{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "dimaready.com",
    "measured_at": "2026-09-05T17:21:35+00:00",
    "engine_version": "2.8.0",
    "pattern_version": "2026.09.4",
    "summary": [
        "4 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "55 évolutions utiles sont retenues depuis la lecture précédente.",
        "4 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 4,
        "deduced": 0,
        "to_confirm": 2,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 1
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "25e6fbad3af94edc62545cde5d29356e3442e8ac048d7076fca1fe1eaec6751f",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "2db2e04b1be9f4f3ef4f1401805a723d2952fa32156a73e6190eea870481aa41",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "6f77de6c4303242bdf8a0d7befe8d2c4ed4fc243c560f200d1e82f30de785534",
                        "4b835c0bff773fb2582a4bdc3e9cdb9bd521c2907a0e03de23fc70fdfb412579",
                        "a296d4a8efc4874f71bc1fe464a5f88789de358552e5a1679f519fd055a5dcfd"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "3af6125a74d07845709d3ea5fba5fb792e499dbfe34d249c071f2325064e1a1d",
                    "title": "Openpgp",
                    "value": null,
                    "state": "to_confirm",
                    "state_label": "À confirmer",
                    "evidence_ids": [
                        "7d7feb4625b1c59187ab647bd597ff27c69ab26c633c3045b4b5504d36cf2668"
                    ],
                    "rationale": "security_txt_encryption_not_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 2,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "294268b7b2f3ec129bd5a24a8677d30eaa8d1624f0c23211e6e0ca537196f4e2",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR1",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "a3db3ee838d3172fca45705f601cd6712f201f33ca8771b0a354767b1bbc2f05"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "be5e685d40560a083691c61e864158d277037fc344b2c636612d1b6d1d32b296",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [
                        "e97aba8d5d760e668edea875951b311dd12951f06d3ae3f0648d24404408b48b"
                    ],
                    "rationale": "client_capability_unavailable"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "8f6bc80a0c23ccc244d78e1d016bc1597de1677df708c7d5fe6829e120f71c13",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "4b28ef898b77cac21431675cd1ef881455ed7eed54ba0d2c328cc2111cd4930c"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "d660794daa9a23a9d9c4cf9f74f36e9456a26f1155a71f3c9c92898d55151e31",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "dc73b7c9f02d4e6b2adb40da2f3a9f271488ee889153ae5a7382ea6a76e2ff04"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "8e4d936f9e58ad74b6e9eeeb59d6a22fb268f8bdfe80604bdec50918a33ebc72",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:46:48+00:00",
        "last_observed_at": "2026-09-05T17:21:35+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 25,
            "modified": 8,
            "stable": 9,
            "disappeared": 22
        },
        "meaningful_change_count": 55,
        "change_summary": {
            "appeared": 25,
            "modified": 8,
            "disappeared": 22,
            "stable": 9,
            "meaningful": 55,
            "volatile_filtered": 0,
            "unresolved": 0
        },
        "changes": [
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Canary signal",
                "before": null,
                "after": {
                    "matches": [],
                    "reason": "no_known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "not_observed"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Cookie",
                "before": null,
                "after": {
                    "http_only": true,
                    "name": "dimaready_session",
                    "same_site": "strict",
                    "secure": true
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Csp evidence",
                "before": null,
                "after": {
                    "enforced": true,
                    "frame_ancestors": true,
                    "hash_present": false,
                    "nonce_present": true,
                    "object_src": true,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dependency provider",
                "before": {
                    "critical": true,
                    "hosts": [
                        "cloudflare.com",
                        "david.ns.cloudflare.com",
                        "thea.ns.cloudflare.com"
                    ],
                    "id": "cloudflare",
                    "known": true,
                    "name": "Cloudflare",
                    "observation_count": 3,
                    "services": [
                        "cdn",
                        "security"
                    ],
                    "tracker": false
                },
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dependency provider",
