{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scan_id": "524c2e7f918446ec3cc58349",
    "domain": "esskifa.com",
    "scanned_at": "2026-09-04T19:33:51+00:00",
    "evidence_count": 37,
    "evidence": [
        {
            "id": "d635eb6b5b4fb83847751ee092d78c2bcd7502462315dc00df6d087a33524979",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "04b65705c80de2faa6151f1db1c779261e4dbc6017973b8709cdb44cf47bb2f3"
            ],
            "excerpt": "ns42.infomaniak.com",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "870e723a67e530e42e82998a8ba81b27b7744d269d5a05648da8343b38bf8192",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "05212a07c7e16a3f5e628ee36dcf779b19f2fbd50b710047e415eec94fdf3f62"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "4a7f769b08a4af121f7970f097647d9651ba2112b4b290efcf6fb8b480b2a459",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "05db36cacd3a5895a6db5df433195a92e13b6a35073ee9711298d631caca9a80"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "56531b4f06c66027a069094dc4608cc357fc8716b1ae35a16b0ad41280ef1e45",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2548108b8d9b5097a470cd2135ca4a1b9772134f85c76c863cd36a3a51922bcb"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "1d0b4f05948b02fb3117b7cca24a7aee8bb709a91479e640f815ad20b229943b",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "25d8aebd51cf50cc5f880fe16575f40e7eed4994e553456614a873497c826d63"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "0b59023eae9b011d37b820632656b235cabcdb193a6168c78e733ea2c4d16904",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3599e7fa104da9cabbb437d510dec0c2572102d1122fa2f8c5665cdafd31f869"
            ],
            "excerpt": [
                "max-age=31536000; includeSubDomains"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "df087993c76fd3e7d95974b4a5214bf7542037d098932ddb797876b241f1809d",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3962a4fdad1ba45879dabf8d55eb811ff1cb0dfd64e432a7199d6499848ee6ce"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "c855cc674c3e7d61968122092436cbbafcf7960a260b555d2465fe1916e9a37c",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "472acc96b47e33523da92e8915e64e6b5523088c84dcfccf00e8c6eebcd4c1ae"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "e33dceba2650b1667a8c53a62b8fede97fbb74f2c37cce4c66d2dd250953b94b",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "53997bbe00957e11e4d20455b281eaf464b95fb7f502d820535d827b0faa387c"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "8f2b1c465593737db426be4ddc3f1f2f7cbe34cc2c57914658ee0be13a514e8d",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5805907c226dc78b793eae9d300890eaf3a44a22dfca3d2fcadf65ac167fc492"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "f9d107b650135e6b153cf1ddafee139dbfd8b2f344046df9394210c225d9977f",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5ccfd9cdf524cc09a6270cb8959cb6cccd0ec7ed71177d8d2547e460ea3a5af0"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "eac49db8dff0f6d4bcb5065a6f31fcb640c0c4bea94e73610bb6f825de046374",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5cefea82a1f9d0cbb75b869b2a78d64d992033f91368f0464ecc09f555e70332"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "484a0681c4de41c0cefbcec1753a6081860dcef3b3c42d692fab244637939433",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6020976db01dcfc92ccd4562947f3fb57d4772157c9806488d28a2f75818f29f"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "de5f5d17014e78e47a472fcdee58d8af152be9f390b45a0ff7aa56bff3a65b74",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "72ab533fe713586b944de010ba593ae8d8075f437f902c485422c11f0eb6085b"
            ],
            "excerpt": {
                "evidence": 403,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "21cdb730234499201e257a64804c93095a65c2526bbaedb0a985f9c1bb2bd31b",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "73c2c8548cd602a823cc699826d52490c84b1d716d82317dff1f3d9b54e5e1f6"
            ],
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "263a892b26d655968d7b657f3bd4b9321786422180c625ed26909a0830935ceb",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "77ea721b0fa67c85ed066cb923a55a36123182180e312e198372a280e6ea8777"
            ],
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "637adf493aba1520b430242bd303eecc72693455135ab2e93097de667b110876",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7972cab62752f2155f634f174dd1ba53e95c83fe995fc32f9d9ac6cb33866d7c"
            ],
            "excerpt": [
                "camera=(), microphone=(), geolocation=()"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "94e7d07c71a421321cf46d04e993382afd8ed9f19c3cd8db0d975c36a7cef191",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7d5bbfd71a907ab34032f32eee8b5de3b8605abddf2f9e596239e36afc1db4f7"
            ],
