{
    "schema_version": "2.0",
    "engine_version": "3.0.0-rc.3",
    "pattern_version": "2026.09.4",
    "scan_id": "8b8b1dda58681eb7e07face1",
    "domain": "impots.gouv.fr",
    "scanned_at": "2026-09-20T19:36:39+00:00",
    "duration_ms": 850.86,
    "entity": {
        "id": "bf8c7f9780881d9150d454d315bd1f8dda830dc1904c61b382640d3e4b52c71e",
        "display_name": "impots.gouv.fr",
        "slug": "impots-gouv-fr",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "impots.gouv.fr"
    },
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 5,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "trust_profile": {
        "methodology_version": "2.1.0",
        "knowledge_coverage": 63,
        "dimensions": {
            "security": {
                "quality": 61,
                "coverage": 100,
                "band": "watch",
                "conclusive": true,
                "evidence_count": 3,
                "unknown_count": 0
            },
            "privacy": {
                "quality": 100,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "dependencies_control": {
                "quality": null,
                "coverage": 0,
                "band": "non_conclusive",
                "conclusive": false,
                "evidence_count": 0,
                "unknown_count": 2
            },
            "resilience": {
                "quality": 80,
                "coverage": 35,
                "band": "non_conclusive",
                "conclusive": false,
                "evidence_count": 1,
                "unknown_count": 1
            },
            "transparency": {
                "quality": 60,
                "coverage": 70,
                "band": "watch",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "mail": {
                "quality": 75,
                "coverage": 70,
                "band": "favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            }
        },
        "global": {
            "quality": 74,
            "coverage": 63,
            "secondary": true
        }
    },
    "signals": [
        {
            "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480",
            "key": "data_location_unknown",
            "category": "dependencies_control",
            "importance": "medium",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Localisation effective des données non déterminable",
                "en": "Effective data location cannot be determined"
            },
            "explanation": {
                "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.",
                "en": "Public observations cannot establish where data is actually processed or stored."
            },
            "limitations": {
                "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.",
                "en": "A provider headquarters, an IP address, or a CDN is not proof of data location."
            },
            "evidence_ids": [],
            "change_status": "stable"
        },
        {
            "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9",
            "key": "origin_host_unknown",
            "category": "dependencies_control",
            "importance": "low",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Hébergement d’origine non déterminable",
                "en": "Origin hosting cannot be determined"
            },
            "explanation": {
                "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.",
                "en": "An edge service or reverse proxy can hide origin infrastructure."
            },
            "limitations": {
                "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.",
                "en": "Edge presence must not be treated as origin hosting."
            },
            "evidence_ids": [],
            "change_status": "stable"
        }
    ],
    "changes": [],
    "knowledge": {
        "claims": [
            {
                "id": "1c909338b9d78724fda756e13d7de7a145126061b1176c47e20c5f82b9af8be6",
                "subject": "impots.gouv.fr",
                "predicate": "openpgp",
                "value": null,
                "state": "to_confirm",
                "rationale": "security_txt_encryption_not_observed",
                "evidence_ids": [
                    "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "3f0b160354098092dc69b99895343d6a65e7af391b894ab4c7f811fa1a437528",
                "subject": "impots.gouv.fr",
                "predicate": "tls_issuer",
                "value": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
                "state": "observed",
                "rationale": "certificate_observed",
                "evidence_ids": [
                    "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "433db0c38a8ef1ac8920368f779d67c5ed247ff90feaa6e57df84fc2d0ca4fe0",
                "subject": "impots.gouv.fr",
                "predicate": "spf_policy",
                "value": "missing",
                "state": "observed",
                "rationale": "mail_policy_observed",
                "evidence_ids": [
