{
    "schema_version": "2.0",
    "engine_version": "3.0.0-rc.3",
    "pattern_version": "2026.09.4",
    "scan_id": "849d9e015318ecbacdd93af3",
    "domain": "empreinte.live",
    "scanned_at": "2026-09-20T20:57:40+00:00",
    "duration_ms": 832.37,
    "entity": {
        "id": "5d7b8470aa5d807cc8b3aa8339da32018531c6b3bc8a7ef8edf5372b6f490f15",
        "display_name": "empreinte.live",
        "slug": "empreinte-live",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "empreinte.live"
    },
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "trust_profile": {
        "methodology_version": "2.1.0",
        "knowledge_coverage": 84,
        "dimensions": {
            "security": {
                "quality": 64,
                "coverage": 100,
                "band": "watch",
                "conclusive": true,
                "evidence_count": 3,
                "unknown_count": 0
            },
            "privacy": {
                "quality": 100,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "dependencies_control": {
                "quality": 100,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 2,
                "unknown_count": 2
            },
            "resilience": {
                "quality": 90,
                "coverage": 35,
                "band": "non_conclusive",
                "conclusive": false,
                "evidence_count": 1,
                "unknown_count": 1
            },
            "transparency": {
                "quality": 65,
                "coverage": 70,
                "band": "watch",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "mail": {
                "quality": 69,
                "coverage": 100,
                "band": "watch",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            }
        },
        "global": {
            "quality": 80,
            "coverage": 84,
            "secondary": true
        }
    },
    "signals": [
        {
            "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480",
            "key": "data_location_unknown",
            "category": "dependencies_control",
            "importance": "medium",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Localisation effective des données non déterminable",
                "en": "Effective data location cannot be determined"
            },
            "explanation": {
                "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.",
                "en": "Public observations cannot establish where data is actually processed or stored."
            },
            "limitations": {
                "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.",
                "en": "A provider headquarters, an IP address, or a CDN is not proof of data location."
            },
            "evidence_ids": [],
            "change_status": "stable"
        },
        {
            "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9",
            "key": "origin_host_unknown",
            "category": "dependencies_control",
            "importance": "low",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Hébergement d’origine non déterminable",
                "en": "Origin hosting cannot be determined"
            },
            "explanation": {
                "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.",
                "en": "An edge service or reverse proxy can hide origin infrastructure."
            },
            "limitations": {
                "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.",
                "en": "Edge presence must not be treated as origin hosting."
            },
            "evidence_ids": [],
            "change_status": "stable"
        },
        {
            "id": "82494e967f75689e9db253cce294ec457f5d654fc758ee59b3a2acf5f6c8d6f9",
            "key": "mail_dmarc_policy",
            "category": "mail",
            "importance": "low",
            "direction": "neutral",
            "state": "observed",
            "title": {
                "fr": "Politique DMARC observée",
                "en": "Observed DMARC policy"
            },
            "explanation": {
                "fr": "La politique DMARC publiée est none.",
                "en": "The published DMARC policy is none."
            },
            "limitations": {
                "fr": "Ce signal ne prouve pas à lui seul l’alignement réel de tous les flux de messagerie.",
                "en": "This signal alone does not prove actual alignment for every mail flow."
            },
            "evidence_ids": [
                "845528739ef136f92aca70b435835f3fd48061e5db1b1f26631f0c5ae5d67e87"
            ],
            "change_status": "stable"
        },
        {
            "id": "db86ed41613d24043fc730fafe729d4f0d9a2677c4776fbff62681877ff510b2",
            "key": "visible_provider_dependencies",
            "category": "dependencies_control",
            "importance": "low",
            "direction": "neutral",
            "state": "corroborated",
            "title": {
                "fr": "Dépendances fournisseurs visibles",
                "en": "Visible provider dependencies"
            },
            "explanation": {
                "fr": "2 fournisseur(s) sont reliés au périmètre observable.",
                "en": "2 provider(s) are linked to the observable scope."
            },
            "limitations": {
                "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.",
                "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location."
