{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "ekb-conseils.com",
    "measured_at": "2026-09-04T19:34:34+00:00",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "summary": [
        "5 observations publiques sont documentées dans ce dossier.",
        "2 dépendances publiques structurantes sont visibles.",
        "Aucune évolution utile n’est retenue depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 5,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "3f654195b43d72b5a2a61bd25e11d0c2dc08f3a561c9eb089c529cbdf49a2002",
                    "title": "Depends on provider",
                    "value": "Cloudflare",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806",
                        "31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d",
                        "87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "6e6c8d0ec38bff58a9dd30421f10f1b9af39cc65301f38701aeabb6fcf0467ba",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "edee7870d98894f78f453ad768b9d27775e1930394231364c6eb990f9a081206",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "22ede046fd64ff593cc5b3b14370b7f4f8d8c87c394a15053cf9a7aa2ecd9c10",
                    "title": "Tls issuer",
                    "value": "C = US, O = Google Trust Services, CN = WE1",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "e811053c309bfafdbca2fbaae2903d65d56bfdb9e5a8d46c6661b81bff52f4e8"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "9fa18e7ef8b735ecbb6d2b3ca8ac855d8c570b925983c918a0f700b9206dcb91",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "098aeb028abba467eda0d9dded083fed1d9789cc6e2fb92a0a42f1c5b034c99a",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "5b8dbb98132fc9ba1923359f7c7937d21d70e6b244c74cf07d33f6611423d593"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "6fa755d642122c6988d99c8e3e02ac4ffb0c6c49c0f9c78a6eba995e46d3b1d6",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "9db624ccd25ec3eb77148c9f1c0145c02c96be084e8b285e4d2e5377783c24f3",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81"
                    ],
                    "rationale": "provider_observed_once"
                },
                {
                    "id": "a010fa2262f897eb38bcf6b41a9a285d40ab510adf10bc8d3d0de62ddd524ff2",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:34:34+00:00",
        "last_observed_at": "2026-09-04T19:34:34+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "meaningful_change_count": 0,
        "change_summary": {
            "appeared": 0,
            "modified": 0,
            "disappeared": 0,
            "stable": 0,
            "meaningful": 0,
            "volatile_filtered": 0,
            "unresolved": 0
        },
        "changes": [],
        "history_count": 1
    },
    "observations": [
        {
            "id": "00c8165010d0e909372be2eafc925490468bcc69e842dc37293971a56c1e995b",
            "type": "dns_address",
            "subject": "ekb-conseils.com",
            "predicate": "resolves_to",
            "value": "172.67.172.35",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "0a0c7ebb19cfe9fed3b0435ec49829eddd1f668fa0af31f0d0d9ae8783a44928",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "0bfb37b6a408f980ede140b22bf68ebc0cb069ffaca7273af0e1a6f596201cee",
            "type": "dns_nameserver",
            "subject": "ekb-conseils.com",
            "predicate": "uses_nameserver",
            "value": "grannbo.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "0ee3b2f984cbc1dc858c661ecbf44709ae0d3e41e09f3c94d59c8bb05ab986d4",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "339e2cf5f7bd75b73f725c7bde9911a4c3401c64cbd0ea22fa3e74492a607a28",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "345fca9ea1cd3ef2dee911ae4c0c75083a3058e7062fc07bcc107d576b11709f",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "dependencies:dependency_concentration",
            "value": {
                "evidence": "75%",
                "severity": "medium"
            },
            "source": "finding_dependency_concentration",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "46b61fb07d68cb05664e73391a9cea526d93e90b7b9c317b5d7129156358312d",
            "type": "tls_valid_to",