                "before": null,
                "after": {
                    "critical": true,
                    "hosts": [
                        "mta-gw.infomaniak.ch",
                        "ns11.infomaniak.ch",
                        "ns12.infomaniak.ch"
                    ],
                    "id": "infomaniak",
                    "known": true,
                    "name": "Infomaniak",
                    "observation_count": 3,
                    "services": [
                        "dns",
                        "hosting",
                        "mail"
                    ],
                    "tracker": false
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dns address",
                "before": null,
                "after": "2001:1600::aaaa:0:0:80:5a",
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dns address",
                "before": "2606:4700:3033::6815:d14",
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dns address",
                "before": null,
                "after": "185.125.27.195",
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dns address",
                "before": "104.21.13.20",
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dns address",
                "before": "172.67.132.117",
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dns address",
                "before": "2606:4700:3036::ac43:8475",
                "after": null,
                "direction": "indeterminate"
            },
            {
                "status": "disappeared",
                "label": "Disparu",
                "title": "Dns nameserver",
                "before": "thea.ns.cloudflare.com",
                "after": null,
                "direction": "indeterminate"
            }
        ],
        "history_count": 3
    },
    "observations": [
        {
            "id": "01ef7572772971d55acb457d8fd4d5cb15f44b5f622348ed0c12a369b06ee09e",
            "type": "mail_policy_flag",
            "subject": "dimaready.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "07134c6138f5be75582550a60a968ef388184667473fc9c2970020d43c9ce1b5",
            "type": "tls_issuer",
            "subject": "dimaready.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR1",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2296a1fdf27cb57005014ebb03e1027f7137b22e593b0ae8dbdaa8ba735dcdba",
            "type": "dns_nameserver",
            "subject": "dimaready.com",
            "predicate": "uses_nameserver",
            "value": "ns11.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "235378deee19b67dbbf965a986af19f36040b00e0f277ff66789452e8fece339",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "297010bbaf4c5be671d5a606510d785e20d0c74044a1252a444d609f6f50a2ca",
            "type": "dmarc_record",
            "subject": "dimaready.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2b7f49c6441d2a8ded71bf586fa415094f8d793103902a8b115b96cd499b563d",
            "type": "dnssec_evidence",
            "subject": "dimaready.com",
            "predicate": "dnssec_depth",
            "value": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "source": "advanced_dnssec",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2bfeb37442a609acff5cdf30b01b1beeb868d3c66b791942efdc9b2631ec1188",
            "type": "mail_policy_flag",
            "subject": "dimaready.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2c0b048f9627945c03fcabb3e58e93968d712ff9c58672c88ce9b4ad35dde368",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "32adc49c5aaadf2283b4cb6c463b64f4684c4a27140fd5f09837c5ace78ff558",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "377015eccbfc91e4642458f69ba1229e2217e50be896621df1b25c18fd181b51",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "41d4d10f7f10678dd96a3c62ad8eaa386a80f3249491eaf8d97a6d463de9062c",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "referrer-policy",
            "value": [
                "no-referrer"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "488bda3df8d440ec72a8a3bb5e04c213986ee9c82fa4d88858343e73213b19a6",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4ba014d8e2838c61256e56a53c929b4d438d2c59d7e50f21d77d936e91894a47",
            "type": "mail_transport_evidence",
            "subject": "dimaready.com",
            "predicate": "mail_transport_depth",
            "value": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "source": "advanced_mail_transport",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4f58fb49e66350107fd3fffda616a5e0f3c0b49c208040b9224e6b2e7bf203a9",
            "type": "post_quantum_tls",
            "subject": "dimaready.com",
            "predicate": "post_quantum_tls",
            "value": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "source": "advanced_post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "536e301cdd606203a2ecb4885f466111d20dedcccd73ff13bc9090bafc05ceab",
            "type": "canary_signal",
            "subject": "dimaready.com",
            "predicate": "canary_detection",