            },
            "evidence_ids": [
                "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d",
                "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"
            ],
            "change_status": "stable"
        }
    ],
    "changes": [],
    "knowledge": {
        "claims": [
            {
                "id": "0c32f110c4ee63989223d769c3548411735c3d4901b9441ef102cc90723bc9cc",
                "subject": "empreinte.live",
                "predicate": "depends_on_provider",
                "value": "Cloudflare",
                "state": "corroborated",
                "rationale": "independent_provider_evidence_converges",
                "evidence_ids": [
                    "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                    "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                    "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "6003ab1efd3c72903008619acceb8d6086e5e30db76f3cfdf40365cbad3ba1e3",
                "subject": "empreinte.live",
                "predicate": "canary_detection",
                "value": false,
                "state": "to_confirm",
                "rationale": "no_known_passive_signature_observed",
                "evidence_ids": [
                    "ac888020b3267cfe72888a73addaa106dafc60cb7dc824f55aa1d1fa4894b02a"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "839069e1e9f14c2285e45935a54ad833f99c58f73b09157f625be4ad784d99a3",
                "subject": "empreinte.live",
                "predicate": "tls_issuer",
                "value": "C = US, O = Google Trust Services, CN = WE1",
                "state": "observed",
                "rationale": "certificate_observed",
                "evidence_ids": [
                    "5771e57ba658ea015de893ec22da89e57be89d6c840669122ee84891b0aa1adb"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "87b7a3829fecff4f4477d6e2cc3e98b51c9a9705817b3758c4aae809d5d9d95a",
                "subject": "empreinte.live",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "89619c00b80c8e505fe99c7cc6c0e459f497ccd9fe86f8571400322b75bf9356",
                "subject": "empreinte.live",
                "predicate": "openpgp",
                "value": null,
                "state": "to_confirm",
                "rationale": "security_txt_encryption_not_observed",
                "evidence_ids": [
                    "51342afc4c9465fdd734199f235447c4f88e047ff002d96644e9f0b15e65a97e"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "a0abffb1141e63e1353bb78005c28f1708beb13e6d05c1d6bd7d3f28af68fcbe",
                "subject": "empreinte.live",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "b85e498b07f7f2d63d587c8a226ffb2243e0af3751b1ecad19a7f1f79fff4d6f",
                "subject": "empreinte.live",
                "predicate": "dmarc_policy",
                "value": "none",
                "state": "observed",
                "rationale": "mail_policy_observed",
                "evidence_ids": [
                    "845528739ef136f92aca70b435835f3fd48061e5db1b1f26631f0c5ae5d67e87"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "c4e48545b7a9cc47f021ff39626ad912df7e29aeaa87d4603dba5d6d138b4585",
                "subject": "empreinte.live",
                "predicate": "depends_on_provider",
                "value": "Google",
                "state": "observed",
                "rationale": "provider_observed_once",
                "evidence_ids": [
                    "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "e3cb4e0a2638355880b9cd0b486517f1c198d6ebbd98ab61d02af0772fbdc764",
                "subject": "empreinte.live",
                "predicate": "spf_policy",
                "value": "softfail",
                "state": "observed",
                "rationale": "mail_policy_observed",
                "evidence_ids": [
                    "f900625938f4dd975d9be06483fa06ef17d4d479d6d370ee89d1604b9ca3b7b4"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "ff7059b6969ad4921dbe6b0815a304ed035d5fe808bde790a00eef34d9919c24",
                "subject": "empreinte.live",
                "predicate": "post_quantum_tls",
                "value": null,
                "state": "untested",
                "rationale": "client_capability_unavailable",
                "evidence_ids": [
                    "fe28dcd87f497cf9826bf1387213b4daaef482ebf3eb5bfac18b296cc752a34a"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            }
        ],
        "relations": [
            {
                "id": "00dc2930afe692e06984c48359fe4fdafb896d60dc985de2cc62ee976f0be392",
                "subject": "empreinte.live",
                "predicate": "uses_technology",
                "object": "cloudflare",
                "state": "observed",
                "evidence_ids": [
                    "6d2c20f70043bfda5134f2fe27535e82a723e44447fb18fd11ddcb3d8eb96162"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "06214a1883972a7d4d72587676d776a68f2ab4ef9e40e4ec882f0d2384fcedfa",
                "subject": "empreinte.live",
                "predicate": "uses_nameserver",
                "object": "kay.ns.cloudflare.com",
                "state": "observed",
                "evidence_ids": [
                    "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "06533147e93607773982457550ad175b8a5a8f7dd3cdaf5db00510ffdc86c469",
                "subject": "empreinte.live",
                "predicate": "depends_on_provider",
                "object": "Google",
                "state": "observed",
                "evidence_ids": [
                    "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "0ed9e2681a88a59243f33f044618a927c38b264db70c62fa39f7f52d58735c3b",
                "subject": "empreinte.live",
                "predicate": "uses_mail_exchanger",
                "object": "alt1.aspmx.l.google.com",
