcccb367d50e1933a4",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "abb38dd9ef0f701f348198e77257576a9f36c22261d770e7334cb710ca7ed08c",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "ee6e64a562507c2b6a152088e883eb23b730775ad266b52791602685b456aba0"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "946d4b833c94e0c8fa77e1ecfeae0a44686922dc82f11a80251600c370b1b3e1",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:34:09+00:00",
        "last_observed_at": "2026-09-04T19:34:09+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "meaningful_change_count": 0,
        "change_summary": {
            "appeared": 0,
            "modified": 0,
            "disappeared": 0,
            "stable": 0,
            "meaningful": 0,
            "volatile_filtered": 0,
            "unresolved": 0
        },
        "changes": [],
        "history_count": 1
    },
    "observations": [
        {
            "id": "089cf0721c203925fea33119b8676c128eb0e0ae726b42c5dad6e0991f4ae43d",
            "type": "technology",
            "subject": "darfoufa.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "10864f92f02c97cef1ed364de9cb1b22f1c324b48f7ba0bce54add1807a6648b",
            "type": "dependency_provider",
            "subject": "darfoufa.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "dns105.ovh.net",
                    "mx1.mail.ovh.net",
                    "mx2.mail.ovh.net",
                    "mx3.mail.ovh.net",
                    "ns105.ovh.net"
                ],
                "id": "ovhcloud",
                "known": true,
                "name": "OVHcloud",
                "observation_count": 5,
                "services": [
                    "cloud",
                    "dns",
                    "hosting"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "120a16f5921c69e0ccd3d6defe6563b2649e10a44210d6031a3b0d171db729bd",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "12138cf403a30439a036382236226ddc68b32cc607d66a5016ed3398c60b3d09",
            "type": "tls_issuer",
            "subject": "darfoufa.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "2f062e7df78a5511bed29ea0b5eb008af1eee404ac6f43d688804dbb90f1f601",
            "type": "mail_exchanger",
            "subject": "darfoufa.com",
            "predicate": "uses_mail_exchanger",
            "value": "mx2.mail.ovh.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "329095af17cf0d44d14755423a0b093ead57193a261592ab19dcbd28c90b5f53",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "38dc88c4b2c4dfaddff143bf035249326d810b8215ccc1d571aa9b5e1b558176",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "4da0d833da4e1f86c98eef178fb5a48a0a661e59b39fc6ec126504a3187d8dfa",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "524527aa06d5fd75718f61a0d1261b071c93e4e8bb6bb06276482dc8279d7852",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "5b65e80a4598d927ed5258cd94c881c750996caca4b7e151f949a8e757846bed",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "mail_trust:mail_dmarc_missing",
            "value": {
                "evidence": null,
                "severity": "high"
            },
            "source": "finding_mail_dmarc_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "5d8a835fb1e4ac80af7c9a9ddfaa81b13206e1c0582f843db26d73a636f5a956",
            "type": "mail_policy_flag",
            "subject": "darfoufa.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "6417ad49dcee26341fe86375f415ccb43c1ed98751099f207cc049d83a6cf51f",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "76fddc6bc40aa8b59752aa21ec78e4a59465adbba52f4a47bd4207c184157263",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "7abe7922a28a2d2deacb4cb4e3bb919abb5c32d72b465a9426ad922de71331e7",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "dns105.ovh.net",
                    "ns105.ovh.net"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "7c982e618e4a588de46a722a0d5cfb72eacaefad73fe109c5ad13b81f2bb4a59",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "referrer-policy",
            "value": [
                "strict-origin-when-cross-origin"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "8658d39c662d49fa151e86f753b395bf61d46f1fe0f8f5c01352a4f2bbd90ce2",
            "type": "mail_exchanger",
            "subject": "darfoufa.com",
            "predicate": "uses_mail_exchanger",
            "value": "mx1.mail.ovh.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "8c58248c99fe2d9f63f6f7a7260c8def4603166be7e4e456119f6f4553acf2a5",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "dns105.ovh.net",
                    "ns105.ovh.net"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "8ccf873c25c966ca7c6c26c950cdea00733482fc3a2692af09fb730fc33b5edd",
            "type": "mail_exchanger",
            "subject": "darfoufa.com",
            "predicate": "uses_mail_exchanger",
            "value": "mx3.mail.ovh.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "9023a80389c58e1ab0363c676cb1fda3edb1d637a977b1e7c8fdd01f87fce070",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "dns:dmarc_missing",