            "value": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "source": "advanced_canary",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "5619b9099e950764c823e2e25468136a8a7d8c62e77ce6bb4fb8f5eeea086ae3",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-HaeTEi9GfJQwkAijTDMtwPCY'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; manifest-src 'self'; worker-src 'self'"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "59adb4b9e2057848b391678a43fd3f6e40f103491a13635f3063eca82aef6628",
            "type": "dmarc_policy",
            "subject": "dimaready.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "5d99dbeb45fa5112c9667cac253c752d486fa1f7c5bcb680eb2553c0300960d6",
            "type": "dns_nameserver",
            "subject": "dimaready.com",
            "predicate": "uses_nameserver",
            "value": "ns12.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "6261f7f14822abbaa423590f84a409ffca1a5d584acf5f17f630b49557d08015",
            "type": "cookie",
            "subject": "dimaready.com",
            "predicate": "sets_cookie",
            "value": {
                "http_only": true,
                "name": "dimaready_session",
                "same_site": "strict",
                "secure": true
            },
            "source": "privacy_cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "63f3f8d28947a5b3c9631c127a5ecf3d11a5f1d97b28c77e989d19c0f208edfd",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "7065707f818e58f5e6019d2a2d26d3d36169faffe69f09e3fb05e22621d85ecd",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "headers:coep_missing",
            "value": {
                "evidence": null,
                "severity": "info"
            },
            "source": "finding_coep_missing",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "7611b8b50c1c999ee9472618f60f6b18d73645e22ed3266d44badec6242ff43d",
            "type": "dns_address",
            "subject": "dimaready.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5a",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "7e18c9403f2cd2ba46bf57dd0ba069bb8fc7254492f2391d6a38039543c8ae9b",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "7ebc14a3ecfcecaa02a7017f1829ad6c47280885ec494bc95942fbf0ca86836e",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "8bf56193f180f06cdae1f6919811b0c588b25bb60d3ea98087c0c7b32580085b",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "96a832836ae7d93371294e039d2d98aea08846ed4f1a73fdaeef1a1478657096",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "b1296adfef847969e6642d529dc7def8ad6a4184ae194ac8ca653d8d9ed06e63",
            "type": "spf_policy",
            "subject": "dimaready.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "b14af40baa741dd016d70ccb00e77bb4f270055703571a3198b350e1b8719ef6",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "b38a419ca11df8976cc011bfb1ef9509234a561ec4a5585734eca41db6f3522b",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "permissions-policy",
            "value": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "b5d718cb886d943c9dc9c99a4922c757a5d8e6759cb624b12935c68620a8c5b9",
            "type": "modern_transport_evidence",
            "subject": "dimaready.com",
            "predicate": "modern_transport",
            "value": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR1",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-09-05T00:03:04+00:00",
                    "valid_to": "2026-12-04T00:03:03+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "source": "advanced_modern_transport",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "ba26edbdd2f9a76048cd44a513729d2be48c4adfaf7393c59add4f3d46548f7a",
            "type": "dependency_provider",
            "subject": "dimaready.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "c0ce682000f607616f179b0804b8c07a492db4aead1da93dcb7ad1f66406cbb7",
            "type": "csp_evidence",
            "subject": "dimaready.com",
            "predicate": "csp_depth",
            "value": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "source": "advanced_csp",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "c683f7ef154731fae7d28ec856f794b6253dd4760caef97c3eb815b6d3ddb52c",
            "type": "http_header",
            "subject": "dimaready.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=31536000; includeSubDomains"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "ce8983b6f8d3f6e4dacc336ad8f18934766ffa5da67b1e4e748629faf2f35827",
            "type": "tls_valid_to",
            "subject": "dimaready.com",
            "predicate": "valid_to",
            "value": "2026-12-04T00:03:03+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "d28f1d12f50fea023ebcc2490ef7aee30d6185eb8a17e92c3e6fb29a693b9cf7",
            "type": "technology",
            "subject": "dimaready.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "d8b242121192c74c8d0f725072699a6f26216a44b357a53394dc1890bc240499",
            "type": "spf_record",