                "state": "observed",
                "evidence_ids": [
                    "9a05e5d189b611a4a4b1c54d7d5de165df30ab231ead9f35e90d0626daee713f"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "0ffb337dc226e74f23d9b26358849b120609296aa89c54ead30939e8d6b6eebf",
                "subject": "empreinte.live",
                "predicate": "resolves_to",
                "object": "104.21.61.8",
                "state": "observed",
                "evidence_ids": [
                    "834dd17c9c7514c472ddf31af18c25a90bbdc7c0662f5e43b8c60dbbf0bafa55"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "1687cc7780e9983dccfc86c6547019e331d8fdb4bd854c10e3fb5c7586d7d919",
                "subject": "empreinte.live",
                "predicate": "resolves_to",
                "object": "2606:4700:3031::6815:3d08",
                "state": "observed",
                "evidence_ids": [
                    "f2aaeee8122d25566900cc620f4dbf1876e65302935c81058cee724c51f1af23"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "443eb98a8e0f626774e248ce1530076f28c88d22efa21e3a1c5fd387a411b941",
                "subject": "empreinte.live",
                "predicate": "uses_mail_exchanger",
                "object": "alt2.aspmx.l.google.com",
                "state": "observed",
                "evidence_ids": [
                    "dd282980e60aec1f91df9b286a9487ad2e80925ed8312bc539c109fe20bb177a"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "5c9fb95c583e362285cdf796dcc7cce8243e0420684cca41862c569cc01e6a23",
                "subject": "empreinte.live",
                "predicate": "uses_mail_exchanger",
                "object": "alt3.aspmx.l.google.com",
                "state": "observed",
                "evidence_ids": [
                    "33a1b10b9d2c8a950c41477e6476fb6c35980a829bc3c7bf00b848a7292e857a"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "5d872636dbbb0e2f3373e9b4ae27ad8605b968de0d33acdd1b0888d1ae642987",
                "subject": "empreinte.live",
                "predicate": "resolves_to",
                "object": "172.67.204.132",
                "state": "observed",
                "evidence_ids": [
                    "fd856ebf91f47872019b88599860f46efe3566306072f3fc4fd0adba8f87d601"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "69829f80e4a1019e96ac8505bace7bd992872cd8b76f44c745451eb999134da7",
                "subject": "empreinte.live",
                "predicate": "uses_mail_exchanger",
                "object": "alt4.aspmx.l.google.com",
                "state": "observed",
                "evidence_ids": [
                    "69593342de950adc541a9fa3f5f343b97fad79a41b9367cf5ccc4501d03f71a4"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "76c465d4904133d1af4558907e34872ed994480e5d58be37e9e9cdb6e0e9433f",
                "subject": "empreinte.live",
                "predicate": "depends_on_provider",
                "object": "Cloudflare",
                "state": "corroborated",
                "evidence_ids": [
                    "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                    "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                    "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "76f8d46df7662a6c295fa8e68559e225b7435fb6b5aaf4b5da6dc4625641dbc7",
                "subject": "empreinte.live",
                "predicate": "uses_mail_exchanger",
                "object": "aspmx.l.google.com",
                "state": "observed",
                "evidence_ids": [
                    "f1ddab1fa556a11696d48884f2bf4a8d4804787dfd131be9fc2cc7f8b766356e"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "8f6c6f484bd7b88d09bfba2ba008fde4ae4bec26c7acbdc55204404142ca5d46",
                "subject": "empreinte.live",
                "predicate": "uses_technology",
                "object": "WordPress",
                "state": "observed",
                "evidence_ids": [
                    "9c37b177ff6d7707b2c69c15fe28c7c0076db73fecdcd4ff49423e45143aada5"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "9df4279f2578a93b19900196b190d53028cd3621bdfedabff5de0aafb6575e03",
                "subject": "empreinte.live",
                "predicate": "uses_nameserver",
                "object": "theo.ns.cloudflare.com",
                "state": "observed",
                "evidence_ids": [
                    "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "a69f08e2652bcf5112c2dd5a6fe12d3c26e13e42cdcfe7c2ef86ff7e6ae425c1",
                "subject": "empreinte.live",
                "predicate": "uses_technology",
                "object": "WordPress 7.1.1",
                "state": "observed",
                "evidence_ids": [
                    "4ea3366cd51015ef6abc1d3707d420b93b4e4a86ab51f4ab22c2904dfd57c11a"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "d2e29bd10dc91112329c83a2928b6b636b72ed12a48ca7da1802b6f6851daa1f",
                "subject": "empreinte.live",
                "predicate": "resolves_to",
                "object": "2606:4700:3037::ac43:cc84",
                "state": "observed",
                "evidence_ids": [
                    "85c0017f52a3022ee672c43527f18347fe34376d27be68188642ae08c0d8e66e"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            }
        ],
        "unknowns": [
            {
                "id": "a0abffb1141e63e1353bb78005c28f1708beb13e6d05c1d6bd7d3f28af68fcbe",
                "subject": "empreinte.live",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "87b7a3829fecff4f4477d6e2cc3e98b51c9a9705817b3758c4aae809d5d9d95a",
                "subject": "empreinte.live",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            }
        ],
        "evidence": [
            {
                "id": "ab1053027404bfa1eaa082a73fa3db25305653099342a36ec29924f82d2b4619",
                "observation_ids": [