                    "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "45adc511ccf5a3c47d53e58a1e63683456ab84f78bd5f9dac03b2b1479d7f4ac",
                "subject": "impots.gouv.fr",
                "predicate": "post_quantum_tls",
                "value": null,
                "state": "untested",
                "rationale": "client_capability_unavailable",
                "evidence_ids": [
                    "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "7ba86c6dc1bf5889bfdb353d93726910a87f05402bd9835bcbed856709718ad6",
                "subject": "impots.gouv.fr",
                "predicate": "canary_detection",
                "value": false,
                "state": "to_confirm",
                "rationale": "no_known_passive_signature_observed",
                "evidence_ids": [
                    "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995",
                "subject": "impots.gouv.fr",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799",
                "subject": "impots.gouv.fr",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            }
        ],
        "relations": [
            {
                "id": "3ef589e45eeeb6133ba4630828faa7ca45b531a846fafac4f27a3b31ec2ddff7",
                "subject": "impots.gouv.fr",
                "predicate": "resolves_to",
                "object": "193.246.48.80",
                "state": "observed",
                "evidence_ids": [
                    "30ef8ba1e13f57176ce6379e25777f3da90e480ba1042b481a9bd4c92c15e1f7"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "8c9b50d9cbce19976d21e20c56b1ac706ea518b2d378967736a9602a7b2880d7",
                "subject": "impots.gouv.fr",
                "predicate": "resolves_to",
                "object": "2001:918:ffcb::c1f6:3050",
                "state": "observed",
                "evidence_ids": [
                    "fee6ae9564426e922e7191e3c8dab27f83ea5e75e269aec92cd5584d9b2be841"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "9a56c38b642148d95e5d84c2c8712d8396ba85c44455e1d9507607d68686e1ef",
                "subject": "impots.gouv.fr",
                "predicate": "resolves_to",
                "object": "2001:918:ffcb::c1f6:3063",
                "state": "observed",
                "evidence_ids": [
                    "9552ca19228f1a9329b935c08956c5f46ebabe047ef4fd587857f22d567d8eea"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "a16c029cb8ec9f5ce519e2d7cd0ed35b8ad2a9b22fe948efd49661acb4d99ef0",
                "subject": "impots.gouv.fr",
                "predicate": "uses_technology",
                "object": "Drupal 10 (https://www.drupal.org)",
                "state": "observed",
                "evidence_ids": [
                    "939c61410462c24ac94be70b0b6079b1b183acb8853155b476ea12aa02171c89"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "c0f426a3a5bf1c4e9eb0874e854bc61a17b2699a38d954abc85d5ce15b0bc99c",
                "subject": "impots.gouv.fr",
                "predicate": "resolves_to",
                "object": "193.246.48.99",
                "state": "observed",
                "evidence_ids": [
                    "d68977bcaa4861e68e7c3788cb3be1a63dafaed5f6fd88b795c26fb640880e26"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "de79dfad4fc34732321b1028e2628ee8ea2183c4c818a6935a633320fad56c62",
                "subject": "impots.gouv.fr",
                "predicate": "uses_technology",
                "object": "Drupal",
                "state": "observed",
                "evidence_ids": [
                    "aac86f03253f52a4b4a840f8b62d3ca06ec9aec10bb334563b7f59bb86d5b9a5"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            }
        ],
        "unknowns": [
            {
                "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995",
                "subject": "impots.gouv.fr",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799",
                "subject": "impots.gouv.fr",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            }
        ],
        "evidence": [
            {
                "id": "939c61410462c24ac94be70b0b6079b1b183acb8853155b476ea12aa02171c89",
                "observation_ids": [
                    "00e42fb41fee7a8acdd2f7988fb7f82a1747bcdd3aace350bb6e06d87a2422d0"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "Drupal 10 (https://www.drupal.org)",
                    "version": "",
                    "version_exposed": false
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "1d11d0c03102b5a52aef7428722998bfbcbf7c2044462bf09bb023bf4afe0ae0",
                "observation_ids": [
                    "223d6f5bda2638c9f8b02d67b304fa4146c6d84f17db8e50a0577dab3c1081a2"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "c73764a3eb3c98993828dfae49b5cdc9f22b85d3a278a0a83dd4ae397340d715",
                "observation_ids": [
                    "3d9d9f183ee49f96c8d893a1a86c80819fbbcffa7e479eb24a7dafd5d1d85b06"
                ],
                "evidence_type": "dnssec_evidence",
                "collector": "dnssec_depth",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "chain_consistency": {