            "subject": "ekb-conseils.com",
            "predicate": "valid_to",
            "value": "2026-11-02T17:28:06+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "49df849cd63833be5e52925b1ff7b71251f0f15d8a569ee590bfd58483c81316",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "501cca4e283182154d2b5173bddf6428be51c2c715a061fb1c2a1a8a527f26ff",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "52a9516c094fbe27c53e819a36a330faee0262fd504366ce3cc6e0863336a05a",
            "type": "dns_address",
            "subject": "ekb-conseils.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3031::6815:2fc0",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "55a616bdd33bf146ddcd4933e71a5263b02e76b30f20d2d649e62b4f57e9a226",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "headers:hsts_no_subdomains",
            "value": {
                "evidence": "max-age=63072000",
                "severity": "low"
            },
            "source": "finding_hsts_no_subdomains",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5bff5cfdd5c3d77d2d776a992dd50c9dab4564524fea1019afe5eb61e9ed1f44",
            "type": "dependency_provider",
            "subject": "ekb-conseils.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5dcd2deb10209307cd4729f5f6373340294dd262ad1a430703925a9611aafdbf",
            "type": "technology",
            "subject": "ekb-conseils.com",
            "predicate": "uses_technology",
            "value": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5f46b73d3dd9b819c3f9c3fcc120a001d1c648942bb311b1050c139c967f1e94",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "61b5b01bcc697a5a2753053b25abe8b4e8a6be52104364cf8d5a4b98d70f6c63",
            "type": "dns_address",
            "subject": "ekb-conseils.com",
            "predicate": "resolves_to",
            "value": "104.21.47.192",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "671f80d5cc70b8d7f121724a17aa02590ea0c4f5fcef11073e44f6276b682673",
            "type": "dependency_provider",
            "subject": "ekb-conseils.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": false,
                "hosts": [
                    "mta-gw.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 1,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "6871d6e6955ba72c07e4d9d50c5b8608c65764e65093b727d2878f93471fcacd",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "70896888e1b42fe67aa71a96d244150ec8557ea0e4126ecd27a7a3bd6bf26f7d",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "server",
            "value": [
                "cloudflare"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "7092b1f20fcf2de8daddc7404f4fdd1bb8cb1aff8e90049144f4d1110db3b75c",
            "type": "mail_exchanger",
            "subject": "ekb-conseils.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "72a2c87198fe97f768a254a73712d032a0924894a959ad22a162f8aef9172505",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "75b89beb5ea6a518f6cd00a9cf73418229e35675dc8e315228ad8ec5c65f994d",
            "type": "dmarc_record",
            "subject": "ekb-conseils.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "82bdb8d00493dcbc052d9934fd7158f17d9fb73b33646526d8640fffbcc6a3da",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "resilience:provider_dominance",
            "value": {
                "evidence": {
                    "provider": "Cloudflare",
                    "share": 75
                },
                "severity": "medium"
            },
            "source": "finding_provider_dominance",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "87ff268700a9be5376ca98e0441188c6365b922ace018fa7906cb37594e71f2e",
            "type": "spf_policy",
            "subject": "ekb-conseils.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "8874388f4787a15d74313a2c3fb2ec84790061d43e1a8e522b3856b3adf37ba3",
            "type": "mail_policy_flag",
            "subject": "ekb-conseils.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "890cb0ebd313caf5a888e89d2f6ddbaa65d4cfa6cbf8ebc1a6ee0fc6b530eb83",
            "type": "tls_issuer",
            "subject": "ekb-conseils.com",
            "predicate": "issuer",