                    "0a6ea236ea0dfe38da83464bc36db8542d4265f63ba142995eb824ed329f6491"
                ],
                "evidence_type": "dmarc_record",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "d079317a9c0a751f883a5d93564e450012d14c771422605d9da51484a8272eac",
                "observation_ids": [
                    "0c1c64ed52676413ef9e1c96af24d2887ac1c724ff7687f7b77448a9909a155e"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f5a09fed8e46bc4219dafb0791c14b72e08e2ed554b6498be33fc96984ee1286",
                "observation_ids": [
                    "0ce6dc8512c8848f15586d6edf1aa738ab992a23fe17d4a0c0e82a563c3770fe"
                ],
                "evidence_type": "spf_record",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "v=spf1 include:_spf.google.com include:spf.brevo.com mx ~all",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "a18722c68be33ea675c76a09e5eb1975b59205b6f5d2c1659e118e264008a8f6",
                "observation_ids": [
                    "0e3ab50543a3f7ab41a7ed471459f0c7dbe80b50be91f23cc8ff95d05eb4c508"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "ac888020b3267cfe72888a73addaa106dafc60cb7dc824f55aa1d1fa4894b02a",
                "observation_ids": [
                    "13c7ca66c9f02637b4afaee15a80ca91a17e696c214f5b2a25afed996b5db6ec"
                ],
                "evidence_type": "canary_signal",
                "collector": "canary_passive",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "matches": [],
                    "reason": "no_known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "not_observed"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "646d648f5753224eca20cbfb70d25eddcb2dc70ea7f365896435717e841e1cbb",
                "observation_ids": [
                    "17651a537f2fd55bda97a2bde5f7541d5deb48bd6194f966ae5ca48e19214b73"
                ],
                "evidence_type": "tls_valid_to",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "2026-11-22T06:37:45+00:00",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "33a1b10b9d2c8a950c41477e6476fb6c35980a829bc3c7bf00b848a7292e857a",
                "observation_ids": [
                    "1b936d84710fafe75cfd28ad99db9a0a77a345af089c41509b1be56e2544c683"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "alt3.aspmx.l.google.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "e8cbb620d7313768ec94c65f252afe294956323cb899a495da3d634ebc4f23ca",
                "observation_ids": [
                    "1d22edd60bbc93a3b4d7b6d2d0faae21aa40459cbd845db77207f9491f44bf23"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "fd856ebf91f47872019b88599860f46efe3566306072f3fc4fd0adba8f87d601",
                "observation_ids": [
                    "1feb0f76deb0da69c570dc6310f3fc3a89c12adfaca21104ff70e272ec109595"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "172.67.204.132",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "dd282980e60aec1f91df9b286a9487ad2e80925ed8312bc539c109fe20bb177a",
                "observation_ids": [
                    "22c7d986eb22c3c7d9aeea5b644ea18e22255288cf72927949280dc912950b16"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "alt2.aspmx.l.google.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "ee150bf45862d7dee1a625ba93f35b236a2e75d628e6a21b36143532ca4be99f",
                "observation_ids": [
                    "24b4ab61d8487456750f82a058dfcc6847b8924eb1744b937ca1f689cac7c390"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": {
                        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "175897cd07c034806575392c898c2fe6119b0e370d8d065a4978f64a507c85bc",
                "observation_ids": [
                    "2b81103bed8247f7257585fae95172d1389f98f25d4c1517ba7d4216f12efae3"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "cloudflare"
                ],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "ac683e993c5a3894676904cad2875abbef3855a4c85eb33c4c0b1f47fc4b62d7",
                "observation_ids": [
                    "2be1d5a20a0015a494d10ed7a70b75d0e4389e5f371f5c306d8ceac080b1ad58"
                ],
                "evidence_type": "module_finding",
                "collector": "transparency",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": 403,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "db9833731977ebe7dae4db71a7c0762eefe62de7a865809f20385689bfa681cb",
                "observation_ids": [
                    "2d549f55c7030db580ab47dda621d3553513ce3cd145922b9eeb638fbea06af7"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "kay.ns.cloudflare.com",
                        "theo.ns.cloudflare.com"
                    ],
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "5771e57ba658ea015de893ec22da89e57be89d6c840669122ee84891b0aa1adb",
                "observation_ids": [
                    "2f11be9c9cb51629acae96d3ac17ecc1b7e223e4a3043586ed80596967f9cb06"
                ],
                "evidence_type": "tls_issuer",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "C = US, O = Google Trust Services, CN = WE1",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f900625938f4dd975d9be06483fa06ef17d4d479d6d370ee89d1604b9ca3b7b4",
                "observation_ids": [
                    "4f18a3a07ca2663b62d3213deb6e7dd97158bcc5cefbe93465d45c80ad825f3e"
                ],
                "evidence_type": "spf_policy",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": "softfail",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "6f2a45e17f2c9fc0a1e6584fb756cc4d432c044fee285b89692ea60ced7db51b",
                "observation_ids": [
                    "52b7ae2ceae102793183e81c65310646807fd8405147bb5e60bb46cb1ded99e1"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "b03fbb91e8741ec1b08b14e272d20c1fb8fc1bd5bb2b4dd1ad8f3600558f4acc",
                "observation_ids": [
                    "54ed45a1fed2619e56e330dba63098316784d75cb52ed0aed0b28e1767288486"