                        "reason": "insufficient_record_evidence",
                        "state": "untested"
                    },
                    "dnskey": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "ds": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "validation": {
                        "reason": "no_validating_resolver",
                        "state": "untested"
                    }
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "30ef8ba1e13f57176ce6379e25777f3da90e480ba1042b481a9bd4c92c15e1f7",
                "observation_ids": [
                    "423e90f196f435f72e539f1c200cc6e9217424318b210b8df061ee198826f7c2"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "193.246.48.80",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "ea87afcb68667e5c13e30de6d61ab6eaca7acfe2457e598a05f3c22b632ec9cb",
                "observation_ids": [
                    "4a725d740f58474a7e2a9704c370d22a77f0746b3b1866eafc8ff8d3fbeaaa6f"
                ],
                "evidence_type": "module_finding",
                "collector": "transparency",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": 200,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "f4794994cb81c7796ab1a2e5c55e26e7edb259c8a6fabe0bee9f87d25e3db4ec",
                "observation_ids": [
                    "5209f3bae66193de2afe585c953c02da646d542f3ff2d4260fa4fff1eb152b8d"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:",
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "331a192ac491a3bf94f8cdf52543d3b3c96dbfb6557aaab1b42fdbbc0eebff39",
                "observation_ids": [
                    "56631b82e9474f144e4d11a980f85db5004b811756e9fdc80f9e132921cd53a8"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "27d757fc4812e631a3595b312e9d864f1fd02489d0fc9c711dd8e85185684585",
                "observation_ids": [
                    "57c80728df15c282519a41dd9eb6401f98556f84e36217391e2df74aec76fe0e"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83",
                "observation_ids": [
                    "5f0661c68c93cd84e1366dc2859a515041a1ae9d576001b84b6a3839f925ea36"
                ],
                "evidence_type": "openpgp_discovery",
                "collector": "openpgp_discovery",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "dns_openpgpkey": {
                        "reason": "recipient_identity_required",
                        "state": "untested"
                    },
                    "fingerprint": null,
                    "mechanisms": [],
                    "reason": "security_txt_encryption_not_observed",
                    "state": "not_observed",
                    "wkd": {
                        "reason": "wkd_not_fetched_without_identity",
                        "state": "untested"
                    }
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "8c051b367b42cf4ebd68384eb0210084c7aed76c05d49724b1c60c06fed3e040",
                "observation_ids": [
                    "62599acea862e365b47b65014ee68b0eea960f34d701143669ece8ca1543bcd8"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [],
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "10cafdbae5038002855ff58978aafedd907770b9aabdb03d3c4ddd1a31154e91",
                "observation_ids": [
                    "667ef041a2b281fae6b98b4443a8e2b86a624f5b49085dea6915c39efcfca395"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "info"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "80ad21656ae037abb1219bb10dfcf79ca848dc650c0f630137a1fdc81ac2ef2d",
                "observation_ids": [
                    "6d709db4c3cd23cfb3f58a8e88ba13e7784629646be9787b7c377b404b6e62f1"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "08a376e225fa1fa7f2f835d7627ed804df1cdc9d3f4fee0d6f59301c687cde46",
                "observation_ids": [
                    "706c3d42e55afcbfb637c9dde9ca041ca3f2a32ca49b2cfcc5eea173d8208088"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": {
                        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db",
                "observation_ids": [
                    "706d4ee60763f2985b32e59d02235f2ca9ef8513afed22d5066b925663be49d7"
                ],
                "evidence_type": "tls_issuer",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "da77a821be1812ae1a8aa29cce23dd93e6edab59987edd4e85d9920905109a9f",
                "observation_ids": [
                    "848cc37446dce5d1fdcfa087ceee74f5e6d74c42bcc6142f34ab3ec9f23026d0"
                ],
                "evidence_type": "tls_valid_to",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "2026-10-03T23:59:59+00:00",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "7caf9d481a3d8d0dad3a1a6c0e8af0c789b62194b4899efc54867467358454b7",
                "observation_ids": [
                    "85b1a1f8b7b5726feecb9730fe0522325bdb6701b972794cc260e96c185f4cf9"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "3ab196516bff362147fb25e8bf46eb0156e0ea768428777d025b09a412310dc5",
                "observation_ids": [