            "value": "C = US, O = Google Trust Services, CN = WE1",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "9a62271b7ba5ac4a60cd373959814c58b1dd3e4db27d21cebd6eaa8a95617583",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "a2f0f4cc4df703e831aa033ae48ccbda3ac25d2f9395ffb30a4eace3ca5ed92e",
            "type": "dns_address",
            "subject": "ekb-conseils.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3033::ac43:ac23",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "ae8ae07d0b8f8881dc6737bbebc7af8458aa5b7d71fa1fd5e670f07ced8856e7",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "b0f31c4bcdba4e291d6008e63ef0194542ae7eb856716b1650ce154fa37499b9",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "b331b60d30daaf94fbeb917b56263e7949b4ec30f8389fb12b488148b75d41e0",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "ba964eb4edea4cac2c736aa18db527bdf4be1165456bfffcad3c5640bf3b244f",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "referrer-policy",
            "value": [
                "strict-origin-when-cross-origin"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "bcddaa59eab83898de790d665ab37d631deb2ca262e07cb48f122f98a357b302",
            "type": "spf_record",
            "subject": "ekb-conseils.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "c8a15d02a3b24fc6bc32beea78f47befd5d21d48321c78211dfb81f4c19c7afe",
            "type": "mail_policy_flag",
            "subject": "ekb-conseils.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "cc1e3b6b5826b95cafe137fae3730b1b44dd827c63042977f7970d5acaff0030",
            "type": "mail_policy_flag",
            "subject": "ekb-conseils.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "d09cd22c195b7d71ec9b0afab70a55a8893219c74246efdb2707b3a9ef51416d",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "require-corp"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "d67172c363a6aa3d4dc5cca602c023c5490f161e81952dc66c03ad7176614206",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "sovereignty:outside_europe",
            "value": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "source": "finding_outside_europe",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "db08245935210053202ccc62c1bd6584746ae652112dea8c14edad18704f5cda",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "e8714611c45455cf9c9384a8b5c134916fde718039cdeaa12a3d4b7165420e5a",
            "type": "http_header",
            "subject": "ekb-conseils.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "eb7df7b4fcaa3eacdb7c1be18fb2d46aafe011b7a411830f862dd1e2cba9bde7",
            "type": "dns_nameserver",
            "subject": "ekb-conseils.com",
            "predicate": "uses_nameserver",
            "value": "quentin.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "ec84bd749c72fda584ab862781d5850ac44e94f7ea30bf591fbf1b91f9bbe261",
            "type": "module_finding",
            "subject": "ekb-conseils.com",
            "predicate": "transparency:security_txt_missing",
            "value": {
                "evidence": 403,
                "severity": "medium"
            },
            "source": "finding_security_txt_missing",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "fb68adbba68b7d66b5c26d7ebf0cb3b19efe33a8d9f80404bc55ecf309d9ee30",
            "type": "dmarc_policy",
            "subject": "ekb-conseils.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:34:34+00:00"
        }
    ],
    "claims": [
        {
            "id": "098aeb028abba467eda0d9dded083fed1d9789cc6e2fb92a0a42f1c5b034c99a",
            "subject": "ekb-conseils.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "5b8dbb98132fc9ba1923359f7c7937d21d70e6b244c74cf07d33f6611423d593"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "22ede046fd64ff593cc5b3b14370b7f4f8d8c87c394a15053cf9a7aa2ecd9c10",
            "subject": "ekb-conseils.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Google Trust Services, CN = WE1",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "e811053c309bfafdbca2fbaae2903d65d56bfdb9e5a8d46c6661b81bff52f4e8"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "3f654195b43d72b5a2a61bd25e11d0c2dc08f3a561c9eb089c529cbdf49a2002",
            "subject": "ekb-conseils.com",
            "predicate": "depends_on_provider",