            "value": {
                "evidence": null,
                "severity": "medium"
            },
            "source": "finding_dmarc_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "93f956d590dbbf2a4ff26d4561d9569e22dc9fd8940ac5ba3269e9526f2cf69a",
            "type": "dns_nameserver",
            "subject": "darfoufa.com",
            "predicate": "uses_nameserver",
            "value": "ns105.ovh.net",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "9ac64a574a8b2fa71c57bca44dd6897287eeafc9b76a7071fe035fe36987f698",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), usb=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "9ba709646287bfc183bdfb6a6b961084ca3b039044a56d8432470f6fb61cc49c",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: https:; style-src 'self'; script-src 'self'; connect-src 'self'; font-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "9bff3174bd4811e8a113e6060bcfc6235b8a95ff1ceeca835623bab5b6ce3e32",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "a4e326c70017c9105c0fccb2d674615dbf62a51daff8ae2f4209dad558fab81f",
            "type": "mail_policy_flag",
            "subject": "darfoufa.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "aa4d79542fa7ca2b0f881516d40a030a18f26329309793fd6d180c73eb536932",
            "type": "dns_address",
            "subject": "darfoufa.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5b",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "ad61ca8b8c04a2b06f54470c8234bab51fe07645cdd9a10e5c6d1ab0a4c13bb9",
            "type": "mail_policy_flag",
            "subject": "darfoufa.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "b509269299e212e1372b3693b3ed07cceb09c349d41fa71a1bf9772170f89164",
            "type": "http_header",
            "subject": "darfoufa.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "c6ff0b59b16674751aec99690ab1bb43b3cfb73182200fca40024b9da817ee9a",
            "type": "dns_nameserver",
            "subject": "darfoufa.com",
            "predicate": "uses_nameserver",
            "value": "dns105.ovh.net",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "c877ca6851622df6fb7eefd5b3f39b59c3484d572e6c227a040320c89d052977",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "d29807baff68973c58309a236ff7a2ce5d583d61537e6a8d1686c64e8f09d708",
            "type": "spf_policy",
            "subject": "darfoufa.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "d55b0f005f758e2afe666eeb91c2e714405a71264c234861727124bc0fd64a1c",
            "type": "dns_address",
            "subject": "darfoufa.com",
            "predicate": "resolves_to",
            "value": "185.125.27.197",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "dfcf32783821ddc630115200e99d13876170f68cbe32b04843f565a60eb1a6ed",
            "type": "module_finding",
            "subject": "darfoufa.com",
            "predicate": "headers:coep_missing",
            "value": {
                "evidence": null,
                "severity": "info"
            },
            "source": "finding_coep_missing",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "f7b43c9eb0796307ccc071467dbc5d5529bb60dc24829bdf08d24e472a49d30f",
            "type": "spf_record",
            "subject": "darfoufa.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:mx.ovh.com -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "fa74400d00be110b0e85bfbeceb733f9958262f14e3f6a6127c1c9d6c7da8503",
            "type": "tls_valid_to",
            "subject": "darfoufa.com",
            "predicate": "valid_to",
            "value": "2026-11-06T17:51:10+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:09+00:00"
        }
    ],
    "claims": [
        {
            "id": "18af701bd492b14924223136f2d4e05039091c0773e9f0e07bcb54370f84840f",
            "subject": "darfoufa.com",
            "predicate": "depends_on_provider",
            "value": "OVHcloud",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "4812963b2a4ee296bdb646d565d1813753193b13e85b5cc7368ec2d2f1e32bba",
                "0961c865d3699291e541caea89381e85d921514d32225d2d21e2b2da786e1c35",
                "feb7593b3cf89689461e7d222099bacd97e0b2b287c30b79d13a13ba9a559abb"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "6b87ec5acb7d01e86c8307b782fcb234c7773e55bbed42cb99f981bd19278b9d",
            "subject": "darfoufa.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "946d4b833c94e0c8fa77e1ecfeae0a44686922dc82f11a80251600c370b1b3e1",
            "subject": "darfoufa.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "94ec9f87aaa75cf940076286041df5577c082f8f493fcedf74253295b9643c42",
            "subject": "darfoufa.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "abb38dd9ef0f701f348198e77257576a9f36c22261d770e7334cb710ca7ed08c",
            "subject": "darfoufa.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "ee6e64a562507c2b6a152088e883eb23b730775ad266b52791602685b456aba0"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "e0af62ce51950457e0a26bca7b6cc239d086da113dbf0fe0e2d4f0cb3f553c1f",