                ],
                "evidence_type": "module_finding",
                "collector": "sovereignty",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "Cloudflare",
                        "Google"
                    ],
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "4600b650e11ae22b4dc55d81931086cde2d87fec07189cd1730b146295eb8fb1",
                "observation_ids": [
                    "68f6aae0cee4cb3e9d7dcd9223fbee582b40cb9c58eb806e3786408083ceb64b"
                ],
                "evidence_type": "csp_evidence",
                "collector": "csp_depth",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "enforced": false,
                    "frame_ancestors": false,
                    "hash_present": false,
                    "nonce_present": false,
                    "object_src": false,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "not_observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "ae1dda71f5b874c88d1c209644b0610f4e6d260f40c1cc0e6477d2de882faf62",
                "observation_ids": [
                    "6dd54f01f14aa1bc0fe7c41c89097619af94be841758c7a9b1eb1a5838678f3d"
                ],
                "evidence_type": "module_finding",
                "collector": "resilience",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "kay.ns.cloudflare.com",
                        "theo.ns.cloudflare.com"
                    ],
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "02d7fd4e03ffb5d0b4995efec4c5857e488759955021d8eab475b52dc5dfeda3",
                "observation_ids": [
                    "6f41828262ec6a86f3f7eae1b820ac61da0c8e1a37825e808c200f7177ddbad2"
                ],
                "evidence_type": "mail_transport_evidence",
                "collector": "mail_transport",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "bimi": {
                        "records": [],
                        "state": "not_observed"
                    },
                    "dane_tlsa": {
                        "query_supported": false,
                        "reason": "tlsa_query_not_available",
                        "records": [],
                        "state": "untested"
                    },
                    "dkim": {
                        "reason": "no_selector_bruteforce",
                        "state": "untested"
                    },
                    "mta_sts": {
                        "policy": null,
                        "policy_state": "untested",
                        "records": [],
                        "state": "not_observed"
                    },
                    "tls_rpt": {
                        "records": [],
                        "state": "not_observed"
                    }
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "9edaad3381a7a8edeb9ce90754044f67ea0b54fefaf1a12d0c78b533cf859c24",
                "observation_ids": [
                    "7c8fc0d302d2fa3f06d379e95f41c021c5d20e92a1d922b74ff8d842c0f52067"
                ],
                "evidence_type": "module_finding",
                "collector": "supply_chain",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": 3,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "be624e546849f75dbece8a63b67e4dc0d23693a374cae911e7885c1225e28c39",
                "observation_ids": [
                    "7ed5d717cef4f87691b50b64aafb30e6d81746f31cd3dd6638d8137293031a1b"
                ],
                "evidence_type": "modern_transport_evidence",
                "collector": "modern_transport",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "alpn": {
                        "state": "untested",
                        "value": ""
                    },
                    "certificate": {
                        "cipher": "",
                        "issuer": "C = US, O = Google Trust Services, CN = WE1",
                        "protocol": "",
                        "san_count": 0,
                        "state": "observed",
                        "valid_from": "2026-08-24T05:37:50+00:00",
                        "valid_to": "2026-11-22T06:37:45+00:00"
                    },
                    "http2": {
                        "negotiated": "3",
                        "state": "untested"
                    },
                    "http3_advertised": {
                        "alt_svc": "h3=\":443\"; ma=86400",
                        "state": "observed"
                    },
                    "ipv4": {
                        "addresses": [
                            "104.21.61.8",
                            "172.67.204.132"
                        ],
                        "state": "observed"
                    },
                    "ipv6": {
                        "addresses": [
                            "2606:4700:3031::6815:3d08",
                            "2606:4700:3037::ac43:cc84"
                        ],
                        "state": "observed"
                    }
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "85c0017f52a3022ee672c43527f18347fe34376d27be68188642ae08c0d8e66e",
                "observation_ids": [
                    "8045b73773b4dc7fcbe08db1954056c9c4d79899755f3c9e69a04467cc575560"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "2606:4700:3037::ac43:cc84",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "834dd17c9c7514c472ddf31af18c25a90bbdc7c0662f5e43b8c60dbbf0bafa55",
                "observation_ids": [
                    "8a9e54a6163cd1cf592334ffc213df7cf52ce5e235fa8085bd2fe2e684241a57"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "104.21.61.8",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba",
                "observation_ids": [
                    "91d35a3c66a941ac3fa151aea54e5c3a011bfee4ae93ed083d48b1da71700560"
                ],
                "evidence_type": "dependency_provider",