            "subject": "dimaready.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "d95912ab0d4f7fc718cf639f24411e91fb4f9e2f8db230514a8e41d97b0ba115",
            "type": "module_finding",
            "subject": "dimaready.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "dec73cd0e3bd0bc5b08337f413153ec6b0646e5077784c5dfee31021334f0791",
            "type": "mail_policy_flag",
            "subject": "dimaready.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "f2c03182c4eb18554383c24bb7a0faf38f5a85f674f9464d61d2567ee6e02887",
            "type": "dns_address",
            "subject": "dimaready.com",
            "predicate": "resolves_to",
            "value": "185.125.27.195",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "f60aea4c939667d3a5844b6a0a370b67c95e0b1b877510043e7b9ba90575cbf9",
            "type": "openpgp_discovery",
            "subject": "dimaready.com",
            "predicate": "openpgp",
            "value": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "source": "advanced_openpgp",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "f900b18ad13505a81f1fec78d84cb47d790075c4e9f99c8fcca6f5af93830fb4",
            "type": "mail_exchanger",
            "subject": "dimaready.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-05T17:21:35+00:00"
        }
    ],
    "claims": [
        {
            "id": "25e6fbad3af94edc62545cde5d29356e3442e8ac048d7076fca1fe1eaec6751f",
            "subject": "dimaready.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "294268b7b2f3ec129bd5a24a8677d30eaa8d1624f0c23211e6e0ca537196f4e2",
            "subject": "dimaready.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR1",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "a3db3ee838d3172fca45705f601cd6712f201f33ca8771b0a354767b1bbc2f05"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "2db2e04b1be9f4f3ef4f1401805a723d2952fa32156a73e6190eea870481aa41",
            "subject": "dimaready.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "6f77de6c4303242bdf8a0d7befe8d2c4ed4fc243c560f200d1e82f30de785534",
                "4b835c0bff773fb2582a4bdc3e9cdb9bd521c2907a0e03de23fc70fdfb412579",
                "a296d4a8efc4874f71bc1fe464a5f88789de358552e5a1679f519fd055a5dcfd"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "3af6125a74d07845709d3ea5fba5fb792e499dbfe34d249c071f2325064e1a1d",
            "subject": "dimaready.com",
            "predicate": "openpgp",
            "value": null,
            "state": "to_confirm",
            "rationale": "security_txt_encryption_not_observed",
            "evidence_ids": [
                "7d7feb4625b1c59187ab647bd597ff27c69ab26c633c3045b4b5504d36cf2668"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "7bc4f8414ab4ba61a70759bcada769eeabe42339fc0aa795830f91f1857f23f2",
            "subject": "dimaready.com",
            "predicate": "canary_detection",
            "value": false,
            "state": "to_confirm",
            "rationale": "no_known_passive_signature_observed",
            "evidence_ids": [
                "446cf7af5e15199c3195ab0f40688c34d2c6557a48c6aeadeb0fedeaa8df5b19"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "8e4d936f9e58ad74b6e9eeeb59d6a22fb268f8bdfe80604bdec50918a33ebc72",
            "subject": "dimaready.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "8f6bc80a0c23ccc244d78e1d016bc1597de1677df708c7d5fe6829e120f71c13",
            "subject": "dimaready.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "4b28ef898b77cac21431675cd1ef881455ed7eed54ba0d2c328cc2111cd4930c"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "be5e685d40560a083691c61e864158d277037fc344b2c636612d1b6d1d32b296",
            "subject": "dimaready.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "client_capability_unavailable",
            "evidence_ids": [
                "e97aba8d5d760e668edea875951b311dd12951f06d3ae3f0648d24404408b48b"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        },
        {
            "id": "d660794daa9a23a9d9c4cf9f74f36e9456a26f1155a71f3c9c92898d55151e31",
            "subject": "dimaready.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "dc73b7c9f02d4e6b2adb40da2f3a9f271488ee889153ae5a7382ea6a76e2ff04"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "c3ba349779360435d85174fbfd1424ebe5c43bba8ad290235a0771657752684a",
            "observation_ids": [
                "01ef7572772971d55acb457d8fd4d5cb15f44b5f622348ed0c12a369b06ee09e"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a3db3ee838d3172fca45705f601cd6712f201f33ca8771b0a354767b1bbc2f05",
            "observation_ids": [
                "07134c6138f5be75582550a60a968ef388184667473fc9c2970020d43c9ce1b5"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR1",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "6f77de6c4303242bdf8a0d7befe8d2c4ed4fc243c560f200d1e82f30de785534",
            "observation_ids": [
                "2296a1fdf27cb57005014ebb03e1027f7137b22e593b0ae8dbdaa8ba735dcdba"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "9dff3868b397222fa8c5f18c2a020ed3a9192bd7166f7adddf06fffab60589d7",