            "value": "Cloudflare",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806",
                "31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d",
                "87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "6e6c8d0ec38bff58a9dd30421f10f1b9af39cc65301f38701aeabb6fcf0467ba",
            "subject": "ekb-conseils.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "6fa755d642122c6988d99c8e3e02ac4ffb0c6c49c0f9c78a6eba995e46d3b1d6",
            "subject": "ekb-conseils.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "9db624ccd25ec3eb77148c9f1c0145c02c96be084e8b285e4d2e5377783c24f3",
            "subject": "ekb-conseils.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "observed",
            "rationale": "provider_observed_once",
            "evidence_ids": [
                "fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "9fa18e7ef8b735ecbb6d2b3ca8ac855d8c570b925983c918a0f700b9206dcb91",
            "subject": "ekb-conseils.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "a010fa2262f897eb38bcf6b41a9a285d40ab510adf10bc8d3d0de62ddd524ff2",
            "subject": "ekb-conseils.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        },
        {
            "id": "edee7870d98894f78f453ad768b9d27775e1930394231364c6eb990f9a081206",
            "subject": "ekb-conseils.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "7d3b2ae1f467903a199d2a7df0f3c720b0a49b93bb61fb59b135bbe9f5a01d82",
            "observation_ids": [
                "00c8165010d0e909372be2eafc925490468bcc69e842dc37293971a56c1e995b"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "172.67.172.35",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "957d9672e20109af0101c59b010f63719c6bc8be9c873862482075d929c61738",
            "observation_ids": [
                "0a0c7ebb19cfe9fed3b0435ec49829eddd1f668fa0af31f0d0d9ae8783a44928"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "8a94e660ae6441fdd35b27cd26995bc49584eb7c9afdb1d4292ab726045f4806",
            "observation_ids": [
                "0bfb37b6a408f980ede140b22bf68ebc0cb069ffaca7273af0e1a6f596201cee"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "grannbo.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5392091a4b7c56c1dacfc1923eb5fc9d3912bb0e986808ea34cde45588f0f91b",
            "observation_ids": [
                "0ee3b2f984cbc1dc858c661ecbf44709ae0d3e41e09f3c94d59c8bb05ab986d4"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "ffccee801d347965d9c6131ecafecfe6c12b9be0e3e6ee8b35236bd4dcd16a40",
            "observation_ids": [
                "339e2cf5f7bd75b73f725c7bde9911a4c3401c64cbd0ea22fa3e74492a607a28"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "54b87dee1a48bd4ae881ec7a74626cbb120864c9b6f33cd089ace20e27aaddb5",
            "observation_ids": [
                "345fca9ea1cd3ef2dee911ae4c0c75083a3058e7062fc07bcc107d576b11709f"
            ],
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": "75%",
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "4e8be8858e40e769d08e23bf3d195377ff32bfc1f3bb4c1133590058f1007f1e",
            "observation_ids": [
                "46b61fb07d68cb05664e73391a9cea526d93e90b7b9c317b5d7129156358312d"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-02T17:28:06+00:00",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "1ddce7291be50772e196befb890a5f7af952daeccf42ce1c395a7ab4acb7cfed",
            "observation_ids": [
                "49df849cd63833be5e52925b1ff7b71251f0f15d8a569ee590bfd58483c81316"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(self), camera=(), display-capture=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), usb=()"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "458c164bd1a37f83f2298e64a3fe879b9e3769ebf00281c2ec92ac2fcadf65ae",
            "observation_ids": [
                "501cca4e283182154d2b5173bddf6428be51c2c715a061fb1c2a1a8a527f26ff"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "27cda0437939258a5893449641b44bb12ab79c277d5f135716b7dda45952b677",
            "observation_ids": [
                "52a9516c094fbe27c53e819a36a330faee0262fd504366ce3cc6e0863336a05a"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3031::6815:2fc0",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "9b868205e5c0e9c5cefc2fbf451f063ce0a797fef04901d3028af5b774b5bcd9",