                "collector": "dependencies",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "critical": false,
                    "hosts": [
                        "alt1.aspmx.l.google.com",
                        "alt2.aspmx.l.google.com",
                        "alt3.aspmx.l.google.com",
                        "alt4.aspmx.l.google.com",
                        "aspmx.l.google.com"
                    ],
                    "id": "google",
                    "known": true,
                    "name": "Google",
                    "observation_count": 5,
                    "services": [
                        "analytics",
                        "captcha",
                        "fonts",
                        "maps",
                        "video"
                    ],
                    "tracker": false
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "9a05e5d189b611a4a4b1c54d7d5de165df30ab231ead9f35e90d0626daee713f",
                "observation_ids": [
                    "98dba89b45476289dc153553b6e1e3bb847d1c9150c9faa283430dc99a7e61ec"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "alt1.aspmx.l.google.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "6d2c20f70043bfda5134f2fe27535e82a723e44447fb18fd11ddcb3d8eb96162",
                "observation_ids": [
                    "9ea461de49c0ffec00d2f07525b5790543caec18f9cf01c3c856eb47c61cf56f"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "cloudflare",
                    "version": "",
                    "version_exposed": false
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "4200c601a26842ff59a78f4e46dedbdf9957f9d25c9a9b1986f8d8ba2f3a208d",
                "observation_ids": [
                    "a09597d1be39b1960bc0f4803bffcdaa1bf7d161fdbfdd3f72e828392d893cf7"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "info"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "4ea3366cd51015ef6abc1d3707d420b93b4e4a86ab51f4ab22c2904dfd57c11a",
                "observation_ids": [
                    "a6ad7d1ee3d15ff7c54a033e487b6aecd35c7ba41b671d8e9330ef6f67daa4dd"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "WordPress 7.1.1",
                    "version": "",
                    "version_exposed": true
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "bb1e2fde54e9e97718568ee08d2d3a1d531923d59e9652f2128aa68558af1903",
                "observation_ids": [
                    "a772f411b0b0d5a205f8e3ec625e70eee4887ea61acfb45463f4a47a65fec0bb"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "bbf1408b1d2eb17fadc4d9986b748417158741a45c5885b75d804a6e2bc33f22",
                "observation_ids": [
                    "a9d15750932a6b93702303dbe15b14e502cbb0c339cb867451a8e824adc5cc1d"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "c90b293a5bcf3976dde9ecb5b851e4624d85ec964df72baf9206bf05ae6352c3",
                "observation_ids": [
                    "ab926b2077273405351ae77f35b8e30d83ef62258441cccc0fff4d2fb9b0cf66"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "15c585f350308d0d4951a580df28c32cbf377795970ad2cf12cb0c74f653aee2",
                "observation_ids": [
                    "affecf501b88f754911851825a95e875d9bf72aefefc4a368a397e2d2054a755"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "5a0e061fe00b8f9488ccfae96a90f94b5effe25bb5a6c1009028ba41e76c1b6e",
                "observation_ids": [
                    "b225a607ff7741a1fb67ae8a585c2a4fd94f1c12a71a3d676255e4c7303aa3ad"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f1ddab1fa556a11696d48884f2bf4a8d4804787dfd131be9fc2cc7f8b766356e",
                "observation_ids": [
                    "b2938d0f80e9ae3d34fb50da67ffef1d369a33657873655564228ae59d17250c"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "aspmx.l.google.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "9c37b177ff6d7707b2c69c15fe28c7c0076db73fecdcd4ff49423e45143aada5",
                "observation_ids": [
                    "b5149a3e8a7357ba5308f81f95fd4fe9f614bdfa2a44098d065ff27d849967b9"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "WordPress",
                    "version": "",
                    "version_exposed": false
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                "observation_ids": [
                    "b694387675b189f8d8d27065ec80d427d1d20fba6c410cdd56dd32493c9fba15"
                ],
                "evidence_type": "dns_nameserver",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "theo.ns.cloudflare.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "da6fd6aa7bd8c56883fe9df9c9d5afda18c684612997c376d259af2bb75a5865",
                "observation_ids": [
                    "b93589cdc24c9fb8299901e9a52335bdde5ee60e90e96571fa52ec92df2cf876"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "critical"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "02e7e627e5ce3a52d0fcc1546ec3e3f0834d429880b99e1d34f4135a8aee56d1",
                "observation_ids": [
                    "ba4d99c95c3c19d04ddc4b831a8347536de6bb0ba2e2d43ea81d52e1bdef5a82"
                ],
                "evidence_type": "module_finding",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "WordPress 7.1.1"
                    ],
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "a09bda304de0cd19b17774a16f1efbfb107963af73a9fc6d6a2685e2b5a8a5f9",
                "observation_ids": [
                    "c09d5c177a066910b2bff6e8f101852adc259a336f1d09ca30e2815db22f25b8"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "0a1c8b6a441f4b974b70bca0cf40cc56920c783cdbdbb13d09df109303191ab2",
                "observation_ids": [
                    "c6e03cd618cd31ad124461d1f2e42cbaf765affac28249e2df2ea24785910e35"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "51342afc4c9465fdd734199f235447c4f88e047ff002d96644e9f0b15e65a97e",
                "observation_ids": [