            "observation_ids": [
                "235378deee19b67dbbf965a986af19f36040b00e0f277ff66789452e8fece339"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "e809572e75a5f245849a7f142c81d1457c8e66e6b29143626c9de3c3671a5efd",
            "observation_ids": [
                "297010bbaf4c5be671d5a606510d785e20d0c74044a1252a444d609f6f50a2ca"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a366852c5926972b21d257968275e36215634f3f0f63f37ff2d275c7a40ddd6d",
            "observation_ids": [
                "2b7f49c6441d2a8ded71bf586fa415094f8d793103902a8b115b96cd499b563d"
            ],
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "d5fcfeef2e43c54fdf790569cc0337de7b8083dfcb114fb5ce5cfb795b10aeb2",
            "observation_ids": [
                "2bfeb37442a609acff5cdf30b01b1beeb868d3c66b791942efdc9b2631ec1188"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "f0eb716e61d3478d7f1271dbe347250e15532b4a9a7a23ea37c9d4b32458025b",
            "observation_ids": [
                "2c0b048f9627945c03fcabb3e58e93968d712ff9c58672c88ce9b4ad35dde368"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "94d6e965f5e44267833372e5b16d3c0be1abb498a309ea7ec078462f4e326741",
            "observation_ids": [
                "32adc49c5aaadf2283b4cb6c463b64f4684c4a27140fd5f09837c5ace78ff558"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "ee982ef0312e8a10d991bf266b990e03a05f3e1cde38aee3c6bf93a7ddc37f65",
            "observation_ids": [
                "377015eccbfc91e4642458f69ba1229e2217e50be896621df1b25c18fd181b51"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "162b86bbea71c55fda34382a0f462cddf43198e589274cc6b621d3d7c3dc86f7",
            "observation_ids": [
                "41d4d10f7f10678dd96a3c62ad8eaa386a80f3249491eaf8d97a6d463de9062c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "350f1e11bbb7b265483ed592a2ee0a7e5e777ff676238c9a28f7a96959842eae",
            "observation_ids": [
                "488bda3df8d440ec72a8a3bb5e04c213986ee9c82fa4d88858343e73213b19a6"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a9d0055872bf8c9f58e07b9dda6c399f3fbf870763d4cbd466a1a3f4b12f3ad4",
            "observation_ids": [
                "4ba014d8e2838c61256e56a53c929b4d438d2c59d7e50f21d77d936e91894a47"
            ],
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "e97aba8d5d760e668edea875951b311dd12951f06d3ae3f0648d24404408b48b",
            "observation_ids": [
                "4f58fb49e66350107fd3fffda616a5e0f3c0b49c208040b9224e6b2e7bf203a9"
            ],
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "446cf7af5e15199c3195ab0f40688c34d2c6557a48c6aeadeb0fedeaa8df5b19",
            "observation_ids": [
                "536e301cdd606203a2ecb4885f466111d20dedcccd73ff13bc9090bafc05ceab"
            ],
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a5e123719a44f53421fda3dc94848b898460dd4475daa7fd4a3bdc9c568ac49e",
            "observation_ids": [
                "5619b9099e950764c823e2e25468136a8a7d8c62e77ce6bb4fb8f5eeea086ae3"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-HaeTEi9GfJQwkAijTDMtwPCY'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; manifest-src 'self'; worker-src 'self'"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4b28ef898b77cac21431675cd1ef881455ed7eed54ba0d2c328cc2111cd4930c",
            "observation_ids": [
                "59adb4b9e2057848b391678a43fd3f6e40f103491a13635f3063eca82aef6628"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4b835c0bff773fb2582a4bdc3e9cdb9bd521c2907a0e03de23fc70fdfb412579",
            "observation_ids": [
                "5d99dbeb45fa5112c9667cac253c752d486fa1f7c5bcb680eb2553c0300960d6"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "00963a4e2f8f4d2259192b2352280fa0b8c3a6edb7d497743eb408f8c0728580",
            "observation_ids": [
                "6261f7f14822abbaa423590f84a409ffca1a5d584acf5f17f630b49557d08015"
            ],
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "excerpt": {
                "http_only": true,
                "name": "dimaready_session",
                "same_site": "strict",
                "secure": true
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "46c48c9cec11755627573e52af3785fa29f0e3dda3f6836a40325265ebc05edb",
            "observation_ids": [
                "63f3f8d28947a5b3c9631c127a5ecf3d11a5f1d97b28c77e989d19c0f208edfd"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "37781e45d8cd90e4398aa6b8f63c68fcd89ebe48bfe083c7444b8b17fbd34627",
            "observation_ids": [
                "7065707f818e58f5e6019d2a2d26d3d36169faffe69f09e3fb05e22621d85ecd"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a4962c4c9ec9a4279e0edabbe889e07eb764e3d48da373eee657d09053530d95",
            "observation_ids": [
                "7611b8b50c1c999ee9472618f60f6b18d73645e22ed3266d44badec6242ff43d"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5a",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "ae45bf8106b9fcd2367f86162b12fbb754ba43c3d4d5f40214fee20faea66709",
            "observation_ids": [