            "observation_ids": [
                "55a616bdd33bf146ddcd4933e71a5263b02e76b30f20d2d649e62b4f57e9a226"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": "max-age=63072000",
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "87a3d6682c46158b34087bc01f3ffd6bb40e0beca6eea6f98c8b1973e630ef23",
            "observation_ids": [
                "5bff5cfdd5c3d77d2d776a992dd50c9dab4564524fea1019afe5eb61e9ed1f44"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "2cf5ca578b2576b3fda01a727e8df8076bb324d7d5cd10e65d0d59aab049bbf9",
            "observation_ids": [
                "5dcd2deb10209307cd4729f5f6373340294dd262ad1a430703925a9611aafdbf"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "578431c21fddc7224e5cdff3f6f08de534725ce4981103465f27961c95519d26",
            "observation_ids": [
                "5f46b73d3dd9b819c3f9c3fcc120a001d1c648942bb311b1050c139c967f1e94"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "99fca27aeac6b57526fc4d60ef3599771e96e92da4fccf95d227598bba39fded",
            "observation_ids": [
                "61b5b01bcc697a5a2753053b25abe8b4e8a6be52104364cf8d5a4b98d70f6c63"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "104.21.47.192",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "fe65e0975864e7efbf0d423dd6fabee8dad11baaefcc16f522f1ada371213e81",
            "observation_ids": [
                "671f80d5cc70b8d7f121724a17aa02590ea0c4f5fcef11073e44f6276b682673"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mta-gw.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 1,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "f2468198dc7801e5fcd71b3dc0ac3b093a5f1bffa9a1768152648064edcbd2f5",
            "observation_ids": [
                "6871d6e6955ba72c07e4d9d50c5b8608c65764e65093b727d2878f93471fcacd"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "fcd64d7d930c5ec30e942c295afcd1bd73d458887db7f56ea5952f470db1088f",
            "observation_ids": [
                "70896888e1b42fe67aa71a96d244150ec8557ea0e4126ecd27a7a3bd6bf26f7d"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "25850f204f4b3e630d3bc893d11d6544254d64ad67d9878a7984da9fc4767e54",
            "observation_ids": [
                "7092b1f20fcf2de8daddc7404f4fdd1bb8cb1aff8e90049144f4d1110db3b75c"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5fb04f23104b37f818269c580fccea9ba6da5064a9c7e641be3364f07c8ff82c",
            "observation_ids": [
                "72a2c87198fe97f768a254a73712d032a0924894a959ad22a162f8aef9172505"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "8ec56587bfd634f6ac490c3f80c8f81dca70d5806d5021fcd75b1dd819a46693",
            "observation_ids": [
                "75b89beb5ea6a518f6cd00a9cf73418229e35675dc8e315228ad8ec5c65f994d"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "a402b4b3cde7bb3571cf019d7a4ffb10fa643fea57cd28a093543827d3ad0ae1",
            "observation_ids": [
                "82bdb8d00493dcbc052d9934fd7158f17d9fb73b33646526d8640fffbcc6a3da"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "provider": "Cloudflare",
                    "share": 75
                },
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "378ced9c676ae0da13b9e50940f4a422b9f21bf212be2afbf89134641dec78c7",
            "observation_ids": [
                "87ff268700a9be5376ca98e0441188c6365b922ace018fa7906cb37594e71f2e"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "3ecf12f7e9d6b45194d5a570806c318fcb95533029130654692b390d84045773",
            "observation_ids": [
                "8874388f4787a15d74313a2c3fb2ec84790061d43e1a8e522b3856b3adf37ba3"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "e811053c309bfafdbca2fbaae2903d65d56bfdb9e5a8d46c6661b81bff52f4e8",
            "observation_ids": [
                "890cb0ebd313caf5a888e89d2f6ddbaa65d4cfa6cbf8ebc1a6ee0fc6b530eb83"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Google Trust Services, CN = WE1",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "9e4031de99233839ee7f754e08912daf0d122ccdc61519091c818a0d341d46e1",
            "observation_ids": [