                    "8786993ec46a6b30485ebecfb2046ffad7f5313c1c74b64ab820ac0e9688b70d"
                ],
                "evidence_type": "csp_evidence",
                "collector": "csp_depth",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "enforced": true,
                    "frame_ancestors": true,
                    "hash_present": false,
                    "nonce_present": false,
                    "object_src": false,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "a1b91240e9b508961ada33dd086d399b78156eee8f094e73915e1f0910347871",
                "observation_ids": [
                    "8919b362bbb4ec7f65193ab104f2ae680e571c0f9d242ba8f143e0121b96f231"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "7a9a99611db62fd127b9a0658c548ad95d980237e751597e077b197ed403daa1",
                "observation_ids": [
                    "8e93ef906fe0fbc0267db82c0cf31cd33405d4ee4f2ea5c092ec6e9a2c1bc962"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "6b9a4fa65e440ab44ee9a867afa7489686811fac62bcfb244a42ae246404d7c9",
                "observation_ids": [
                    "8ea6930fb7ae7373a700deb96f1b1d0c652f04c5392f2b6f161ffa554557a9bb"
                ],
                "evidence_type": "modern_transport_evidence",
                "collector": "modern_transport",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "alpn": {
                        "state": "untested",
                        "value": ""
                    },
                    "certificate": {
                        "cipher": "",
                        "issuer": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
                        "protocol": "",
                        "san_count": 0,
                        "state": "observed",
                        "valid_from": "2026-03-19T00:00:00+00:00",
                        "valid_to": "2026-10-03T23:59:59+00:00"
                    },
                    "http2": {
                        "negotiated": "3",
                        "state": "untested"
                    },
                    "http3_advertised": {
                        "alt_svc": "",
                        "state": "not_observed"
                    },
                    "ipv4": {
                        "addresses": [
                            "193.246.48.80",
                            "193.246.48.99"
                        ],
                        "state": "observed"
                    },
                    "ipv6": {
                        "addresses": [
                            "2001:918:ffcb::c1f6:3050",
                            "2001:918:ffcb::c1f6:3063"
                        ],
                        "state": "observed"
                    }
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "070e3dcb7c4d68182110d19ef1b3ef9d6f381c0dffc3d830c678d600df0299ff",
                "observation_ids": [
                    "94956e683d439f3665f5b8c64fe8214ed9d13e91a01c1151cc4e262d4a034837"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "SAMEORIGIN"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8",
                "observation_ids": [
                    "9795719527d6652c41ed856c68da255f696e984a529b13c20e184dced2c5d086"
                ],
                "evidence_type": "spf_policy",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": "missing",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "6523d083ab08fac927ced59e901c75538c46c4569061999b7849f6e0f2aa52ae",
                "observation_ids": [
                    "99e346aa469b1850674fc4901cdea98e1b3ee474b0a7eea2947fde350aa077fb"
                ],
                "evidence_type": "module_finding",
                "collector": "supply_chain",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": 3,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "9552ca19228f1a9329b935c08956c5f46ebabe047ef4fd587857f22d567d8eea",
                "observation_ids": [
                    "a330173bb6e6bf2b032b2a704a1e318733530e796e728b0fe31931e153f74d61"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "2001:918:ffcb::c1f6:3063",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "3ea810e63fe4ca0c8f903e41df59b5a94ef8bd295bda4aa72d6149b5a91ceb04",
                "observation_ids": [
                    "ae4f0095481959efbbfad3ccf0089c653003eabb53715ea9e64e257d3d526ad7"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:",
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c",
                "observation_ids": [
                    "affd55a06fc0e857f02956b50128593f8f816fcfbe26cb9a03ec4aaa14a9b32e"
                ],
                "evidence_type": "canary_signal",
                "collector": "canary_passive",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "matches": [],
                    "reason": "no_known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "not_observed"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "05f7ff09f6e7c6aa20fa308ed57fbb7d2c41e83e8a327070da90826a56a67d7c",
                "observation_ids": [
                    "b4839ce381a82a1c262727f66bf93eee11d271be24705e1120298fea70b7de2b"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "881aa2079d0e3b57199368042011d08e255c8405418236635498d183ece3ab0c",