                "7e18c9403f2cd2ba46bf57dd0ba069bb8fc7254492f2391d6a38039543c8ae9b"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "60900792a73b88695e222807a4f8f61fbfd5287ef6b41eb7ba5f21dbae1241fe",
            "observation_ids": [
                "7ebc14a3ecfcecaa02a7017f1829ad6c47280885ec494bc95942fbf0ca86836e"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "d6fb24c63c4b0d33dab2b80e55aa1c57cc164451a914c22750ba45b242efefb2",
            "observation_ids": [
                "8bf56193f180f06cdae1f6919811b0c588b25bb60d3ea98087c0c7b32580085b"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "89a42fe3d435a586b67587c5fb6be5b96be03644947cd5c0819bcd2d8af891fd",
            "observation_ids": [
                "96a832836ae7d93371294e039d2d98aea08846ed4f1a73fdaeef1a1478657096"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "dc73b7c9f02d4e6b2adb40da2f3a9f271488ee889153ae5a7382ea6a76e2ff04",
            "observation_ids": [
                "b1296adfef847969e6642d529dc7def8ad6a4184ae194ac8ca653d8d9ed06e63"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4a17682ff0c2987d9fffb026f4574be9160eaba8dcef993f9a20aa3fb7357987",
            "observation_ids": [
                "b14af40baa741dd016d70ccb00e77bb4f270055703571a3198b350e1b8719ef6"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "c3e0bbab911bf01494fb02f2f0770d0e88c8615ab13fd9b29d2296b425c63352",
            "observation_ids": [
                "b38a419ca11df8976cc011bfb1ef9509234a561ec4a5585734eca41db6f3522b"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2064081c922a92c3e06e2c26c59b895cfc1e49f80786488d6540e15bc432bf2b",
            "observation_ids": [
                "b5d718cb886d943c9dc9c99a4922c757a5d8e6759cb624b12935c68620a8c5b9"
            ],
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR1",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-09-05T00:03:04+00:00",
                    "valid_to": "2026-12-04T00:03:03+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a296d4a8efc4874f71bc1fe464a5f88789de358552e5a1679f519fd055a5dcfd",
            "observation_ids": [
                "ba26edbdd2f9a76048cd44a513729d2be48c4adfaf7393c59add4f3d46548f7a"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "11a57425fed3396e8fa1670aade1335be69a93e60237f05a20f75e897d2f0d9d",
            "observation_ids": [
                "c0ce682000f607616f179b0804b8c07a492db4aead1da93dcb7ad1f66406cbb7"
            ],
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "984e7b6a6b9215f553a476c7659f07468c94d1ae7023d7b7d81452a4d481e6ab",
            "observation_ids": [
                "c683f7ef154731fae7d28ec856f794b6253dd4760caef97c3eb815b6d3ddb52c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=31536000; includeSubDomains"
            ],
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "4bfbad5723a4883eb93eec2c2451c2d3405dcb18c7a726d1554d483cf3c60484",
            "observation_ids": [
                "ce8983b6f8d3f6e4dacc336ad8f18934766ffa5da67b1e4e748629faf2f35827"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-12-04T00:03:03+00:00",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "335fb3a1c7fb848edd6de545a4856e26aaa8387cdcbb4f9fcdcd8ea0e1dac792",
            "observation_ids": [
                "d28f1d12f50fea023ebcc2490ef7aee30d6185eb8a17e92c3e6fb29a693b9cf7"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "a892ec0c291fcdfdadc04c4bf3b0f281c6ec85ffb81ec9634717d6fb068a3f3a",
            "observation_ids": [
                "d8b242121192c74c8d0f725072699a6f26216a44b357a53394dc1890bc240499"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "86dd8c6ac18298a85b91ec7e10910079cbf05badd86d7b9ef39f353099e3b4c4",
            "observation_ids": [
                "d95912ab0d4f7fc718cf639f24411e91fb4f9e2f8db230514a8e41d97b0ba115"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "6eec1cc28f4263fbcbcc2aa663d09ab5fb677d15847f0366d10e39b5d7fa8a8e",
            "observation_ids": [
                "dec73cd0e3bd0bc5b08337f413153ec6b0646e5077784c5dfee31021334f0791"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "2a0933dc5c718bf6bb5d849cb1ea5497e6057a09b162bf3b2d42f59b2caf37e0",
            "observation_ids": [
                "f2c03182c4eb18554383c24bb7a0faf38f5a85f674f9464d61d2567ee6e02887"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.195",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "7d7feb4625b1c59187ab647bd597ff27c69ab26c633c3045b4b5504d36cf2668",
            "observation_ids": [
                "f60aea4c939667d3a5844b6a0a370b67c95e0b1b877510043e7b9ba90575cbf9"
            ],
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        },
        {
            "id": "ce070b303a42c5599cd0c7b71400227316c67d3f25f973d8d0f8402c87919e71",
            "observation_ids": [
                "f900b18ad13505a81f1fec78d84cb47d790075c4e9f99c8fcca6f5af93830fb4"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-05T17:21:35+00:00",
            "last_seen_at": "2026-09-05T17:21:35+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "6b01078bd0fd0f5ced292b9c7dd90354a2de656f1c3de6cde097ce975f1d22d9"
}