                "9a62271b7ba5ac4a60cd373959814c58b1dd3e4db27d21cebd6eaa8a95617583"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "86e879db17dd563c023cc0d60a1d02a5a57c7ca5cabdf0740fe6c64948a3e66d",
            "observation_ids": [
                "a2f0f4cc4df703e831aa033ae48ccbda3ac25d2f9395ffb30a4eace3ca5ed92e"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3033::ac43:ac23",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "91971dbfa210c280a8316306f878fb49b1f8c1948c6a11eb61e193d36a51c632",
            "observation_ids": [
                "ae8ae07d0b8f8881dc6737bbebc7af8458aa5b7d71fa1fd5e670f07ced8856e7"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "9b5b00339fc67306a6bccb5ba767b7312856edb64ffc9ea1ad1842c61a1dbee1",
            "observation_ids": [
                "b0f31c4bcdba4e291d6008e63ef0194542ae7eb856716b1650ce154fa37499b9"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "877a565f035acaa79ea75f1e911d6c0de168b5ad17a89ff99b37c0381c347c00",
            "observation_ids": [
                "b331b60d30daaf94fbeb917b56263e7949b4ec30f8389fb12b488148b75d41e0"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-akDLLNk6O--l-s8NCFoBxrjA'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-src 'none'; worker-src 'none'; manifest-src 'self'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "b21bf44c9534b78c80785a8edaddfcc63dfb2edbbf6e518e9db550609b616c2c",
            "observation_ids": [
                "ba964eb4edea4cac2c736aa18db527bdf4be1165456bfffcad3c5640bf3b244f"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "8822d676f3d7fd6f3854bb26ea79fed9fd5e0b0a8a5dcc1e347dce743726cabf",
            "observation_ids": [
                "bcddaa59eab83898de790d665ab37d631deb2ca262e07cb48f122f98a357b302"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "b2e1394540d958ad006f4d73291d3f5ebc39a8368971aeb7cd00cd4da1eff125",
            "observation_ids": [
                "c8a15d02a3b24fc6bc32beea78f47befd5d21d48321c78211dfb81f4c19c7afe"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "84c08f2dbca4f924232628496e2de3060ffbb0784d13949349e87b69d9eef14c",
            "observation_ids": [
                "cc1e3b6b5826b95cafe137fae3730b1b44dd827c63042977f7970d5acaff0030"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "8f474635e4dd2bdddb280f19eac6255abfcdf2b92b718d9cba032fe648d41b62",
            "observation_ids": [
                "d09cd22c195b7d71ec9b0afab70a55a8893219c74246efdb2707b3a9ef51416d"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "4103bf65c105b1e13eddaa77a7199845f53607d3b9f2816e795ecc98fcdf389b",
            "observation_ids": [
                "d67172c363a6aa3d4dc5cca602c023c5490f161e81952dc66c03ad7176614206"
            ],
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "244c6329a716b921a7c44705c97edd5708076af46a2f30a01861b45a6e55483c",
            "observation_ids": [
                "db08245935210053202ccc62c1bd6584746ae652112dea8c14edad18704f5cda"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "63808e44be78feb45cfdf5013aa7ffaa1bbd7ace4ab866af1052640f14bfc7f1",
            "observation_ids": [
                "e8714611c45455cf9c9384a8b5c134916fde718039cdeaa12a3d4b7165420e5a"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "31fdea73719fabe8b829573faa84a484d8bae96a751989cefe045984d999921d",
            "observation_ids": [
                "eb7df7b4fcaa3eacdb7c1be18fb2d46aafe011b7a411830f862dd1e2cba9bde7"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "quentin.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "24642d064acf1512a2ffd90aaefc2d5d024e472b1ad4b1b2dc8aa9e243e7d736",
            "observation_ids": [
                "ec84bd749c72fda584ab862781d5850ac44e94f7ea30bf591fbf1b91f9bbe261"
            ],
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": 403,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        },
        {
            "id": "5b8dbb98132fc9ba1923359f7c7937d21d70e6b244c74cf07d33f6611423d593",
            "observation_ids": [
                "fb68adbba68b7d66b5c26d7ebf0cb3b19efe33a8d9f80404bc55ecf309d9ee30"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T19:34:34+00:00",
            "last_seen_at": "2026-09-04T19:34:34+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "809d465e30508416beff6da755196cc01c058310ed8f968d85d98fd287286b8e"
}