                "observation_ids": [
                    "be90da2668501cc2ea541dc4c5068ccc56d8698efe96f81d2c89f9d773550438"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "max-age=34560000; includeSubDomains"
                ],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "db673a75a08a881dc6285a5aa8f4441d4da83133a9f959d8f09fb54f3579d769",
                "observation_ids": [
                    "c7b04a1db6bd84ff14fe4cca375164395e91d50b3b8f657c0f62b94c0b384d9e"
                ],
                "evidence_type": "module_finding",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": "13 days",
                    "severity": "high"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "512374c9ec3b0e96f8604688c00a4cb4178cf517a2bf6a3450fc5266fbc5ba9a",
                "observation_ids": [
                    "c9043bb2103f551fe41779d7212fd6c9c943f497e667e0a3baa43f5303f072e4"
                ],
                "evidence_type": "mail_transport_evidence",
                "collector": "mail_transport",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "bimi": {
                        "records": [],
                        "state": "not_observed"
                    },
                    "dane_tlsa": {
                        "query_supported": false,
                        "reason": "tlsa_query_not_available",
                        "records": [],
                        "state": "untested"
                    },
                    "dkim": {
                        "reason": "no_selector_bruteforce",
                        "state": "untested"
                    },
                    "mta_sts": {
                        "policy": null,
                        "policy_state": "untested",
                        "records": [],
                        "state": "not_observed"
                    },
                    "tls_rpt": {
                        "records": [],
                        "state": "not_observed"
                    }
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "40a608777bc033cb4493333fc716abe6702dda08eca56e660c279929d4bc587b",
                "observation_ids": [
                    "d2d7ab8deddf4c00ae649266e8529b83f7b4ff4bb7df6597f1bd9691005af026"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "d68977bcaa4861e68e7c3788cb3be1a63dafaed5f6fd88b795c26fb640880e26",
                "observation_ids": [
                    "d6d42d948bfd5d016a358b078f712c5378b38ba6b8f3e4289ee6305bac01aef1"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "193.246.48.99",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "dd18b02868e014fb6f484369991fa1026874df16d8df82ce0c3e44dced92ed9d",
                "observation_ids": [
                    "d87d22ce27f27ede1705fb136bee23811ae084f56523d2981e197405c870212e"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "aac86f03253f52a4b4a840f8b62d3ca06ec9aec10bb334563b7f59bb86d5b9a5",
                "observation_ids": [
                    "ded62117c7d994b9fbf0bcff9ced645463f0a401ec7f779dedf181b1b79a2032"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "Drupal",
                    "version": "",
                    "version_exposed": false
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373",
                "observation_ids": [
                    "eb3c0ef56c02b6eb938f18d51a952ca0cd1404f309d134a9da89834dbd295767"
                ],
                "evidence_type": "post_quantum_tls",
                "collector": "pq_tls_probe",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "capability": {
                        "capable": false,
                        "groups": [],
                        "reason": "proc_open_unavailable"
                    },
                    "group": null,
                    "reason": "client_capability_unavailable",
                    "state": "untested"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "48ac1bf95bc6526112a0c29948d57aaf1c30e9db46d446d6cfda03af40555d3f",
                "observation_ids": [
                    "ecd0ca3518f8a97a1d498d7252cbd37b644aa1e7572724fb60c6f01a5fe1484a"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "info"
                },
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            },
            {
                "id": "fee6ae9564426e922e7191e3c8dab27f83ea5e75e269aec92cd5584d9b2be841",
                "observation_ids": [
                    "f707db67a11bdb4bf9091ade8d4cdfa0040b85050093e30776702a26cd0ddeb8"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "2001:918:ffcb::c1f6:3050",
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00"
            }
        ]
    },
    "dossier": {
        "executive_summary": [
            "2 observations publiques sont documentées dans ce dossier.",
            "Aucune dépendance structurante n’est mise en avant par les preuves publiques actuelles.",
            "Aucune évolution utile n’est retenue depuis la lecture précédente.",
            "4 points restent à confirmer ou ne sont pas observables de l’extérieur."