            "subject": "darfoufa.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "458ee8e291926a8313e41be3f16125d53cb4f5e15757cb9488baceb56970d405"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        },
        {
            "id": "f471c5de76aca1f0527fc2deccd85ae1a6ca07e103a438fcccb367d50e1933a4",
            "subject": "darfoufa.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "54133f661a7f127fcda75608d34f4ccb018bc7d23d2c632ed991695790a239b1",
            "observation_ids": [
                "089cf0721c203925fea33119b8676c128eb0e0ae726b42c5dad6e0991f4ae43d"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "4812963b2a4ee296bdb646d565d1813753193b13e85b5cc7368ec2d2f1e32bba",
            "observation_ids": [
                "10864f92f02c97cef1ed364de9cb1b22f1c324b48f7ba0bce54add1807a6648b"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "dns105.ovh.net",
                    "mx1.mail.ovh.net",
                    "mx2.mail.ovh.net",
                    "mx3.mail.ovh.net",
                    "ns105.ovh.net"
                ],
                "id": "ovhcloud",
                "known": true,
                "name": "OVHcloud",
                "observation_count": 5,
                "services": [
                    "cloud",
                    "dns",
                    "hosting"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "26c894e98d62e2a109d0dade0b305a0c1ad167e062d581a174db374623b18e80",
            "observation_ids": [
                "120a16f5921c69e0ccd3d6defe6563b2649e10a44210d6031a3b0d171db729bd"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "458ee8e291926a8313e41be3f16125d53cb4f5e15757cb9488baceb56970d405",
            "observation_ids": [
                "12138cf403a30439a036382236226ddc68b32cc607d66a5016ed3398c60b3d09"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "d62438acd8b408dda45a4d5dd0f386246dd9c32c20858b287a6dc2ef58cbc207",
            "observation_ids": [
                "2f062e7df78a5511bed29ea0b5eb008af1eee404ac6f43d688804dbb90f1f601"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mx2.mail.ovh.net",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "9d8979021e2696d7251c1210fd52d01f90adea61a302e4f4a1d7fe41321dccd7",
            "observation_ids": [
                "329095af17cf0d44d14755423a0b093ead57193a261592ab19dcbd28c90b5f53"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "66aa1d5671b55805ff383577b69c7cc5b70f8ac0cb29e7c86d030caeeaa529fb",
            "observation_ids": [
                "38dc88c4b2c4dfaddff143bf035249326d810b8215ccc1d571aa9b5e1b558176"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "deaad91874a75a5429ef518eef962fc909fa481b977a552a429b38af731598e7",
            "observation_ids": [
                "4da0d833da4e1f86c98eef178fb5a48a0a661e59b39fc6ec126504a3187d8dfa"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "d07f5ca3ad98f3c189277eee8bd1fa15746bf89d3cb89038cb6fbe07be80b2e8",
            "observation_ids": [
                "524527aa06d5fd75718f61a0d1261b071c93e4e8bb6bb06276482dc8279d7852"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "4612d76b0293caf6f86ff0f2ed6ed3ee5b85001b42326d61072bb64600ee3705",
            "observation_ids": [
                "5b65e80a4598d927ed5258cd94c881c750996caca4b7e151f949a8e757846bed"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "13a99ae02a2e051fedb9b0ec3af7381994c9eccd9f350d862d00eda00b262a31",
            "observation_ids": [
                "5d8a835fb1e4ac80af7c9a9ddfaa81b13206e1c0582f843db26d73a636f5a956"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "e5a77c9d31bee4948a48c7e5f96465d60ae991d71572a5e1bf5699c1caf066fb",
            "observation_ids": [
                "6417ad49dcee26341fe86375f415ccb43c1ed98751099f207cc049d83a6cf51f"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "169c31f34701ac8b4fd49cf157571457f19837c74564edbb681eb4cff54822b4",
            "observation_ids": [
                "76fddc6bc40aa8b59752aa21ec78e4a59465adbba52f4a47bd4207c184157263"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "a13d72220e1a5d1af403bb91cfe04d58a2d3f7ca974cebca5584aaed52d84f3a",
            "observation_ids": [
                "7abe7922a28a2d2deacb4cb4e3bb919abb5c32d72b465a9426ad922de71331e7"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "dns105.ovh.net",
                    "ns105.ovh.net"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "82b4eb137e4ceb39df539fa73c652e252491f9014705fff17baba457fa36aeee",
            "observation_ids": [
                "7c982e618e4a588de46a722a0d5cfb72eacaefad73fe109c5ad13b81f2bb4a59"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "053d5910e8d57a51bf283891e6e891b1d6692cfaa95ca2faf5d3a69c3e6c6300",
            "observation_ids": [
                "8658d39c662d49fa151e86f753b395bf61d46f1fe0f8f5c01352a4f2bbd90ce2"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mx1.mail.ovh.net",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "280ba78273e5be6a147f01e76835d8bbd412a630bd2b81785a64506a2020836b",
            "observation_ids": [