                    "c7c5ee2fe8d6a5e224c9c06088f30c02223e93ef7dfb23295a18f56dfe0b9067"
                ],
                "evidence_type": "openpgp_discovery",
                "collector": "openpgp_discovery",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "dns_openpgpkey": {
                        "reason": "recipient_identity_required",
                        "state": "untested"
                    },
                    "fingerprint": null,
                    "mechanisms": [],
                    "reason": "security_txt_encryption_not_observed",
                    "state": "not_observed",
                    "wkd": {
                        "reason": "wkd_not_fetched_without_identity",
                        "state": "untested"
                    }
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                "observation_ids": [
                    "ca0ee0ff2efeb476a14a1447c421f9b0711425bad351a2635c5e467b2d96e88c"
                ],
                "evidence_type": "dns_nameserver",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "kay.ns.cloudflare.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "31fb0bbe13f5323be50ab2147b087f3607026e900477a3ff2ee59def3123b6a3",
                "observation_ids": [
                    "dab2370567b2dbad1b6045b88690aca96701f5b7ab381444cd6ba980aa118b3e"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": "v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com",
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "fa3d20ec8bdfc33ebe9561feaa62e69ded8bb45394d53e20456a7ce6c8d585da",
                "observation_ids": [
                    "df4b0f979f3d309c1a2d09d1bfbbf65e2dc2cf7a01283ebeb8dc93ce810fe061"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "fe28dcd87f497cf9826bf1387213b4daaef482ebf3eb5bfac18b296cc752a34a",
                "observation_ids": [
                    "e2a26ce6d24024d6ad657ee371ca67d9d1fb6537dc3a1da116bbf136a7011309"
                ],
                "evidence_type": "post_quantum_tls",
                "collector": "pq_tls_probe",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "capability": {
                        "capable": false,
                        "groups": [],
                        "reason": "proc_open_unavailable"
                    },
                    "group": null,
                    "reason": "client_capability_unavailable",
                    "state": "untested"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f2a46d6e269c3f0ad25433cb76d2a9bf35f9dc48357675b22a919c2150c96150",
                "observation_ids": [
                    "e684fc4befe11f43ff20324a4e8046ffef3c7d3d0e6dfc600bba73884a7e3a19"
                ],
                "evidence_type": "dnssec_evidence",
                "collector": "dnssec_depth",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "chain_consistency": {
                        "reason": "insufficient_record_evidence",
                        "state": "untested"
                    },
                    "dnskey": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "ds": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "validation": {
                        "reason": "no_validating_resolver",
                        "state": "untested"
                    }
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "845528739ef136f92aca70b435835f3fd48061e5db1b1f26631f0c5ae5d67e87",
                "observation_ids": [
                    "e9c28c5a5f09856f753849f13570acf9d7a61f08b485c20bd3d817b449769fdf"
                ],
                "evidence_type": "dmarc_policy",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": "none",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "f2aaeee8122d25566900cc620f4dbf1876e65302935c81058cee724c51f1af23",
                "observation_ids": [
                    "f1ba628dccbe93a9ecb9c86be12d19adf8b8e2a85ab4e0a34ab7917a2d2d573c"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "2606:4700:3031::6815:3d08",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d",
                "observation_ids": [
                    "fcd4e64e9fecac2ccbcf714e3970e6fb241d73049f029858bddb63d85a01a077"
                ],
                "evidence_type": "dependency_provider",
                "collector": "dependencies",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "critical": true,
                    "hosts": [
                        "cloudflare.com",
                        "kay.ns.cloudflare.com",
                        "theo.ns.cloudflare.com"
                    ],
                    "id": "cloudflare",
                    "known": true,
                    "name": "Cloudflare",
                    "observation_count": 3,
                    "services": [
                        "cdn",
                        "security"
                    ],
                    "tracker": false
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "483d533597521c9cac7ced513c79f8ae3db7aa62c60d14f6184b4a503cd080ce",
                "observation_ids": [
                    "fe7cdc0dc8ffe781358017c849ab215be729271854356b4d335668e37f265c16"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            },
            {
                "id": "69593342de950adc541a9fa3f5f343b97fad79a41b9367cf5ccc4501d03f71a4",
                "observation_ids": [
                    "feb48af37e710618d0513d65cdd6d9306b4a3fb27d0628e15afc6d47e76141c9"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "alt4.aspmx.l.google.com",
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00"
            }
        ]
    },
    "dossier": {
        "executive_summary": [
            "5 observations publiques sont documentées dans ce dossier.",
            "2 dépendances publiques structurantes sont visibles.",
            "Aucune évolution utile n’est retenue depuis la lecture précédente.",
            "4 points restent à confirmer ou ne sont pas observables de l’extérieur."