        ],
        "knowledge_states": {
            "observed": 2,
            "deduced": 0,
            "to_confirm": 2,
            "not_observable": 2,
            "contradictory": 0,
            "untested": 1
        },
        "short_view": [
            {
                "key": "identity_governance",
                "label": "Identité et gouvernance",
                "items": [
                    {
                        "id": "1c909338b9d78724fda756e13d7de7a145126061b1176c47e20c5f82b9af8be6",
                        "title": "Openpgp",
                        "value": null,
                        "state": "to_confirm",
                        "state_label": "À confirmer",
                        "evidence_ids": [
                            "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83"
                        ],
                        "rationale": "security_txt_encryption_not_observed"
                    },
                    {
                        "id": "7ba86c6dc1bf5889bfdb353d93726910a87f05402bd9835bcbed856709718ad6",
                        "title": "Canary detection",
                        "value": false,
                        "state": "to_confirm",
                        "state_label": "À confirmer",
                        "evidence_ids": [
                            "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c"
                        ],
                        "rationale": "no_known_passive_signature_observed"
                    },
                    {
                        "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995",
                        "title": "Origin host",
                        "value": null,
                        "state": "not_observable",
                        "state_label": "Non observable de l'extérieur",
                        "evidence_ids": [],
                        "rationale": "public_edge_does_not_reveal_origin"
                    }
                ],
                "states": {
                    "observed": 0,
                    "deduced": 0,
                    "to_confirm": 2,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 0
                }
            },
            {
                "key": "infrastructure_transport",
                "label": "Infrastructure et transport",
                "items": [
                    {
                        "id": "3f0b160354098092dc69b99895343d6a65e7af391b894ab4c7f811fa1a437528",
                        "title": "Tls issuer",
                        "value": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db"
                        ],
                        "rationale": "certificate_observed"
                    },
                    {
                        "id": "45adc511ccf5a3c47d53e58a1e63683456ab84f78bd5f9dac03b2b1479d7f4ac",
                        "title": "Post quantum tls",
                        "value": null,
                        "state": "untested",
                        "state_label": "Non testé",
                        "evidence_ids": [
                            "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373"
                        ],
                        "rationale": "client_capability_unavailable"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 1
                }
            },
            {
                "key": "mail_trust",
                "label": "Messagerie et confiance",
                "items": [
                    {
                        "id": "433db0c38a8ef1ac8920368f779d67c5ed247ff90feaa6e57df84fc2d0ca4fe0",
                        "title": "Spf policy",
                        "value": "missing",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8"
                        ],
                        "rationale": "mail_policy_observed"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 0
                }
            },
            {
                "key": "dependencies_exposure",
                "label": "Dépendances et exposition",
                "items": [
                    {
                        "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799",
                        "title": "Data location",
                        "value": null,
                        "state": "not_observable",
                        "state_label": "Non observable de l'extérieur",
                        "evidence_ids": [],
                        "rationale": "provider_metadata_does_not_prove_processing_location"
                    }
                ],
                "states": {
                    "observed": 0,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 0
                }
            }
        ],
        "structuring_dependencies": [],
        "open_questions": [
            {
                "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995",
                "subject": "impots.gouv.fr",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            },
            {
                "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799",
                "subject": "impots.gouv.fr",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-20T19:36:39+00:00",
                "last_seen_at": "2026-09-20T19:36:39+00:00",
                "active": true
            }
        ],
        "evidence_count": 37,
        "meaningful_change_count": 0
    },
    "timeline": {
        "first_observed_at": "2026-09-20T19:36:39+00:00",
        "last_observed_at": "2026-09-20T19:37:54+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "changes": [],
        "history_count": 2
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}