                "8c58248c99fe2d9f63f6f7a7260c8def4603166be7e4e456119f6f4553acf2a5"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "dns105.ovh.net",
                    "ns105.ovh.net"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "28e7bc31967581ceed476fc91d9f075bb52b7ca82e987d568e09ef944f4f34f4",
            "observation_ids": [
                "8ccf873c25c966ca7c6c26c950cdea00733482fc3a2692af09fb730fc33b5edd"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mx3.mail.ovh.net",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "b108711770fefd7f319365c442db97bdf90b2600245de84c718a2770394db43c",
            "observation_ids": [
                "9023a80389c58e1ab0363c676cb1fda3edb1d637a977b1e7c8fdd01f87fce070"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "0961c865d3699291e541caea89381e85d921514d32225d2d21e2b2da786e1c35",
            "observation_ids": [
                "93f956d590dbbf2a4ff26d4561d9569e22dc9fd8940ac5ba3269e9526f2cf69a"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns105.ovh.net",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "998dce3408962c40df12f57cccdcf882c46b8c36fd6a32871700ed4b1f285ed1",
            "observation_ids": [
                "9ac64a574a8b2fa71c57bca44dd6897287eeafc9b76a7071fe035fe36987f698"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), usb=()"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "cbee82497783f4c74c11dcd51fe98e22e45414038c8c2868858dd00273be034b",
            "observation_ids": [
                "9ba709646287bfc183bdfb6a6b961084ca3b039044a56d8432470f6fb61cc49c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: https:; style-src 'self'; script-src 'self'; connect-src 'self'; font-src 'self'; manifest-src 'self'; media-src 'self'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "e846af19205bad86e03451978bd31a50982558da543ebef7387c867419631ef9",
            "observation_ids": [
                "9bff3174bd4811e8a113e6060bcfc6235b8a95ff1ceeca835623bab5b6ce3e32"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "8ce27d0dd8d99cf8ec9bc11220cb983e5e256c7d79a713d0298ebdab95a2a8b1",
            "observation_ids": [
                "a4e326c70017c9105c0fccb2d674615dbf62a51daff8ae2f4209dad558fab81f"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "8ea92001c1d6563aa207bd34e68795958ce6b7f380c9ca3fc21dbd931cc40b18",
            "observation_ids": [
                "aa4d79542fa7ca2b0f881516d40a030a18f26329309793fd6d180c73eb536932"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "112a568b00103ffb2a6b781ed5c59115bc90b7869a6912f5b3f6f3ba525557d6",
            "observation_ids": [
                "ad61ca8b8c04a2b06f54470c8234bab51fe07645cdd9a10e5c6d1ab0a4c13bb9"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "b20b94ee864b9af06549c2509659b6d6f3fcd40f51d9643e549b32cb792cdfb9",
            "observation_ids": [
                "b509269299e212e1372b3693b3ed07cceb09c349d41fa71a1bf9772170f89164"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "feb7593b3cf89689461e7d222099bacd97e0b2b287c30b79d13a13ba9a559abb",
            "observation_ids": [
                "c6ff0b59b16674751aec99690ab1bb43b3cfb73182200fca40024b9da817ee9a"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "dns105.ovh.net",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "fe8a94e75df7e0a503249011b3ed7913161c33e69a475d7b9653e8fe4dd69bc4",
            "observation_ids": [
                "c877ca6851622df6fb7eefd5b3f39b59c3484d572e6c227a040320c89d052977"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "ee6e64a562507c2b6a152088e883eb23b730775ad266b52791602685b456aba0",
            "observation_ids": [
                "d29807baff68973c58309a236ff7a2ce5d583d61537e6a8d1686c64e8f09d708"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "ad8c2535aced5553de5e041a3b2352c6300d103fb6603b9f052e4dc26c2060d1",
            "observation_ids": [
                "d55b0f005f758e2afe666eeb91c2e714405a71264c234861727124bc0fd64a1c"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "d6961aadbcc4466945c6a15063e6919cee353f2c85d1b41dd7123b22bd0ab25c",
            "observation_ids": [
                "dfcf32783821ddc630115200e99d13876170f68cbe32b04843f565a60eb1a6ed"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "5ab1bd4ca14fd5545e69cf2c11261399fd99c410e2d2e906b646cdf0c08243ac",
            "observation_ids": [
                "f7b43c9eb0796307ccc071467dbc5d5529bb60dc24829bdf08d24e472a49d30f"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:mx.ovh.com -all",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        },
        {
            "id": "10c561a44ca1440e09b0379f23f871857ec5c734c7ebbe6b8bd716ecc2feed94",
            "observation_ids": [
                "fa74400d00be110b0e85bfbeceb733f9958262f14e3f6a6127c1c9d6c7da8503"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-06T17:51:10+00:00",
            "first_seen_at": "2026-09-04T19:34:09+00:00",
            "last_seen_at": "2026-09-04T19:34:09+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "72fc6e49e18a58ea91f8daee7a4fb3ff7c00f98ff5e15769407c7d2b65100d78"
}