            "excerpt": "2026-12-01T22:27:34+00:00",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "0189eaf3fd926459fa171c7cf459f6a0d9ef76fed350535f8cc65a71ff3edd10",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "90bf1a9676567919921c6e3762d083196e1bfb1869699f6f5349f2c58af796a6"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "d09005dbfbcdb06ab1a8bd34dafdb314b3911dd978a6457c95ee8ae5d2a94908",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "91c42c0fa1a040d7f80914323d1d3f433d526cffadc683adc68c268a427a105b"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "a30a2d501c400aaba07cba6319a82c4a48ce913a3c7817b297794dc85eacc5f5",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "929deed68e29578520685fcaa4145ed03fd6a417786efb8ee498d5377933007e"
            ],
            "excerpt": {
                "name": "PHP",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "b65c4f6dad97f53bc9a947b5233f37506c1c1be8a26b0d006c350f9574b0fc79",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "92b9578880a36caa0ff31076f641d66feaf8a5537cd807e994ce8af8f57fa237"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "fd5ab86bde701889d4fb506087ddecc794d55a9d67035a7c9697b079604941d4",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a784f9f845acc20b040900e33a131bfc6eba8ea77f255091d7c4b3f90a82e8fb"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "c200b38208842825453a3e8d8b1fba58ab737dff34f41031ee0803c009b42dab",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "afe53d0afeaf8cc40462888a61a8ad89aac713fc585eafe85c6ac01b56822d34"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "37af29a76eee541e58853d531bf111be8e9ea91e4ff8408c1d46cb09460dd50c",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b43b62eddd6f92c9d66091f427494198b4a2703086e36143f5db2dcb219561b6"
            ],
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "055b77a69b5ef7c66128ac16245be36fc6c26cc0f69a868b9d803150d11d7a68",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bb9a627d31268a0a3d767c9b7dd7b87cb62ba087e1146ec16dc6d1dae7454eaa"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "f4a80fa3fa078cab9474a16f8fd6e1ed00303ddc48fdfdf01590ab2139130d60",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c908cefd0116a276fe627e7bf167765272772b21b55db06171e59a239c1011c2"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR1",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "283f9c1959ab5d6896f04c822af8337e23893e10e1abc7942c0b14bbb584db89",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d0c80cf56de0c50a5167f117ede1afeaca2faea7b3380e254b1b6aad65164db7"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "93dc45b6d4351f22c2c5509bf3bf80c5f83981a06d263171dacc1eb8dc333dda",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d5b7f00bbe4f1f0a0a55061ff859e26fbea6f012943073e341673e02c43c1c51"
            ],
            "excerpt": [
                "default-src 'self'; img-src 'self' data:; style-src 'self'; script-src 'self' 'nonce-xD/D7+PEZiXPB7QeRtI188fk'; font-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "2565cb51b22be6321893a953fe784e37b90e6c88edb242ef8a7e60631d8933af",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "dc8898a2d4451c547e96b1c7b62fed84b4ac0c7b10f885a8037d338f99324ec2"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "a6ccb4d928c1ce991422913b96c7613bd30926e83e8cb06e7d59670bd1982d30",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ddd1093cd9159adad8aa299d9e6a55b5d5a6225c9fbda340fa94d7e29adc79ab"
            ],
            "excerpt": "ns41.infomaniak.com",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "2d49216c2c3b908b5afa0adc3936816b816bea8a25dd32b6c0670b0028ac9fa3",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "dfc79b1697720f70107912af432acc99cc0ce31f7235e51d12660409d13c9058"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "ab69add26295c21a08ac7e120b17789eb8c196cca6833091edd5d21d7991c17c",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e10f9df9ea84a6e6e286c95eac65531ff704f6cdb805c0de9ad5559aa0c8b9c4"
            ],
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "fd70726fd9641962b7c4b97be8478384bc1d12589c713e61a9e0decb21afd1ce",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f03e1f17967b464a8ef286df7e52c847744b4d5521773f86a026be0e531f605b"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "f0f47ede9fa4f0ffba5c7e3cde41b492078d443f60fd4dcb770760bf4711d11d",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f2ad330c0537574bd0bbeae016afe3b6f2737a1baf8f10b9ab465f0070efd5a8"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "12f2859684ad8fedb95c7441279b8c2b8f4cd5cfc230b0b4da852b7b77876060",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f7f58e2093c93fa3ab8b12f7b35340609a533f7bb319d5be1109386b16cc9dd4"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        },
        {
            "id": "ea23ac03b2fd931fcd889aec30b924aff9d2f914a1a7fbc906df3bb7d450db87",
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fec32aea53fe28c5f60ad80714b7f41ce838265302cddd09ade0eb7edc34201a"
            ],
            "excerpt": {
                "http_only": true,
                "name": "PHPSESSID",
                "same_site": "lax",
                "secure": true
            },
            "first_seen_at": "2026-09-04T19:33:51+00:00",
            "last_seen_at": "2026-09-04T19:33:51+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}