        ],
        "knowledge_states": {
            "observed": 5,
            "deduced": 0,
            "to_confirm": 2,
            "not_observable": 2,
            "contradictory": 0,
            "untested": 1
        },
        "short_view": [
            {
                "key": "identity_governance",
                "label": "Identité et gouvernance",
                "items": [
                    {
                        "id": "0c32f110c4ee63989223d769c3548411735c3d4901b9441ef102cc90723bc9cc",
                        "title": "Depends on provider",
                        "value": "Cloudflare",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                            "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                            "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d"
                        ],
                        "rationale": "independent_provider_evidence_converges"
                    },
                    {
                        "id": "6003ab1efd3c72903008619acceb8d6086e5e30db76f3cfdf40365cbad3ba1e3",
                        "title": "Canary detection",
                        "value": false,
                        "state": "to_confirm",
                        "state_label": "À confirmer",
                        "evidence_ids": [
                            "ac888020b3267cfe72888a73addaa106dafc60cb7dc824f55aa1d1fa4894b02a"
                        ],
                        "rationale": "no_known_passive_signature_observed"
                    },
                    {
                        "id": "89619c00b80c8e505fe99c7cc6c0e459f497ccd9fe86f8571400322b75bf9356",
                        "title": "Openpgp",
                        "value": null,
                        "state": "to_confirm",
                        "state_label": "À confirmer",
                        "evidence_ids": [
                            "51342afc4c9465fdd734199f235447c4f88e047ff002d96644e9f0b15e65a97e"
                        ],
                        "rationale": "security_txt_encryption_not_observed"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 2,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 0
                }
            },
            {
                "key": "infrastructure_transport",
                "label": "Infrastructure et transport",
                "items": [
                    {
                        "id": "839069e1e9f14c2285e45935a54ad833f99c58f73b09157f625be4ad784d99a3",
                        "title": "Tls issuer",
                        "value": "C = US, O = Google Trust Services, CN = WE1",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "5771e57ba658ea015de893ec22da89e57be89d6c840669122ee84891b0aa1adb"
                        ],
                        "rationale": "certificate_observed"
                    },
                    {
                        "id": "ff7059b6969ad4921dbe6b0815a304ed035d5fe808bde790a00eef34d9919c24",
                        "title": "Post quantum tls",
                        "value": null,
                        "state": "untested",
                        "state_label": "Non testé",
                        "evidence_ids": [
                            "fe28dcd87f497cf9826bf1387213b4daaef482ebf3eb5bfac18b296cc752a34a"
                        ],
                        "rationale": "client_capability_unavailable"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 1
                }
            },
            {
                "key": "mail_trust",
                "label": "Messagerie et confiance",
                "items": [
                    {
                        "id": "b85e498b07f7f2d63d587c8a226ffb2243e0af3751b1ecad19a7f1f79fff4d6f",
                        "title": "Dmarc policy",
                        "value": "none",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "845528739ef136f92aca70b435835f3fd48061e5db1b1f26631f0c5ae5d67e87"
                        ],
                        "rationale": "mail_policy_observed"
                    },
                    {
                        "id": "e3cb4e0a2638355880b9cd0b486517f1c198d6ebbd98ab61d02af0772fbdc764",
                        "title": "Spf policy",
                        "value": "softfail",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "f900625938f4dd975d9be06483fa06ef17d4d479d6d370ee89d1604b9ca3b7b4"
                        ],
                        "rationale": "mail_policy_observed"
                    }
                ],
                "states": {
                    "observed": 2,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 0
                }
            },
            {
                "key": "dependencies_exposure",
                "label": "Dépendances et exposition",
                "items": [
                    {
                        "id": "87b7a3829fecff4f4477d6e2cc3e98b51c9a9705817b3758c4aae809d5d9d95a",
                        "title": "Data location",
                        "value": null,
                        "state": "not_observable",
                        "state_label": "Non observable de l'extérieur",
                        "evidence_ids": [],
                        "rationale": "provider_metadata_does_not_prove_processing_location"
                    },
                    {
                        "id": "c4e48545b7a9cc47f021ff39626ad912df7e29aeaa87d4603dba5d6d138b4585",
                        "title": "Depends on provider",
                        "value": "Google",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"
                        ],
                        "rationale": "provider_observed_once"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 0
                }
            }
        ],
        "structuring_dependencies": [
            {
                "label": "Google",
                "state": "observed",
                "evidence_ids": [
                    "f3b4b9d929132396adfdddfee2b40fa7b703a983c6bb9764b2870d3babdfc0ba"
                ]
            },
            {
                "label": "Cloudflare",
                "state": "observed",
                "evidence_ids": [
                    "f2c325b500e1c63b123976fd87edea87b67bc23c2003edbe20740b1fcabe453b",
                    "46a0f88e5e494f42a4b4bc6b31248e5dd14edc1b068408a37ea57475e1059a5f",
                    "0b3efe62d105e3d09f6844c2c8822e1ee381e5aecf50da54c9359de6a5b35b9d"
                ]
            }
        ],
        "open_questions": [
            {
                "id": "a0abffb1141e63e1353bb78005c28f1708beb13e6d05c1d6bd7d3f28af68fcbe",
                "subject": "empreinte.live",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            },
            {
                "id": "87b7a3829fecff4f4477d6e2cc3e98b51c9a9705817b3758c4aae809d5d9d95a",
                "subject": "empreinte.live",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T20:57:40+00:00",
                "last_seen_at": "2026-09-20T20:57:40+00:00",
                "active": true
            }
        ],
        "evidence_count": 53,
        "meaningful_change_count": 0
    },
    "timeline": {
        "first_observed_at": "2026-09-20T20:57:40+00:00",
        "last_observed_at": "2026-09-20T20:57:40+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "changes": [],
        "history_count": 1
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}