{ "schema_version": "2.0", "engine_version": "3.0.0-rc.3", "pattern_version": "2026.09.4", "scan_id": "544446ada9e5a1bc0f3192ab", "domain": "impots.gouv.fr", "scanned_at": "2026-09-20T19:37:54+00:00", "duration_ms": 710.67, "entity": { "id": "bf8c7f9780881d9150d454d315bd1f8dda830dc1904c61b382640d3e4b52c71e", "display_name": "impots.gouv.fr", "slug": "impots-gouv-fr", "entity_type": "domain_subject", "auto_created": true, "primary_asset": "impots.gouv.fr" }, "scope": { "mode": "passive", "coverage": "full", "access_level": "full", "access_reason": "public_document_available", "requests": 5, "homepage_only": true, "javascript_executed": false, "ports_scanned": false, "private_networks_blocked": true, "protection_bypassed": false, "max_body_bytes": 1572864, "scan_budget_seconds": 24, "budget_exhausted": false, "transport": "curl_with_socket_fallback" }, "trust_profile": { "methodology_version": "2.1.0", "knowledge_coverage": 63, "dimensions": { "security": { "quality": 61, "coverage": 100, "band": "watch", "conclusive": true, "evidence_count": 3, "unknown_count": 0 }, "privacy": { "quality": 100, "coverage": 100, "band": "very_favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "dependencies_control": { "quality": null, "coverage": 0, "band": "non_conclusive", "conclusive": false, "evidence_count": 0, "unknown_count": 2 }, "resilience": { "quality": 80, "coverage": 35, "band": "non_conclusive", "conclusive": false, "evidence_count": 1, "unknown_count": 1 }, "transparency": { "quality": 60, "coverage": 70, "band": "watch", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "mail": { "quality": 75, "coverage": 70, "band": "favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 } }, "global": { "quality": 74, "coverage": 63, "secondary": true } }, "signals": [ { "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480", "key": "data_location_unknown", "category": "dependencies_control", "importance": "medium", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Localisation effective des données non déterminable", "en": "Effective data location cannot be determined" }, "explanation": { "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.", "en": "Public observations cannot establish where data is actually processed or stored." }, "limitations": { "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.", "en": "A provider headquarters, an IP address, or a CDN is not proof of data location." }, "evidence_ids": [], "change_status": "stable" }, { "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9", "key": "origin_host_unknown", "category": "dependencies_control", "importance": "low", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Hébergement d’origine non déterminable", "en": "Origin hosting cannot be determined" }, "explanation": { "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.", "en": "An edge service or reverse proxy can hide origin infrastructure." }, "limitations": { "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.", "en": "Edge presence must not be treated as origin hosting." }, "evidence_ids": [], "change_status": "stable" } ], "changes": [ { "id": "4dc5e305a2172d7672ba6f3c3aff28d05d9f9a34367f78bdb83cf1063a4774eb", "key": "canary_signal|impots.gouv.fr|canary_detection", "status": "stable", "direction": "neutral", "before": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "after": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "volatile_filtered": false }, { "id": "2cf2a9f8ace04434f0af15fc368ae95742a75a4fd65dcff2b3924fd3f692235a", "key": "csp_evidence|impots.gouv.fr|csp_depth", "status": "stable", "direction": "neutral", "before": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": false, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "after": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": false, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "volatile_filtered": false }, { "id": "06e32835e9ff0528a58c7f8bf4569a6ed725d9629fdfcf5fe3b23f0e12fc42a8", "key": "dns_address|impots.gouv.fr|resolves_to|097cfdd6b6c38c49acb25ceafb646db2562a3e277fec24df31c1a8a353af31f5", "status": "stable", "direction": "neutral", "before": "2001:918:ffcb::c1f6:3050", "after": "2001:918:ffcb::c1f6:3050", "volatile_filtered": false }, { "id": "fbbf9b35b1c12fa4251c505232b3e77375a5221d12acfe5a3626bca629fa5e09", "key": "dns_address|impots.gouv.fr|resolves_to|2c8d3a7ae31bee9d92758e37868e5fa52e34b3a6ed8a06d5deded8c1f1f524de", "status": "stable", "direction": "neutral", "before": "2001:918:ffcb::c1f6:3063", "after": "2001:918:ffcb::c1f6:3063", "volatile_filtered": false }, { "id": "8a31c588b5c5c5a9a1e3b7b84b96bb0f8ef5e8f1c376f8735638bc4c13bc3c5d", "key": "dns_address|impots.gouv.fr|resolves_to|38bdbb9c9f302cba0cb352a1be00e8c7f65c7b56b9f43ccf6236fa000531ec96", "status": "stable", "direction": "neutral", "before": "193.246.48.99", "after": "193.246.48.99", "volatile_filtered": false }, { "id": "6b86c72ad0a6b9bf1531330a9f15afbe420e249f40aff68276280967cc8ea6d0", "key": "dns_address|impots.gouv.fr|resolves_to|fd76edebb09511c8f52117bdeaee0f052fcb2314c16d0f7e4b3728f97613f030", "status": "stable", "direction": "neutral", "before": "193.246.48.80", "after": "193.246.48.80", "volatile_filtered": false }, { "id": "fb70da8e36e890c0274f160a87aa5f35bb9e5acdcef5b481df04b7017e837ec7", "key": "dnssec_evidence|impots.gouv.fr|dnssec_depth", "status": "stable", "direction": "neutral", "before": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "after": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "volatile_filtered": false }, { "id": "d42887476d297e634e446e7325f25efb1ab413984d5525ebd8d64bcdd61f263f", "key": "http_header|impots.gouv.fr|content-security-policy", "status": "stable", "direction": "neutral", "before": [ "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:" ], "after": [ "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:" ], "volatile_filtered": false }, { "id": "05ec5a4620cdae07d6b67e9ade7b1ff8bcab1834532c35b2822cf604483879cd", "key": "http_header|impots.gouv.fr|strict-transport-security", "status": "stable", "direction": "neutral", "before": [ "max-age=34560000; includeSubDomains" ], "after": [ "max-age=34560000; includeSubDomains" ], "volatile_filtered": false }, { "id": "6c7b38e9ff932f39457bf46fff0bdd7b2dffc4f9f82aee2575a048aaa45b5bde", "key": "http_header|impots.gouv.fr|x-frame-options", "status": "stable", "direction": "neutral", "before": [ "SAMEORIGIN" ], "after": [ "SAMEORIGIN" ], "volatile_filtered": false }, { "id": "f07cec16075064e6ccb12a0d78d4c599daf0a58dd365c347c6ee45ff5deeafcf", "key": "mail_policy_flag|impots.gouv.fr|bimi_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "ad4db023ef00e319cf83c378f48cfb5a8be949e8922b9088fdeb2199478e7ea4", "key": "mail_policy_flag|impots.gouv.fr|mta_sts_declared", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "a57371164b28207156ba28738f839549b6076893dca8e54d6199b35b247e7b77", "key": "mail_policy_flag|impots.gouv.fr|tls_reporting", "status": "stable", "direction": "neutral", "before": false, "after": false, "volatile_filtered": false }, { "id": "d2744d2a62bbd2c78124b73dea03b7b2f8f27dfca1d9aa96698d84008b4ce88b", "key": "mail_transport_evidence|impots.gouv.fr|mail_transport_depth", "status": "stable", "direction": "neutral", "before": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "after": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "volatile_filtered": false }, { "id": "72b3555e36013e975679e2fe5425ebaeff9ba5ebd15c5868e2d58838bbcfd6c0", "key": "modern_transport_evidence|impots.gouv.fr|modern_transport", "status": "stable", "direction": "neutral", "before": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-03-19T00:00:00+00:00", "valid_to": "2026-10-03T23:59:59+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "193.246.48.80", "193.246.48.99" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:918:ffcb::c1f6:3050", "2001:918:ffcb::c1f6:3063" ], "state": "observed" } }, "after": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-03-19T00:00:00+00:00", "valid_to": "2026-10-03T23:59:59+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "193.246.48.80", "193.246.48.99" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:918:ffcb::c1f6:3050", "2001:918:ffcb::c1f6:3063" ], "state": "observed" } }, "volatile_filtered": false }, { "id": "fdc2a3e5cde5696f3246020b4344046107bad12dc203d6e3744cad30c1478b9d", "key": "module_finding|impots.gouv.fr|dns:caa_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "ca9987cc2b93240ad07001b3804ce84a2d8c89d5d5ca7913b922f91a62cafa00", "key": "module_finding|impots.gouv.fr|dns:dns_single_ns", "status": "stable", "direction": "neutral", "before": { "evidence": [], "severity": "high" }, "after": { "evidence": [], "severity": "high" }, "volatile_filtered": false }, { "id": "e6b5f0e6636a1f6db84b9d04599699e20c1f91482980d6ed6311cab33b820fc7", "key": "module_finding|impots.gouv.fr|dns:dnssec_not_tested", "status": "stable", "direction": "neutral", "before": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "after": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "volatile_filtered": false }, { "id": "3b0076744e3770729ee8ffcb74fe62695cdf76b6a3574c9a0c13a71dbfd20a80", "key": "module_finding|impots.gouv.fr|headers:coep_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "info" }, "after": { "evidence": null, "severity": "info" }, "volatile_filtered": false }, { "id": "28a7737c8a8fa5da2276400d0dff1a34b788d8a93bb75210239716d95b56c6d3", "key": "module_finding|impots.gouv.fr|headers:coop_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "52bf2c5753387153628d23aae03c889322b6a2b76a4f1ca3ff07ac1d0dbd10a1", "key": "module_finding|impots.gouv.fr|headers:corp_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "dfdd15283e42f37ef5a693101c93390e2437c0162650835a1da07e9d10fea921", "key": "module_finding|impots.gouv.fr|headers:csp_unsafe_eval", "status": "stable", "direction": "neutral", "before": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "after": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "volatile_filtered": false }, { "id": "b9d8e557a015879991a81b7d103e97069434d98d33e7f702dbfbe9f8dcd470e7", "key": "module_finding|impots.gouv.fr|headers:csp_unsafe_inline", "status": "stable", "direction": "neutral", "before": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "after": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "volatile_filtered": false }, { "id": "e0e4d7ccbc59f32f9b3803627800ad7707944e7ada82b6119a295aa99b063c39", "key": "module_finding|impots.gouv.fr|headers:nosniff_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "medium" }, "after": { "evidence": null, "severity": "medium" }, "volatile_filtered": false }, { "id": "1c51d90515034eae6c2bcab9a0776f9f3769b14948bb27ffdd373d90cb2f972d", "key": "module_finding|impots.gouv.fr|headers:permissions_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "low" }, "after": { "evidence": null, "severity": "low" }, "volatile_filtered": false }, { "id": "40db27cb99c8c70f8b35d8e3fe3fb6de6108808356ec8dcbb2092b9fd97c26be", "key": "module_finding|impots.gouv.fr|headers:referrer_missing", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "medium" }, "after": { "evidence": null, "severity": "medium" }, "volatile_filtered": false }, { "id": "c53072b6be02ddb036ba0de9f414d00ec07a8519f3616f5dc09d26e6c039440a", "key": "module_finding|impots.gouv.fr|mail_trust:mail_not_advertised", "status": "stable", "direction": "neutral", "before": { "evidence": null, "severity": "info" }, "after": { "evidence": null, "severity": "info" }, "volatile_filtered": false }, { "id": "be32367c3dfb1ed37e8e1ff41fa70d9fca42971f99de537a1baefc579d43a292", "key": "module_finding|impots.gouv.fr|supply_chain:target_blank_without_noopener", "status": "stable", "direction": "neutral", "before": { "evidence": 3, "severity": "low" }, "after": { "evidence": 3, "severity": "low" }, "volatile_filtered": false }, { "id": "0a77d03ed9f2b82568414780adc9621cf16d73161116dd92270bbdaf944c4165", "key": "module_finding|impots.gouv.fr|tls:certificate_soon", "status": "stable", "direction": "neutral", "before": { "evidence": "13 days", "severity": "high" }, "after": { "evidence": "13 days", "severity": "high" }, "volatile_filtered": false }, { "id": "482c07e3334c8ba05bd6b2d3244c7f7922e5f0e4ce17c11855855be8c054f822", "key": "module_finding|impots.gouv.fr|transparency:security_txt_missing", "status": "stable", "direction": "neutral", "before": { "evidence": 200, "severity": "medium" }, "after": { "evidence": 200, "severity": "medium" }, "volatile_filtered": false }, { "id": "ced73e1650cd73a7b35198be0933d4242d89491a2cc9fa1e3ca38be0812a131f", "key": "openpgp_discovery|impots.gouv.fr|openpgp", "status": "stable", "direction": "neutral", "before": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "after": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "volatile_filtered": false }, { "id": "6b19b6b7db71a6267c69fd95f008a8cec30b1d02e83a6b8c846f4ba3bb0e6022", "key": "post_quantum_tls|impots.gouv.fr|post_quantum_tls", "status": "stable", "direction": "neutral", "before": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "after": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "volatile_filtered": false }, { "id": "b2abd52bc6ba37fd089069ef30c3f2c96fef4e4cf2c9a2ad874efa8d96df65eb", "key": "spf_policy|impots.gouv.fr|spf_policy", "status": "stable", "direction": "neutral", "before": "missing", "after": "missing", "volatile_filtered": false }, { "id": "cba6494523906c1f984b05979d5b7379fa1a4ac495ecfe3b80fdce5dcd65a726", "key": "technology|impots.gouv.fr|uses_technology|39fc99d3546c348fea066bdc0bed20d4a2b3043760bd258465dc7ac20229e3d7", "status": "stable", "direction": "neutral", "before": { "name": "Drupal 10 (https://www.drupal.org)", "version": "", "version_exposed": false }, "after": { "name": "Drupal 10 (https://www.drupal.org)", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "18b9c76108cdcd71e5c033b6cefb99eaeda17a8333446348e50ca8c261f8b49d", "key": "technology|impots.gouv.fr|uses_technology|868eba83018d8ed398c1c741daa80777f767c357fcb0c577e24bece6865799c5", "status": "stable", "direction": "neutral", "before": { "name": "Drupal", "version": "", "version_exposed": false }, "after": { "name": "Drupal", "version": "", "version_exposed": false }, "volatile_filtered": false }, { "id": "61d5250a2997557d5fe2f90fc262ddbf38508451ca1f56298d758ab92678eb5e", "key": "tls_issuer|impots.gouv.fr|issuer", "status": "stable", "direction": "neutral", "before": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "after": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "volatile_filtered": false }, { "id": "3ebe91759aec1333720ac0e38296774cfdd081985c701be82cb771890465ef93", "key": "tls_valid_to|impots.gouv.fr|valid_to", "status": "stable", "direction": "neutral", "before": "2026-10-03T23:59:59+00:00", "after": "2026-10-03T23:59:59+00:00", "volatile_filtered": false }, { "id": "7d116e678f684e44f0479296f949efe96a4d7382197180d80a19aeeaad6be063", "key": "scope:coverage", "status": "stable", "direction": "neutral", "before": "full", "after": "full", "volatile_filtered": false } ], "knowledge": { "claims": [ { "id": "1c909338b9d78724fda756e13d7de7a145126061b1176c47e20c5f82b9af8be6", "subject": "impots.gouv.fr", "predicate": "openpgp", "value": null, "state": "to_confirm", "rationale": "security_txt_encryption_not_observed", "evidence_ids": [ "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "3f0b160354098092dc69b99895343d6a65e7af391b894ab4c7f811fa1a437528", "subject": "impots.gouv.fr", "predicate": "tls_issuer", "value": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "433db0c38a8ef1ac8920368f779d67c5ed247ff90feaa6e57df84fc2d0ca4fe0", "subject": "impots.gouv.fr", "predicate": "spf_policy", "value": "missing", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "45adc511ccf5a3c47d53e58a1e63683456ab84f78bd5f9dac03b2b1479d7f4ac", "subject": "impots.gouv.fr", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "7ba86c6dc1bf5889bfdb353d93726910a87f05402bd9835bcbed856709718ad6", "subject": "impots.gouv.fr", "predicate": "canary_detection", "value": false, "state": "to_confirm", "rationale": "no_known_passive_signature_observed", "evidence_ids": [ "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995", "subject": "impots.gouv.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799", "subject": "impots.gouv.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true } ], "relations": [ { "id": "3ef589e45eeeb6133ba4630828faa7ca45b531a846fafac4f27a3b31ec2ddff7", "subject": "impots.gouv.fr", "predicate": "resolves_to", "object": "193.246.48.80", "state": "observed", "evidence_ids": [ "30ef8ba1e13f57176ce6379e25777f3da90e480ba1042b481a9bd4c92c15e1f7" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "8c9b50d9cbce19976d21e20c56b1ac706ea518b2d378967736a9602a7b2880d7", "subject": "impots.gouv.fr", "predicate": "resolves_to", "object": "2001:918:ffcb::c1f6:3050", "state": "observed", "evidence_ids": [ "fee6ae9564426e922e7191e3c8dab27f83ea5e75e269aec92cd5584d9b2be841" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "9a56c38b642148d95e5d84c2c8712d8396ba85c44455e1d9507607d68686e1ef", "subject": "impots.gouv.fr", "predicate": "resolves_to", "object": "2001:918:ffcb::c1f6:3063", "state": "observed", "evidence_ids": [ "9552ca19228f1a9329b935c08956c5f46ebabe047ef4fd587857f22d567d8eea" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "a16c029cb8ec9f5ce519e2d7cd0ed35b8ad2a9b22fe948efd49661acb4d99ef0", "subject": "impots.gouv.fr", "predicate": "uses_technology", "object": "Drupal 10 (https://www.drupal.org)", "state": "observed", "evidence_ids": [ "939c61410462c24ac94be70b0b6079b1b183acb8853155b476ea12aa02171c89" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "c0f426a3a5bf1c4e9eb0874e854bc61a17b2699a38d954abc85d5ce15b0bc99c", "subject": "impots.gouv.fr", "predicate": "resolves_to", "object": "193.246.48.99", "state": "observed", "evidence_ids": [ "d68977bcaa4861e68e7c3788cb3be1a63dafaed5f6fd88b795c26fb640880e26" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "de79dfad4fc34732321b1028e2628ee8ea2183c4c818a6935a633320fad56c62", "subject": "impots.gouv.fr", "predicate": "uses_technology", "object": "Drupal", "state": "observed", "evidence_ids": [ "aac86f03253f52a4b4a840f8b62d3ca06ec9aec10bb334563b7f59bb86d5b9a5" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" } ], "unknowns": [ { "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995", "subject": "impots.gouv.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799", "subject": "impots.gouv.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true } ], "evidence": [ { "id": "939c61410462c24ac94be70b0b6079b1b183acb8853155b476ea12aa02171c89", "observation_ids": [ "00e42fb41fee7a8acdd2f7988fb7f82a1747bcdd3aace350bb6e06d87a2422d0" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Drupal 10 (https://www.drupal.org)", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "1d11d0c03102b5a52aef7428722998bfbcbf7c2044462bf09bb023bf4afe0ae0", "observation_ids": [ "223d6f5bda2638c9f8b02d67b304fa4146c6d84f17db8e50a0577dab3c1081a2" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "c73764a3eb3c98993828dfae49b5cdc9f22b85d3a278a0a83dd4ae397340d715", "observation_ids": [ "3d9d9f183ee49f96c8d893a1a86c80819fbbcffa7e479eb24a7dafd5d1d85b06" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "30ef8ba1e13f57176ce6379e25777f3da90e480ba1042b481a9bd4c92c15e1f7", "observation_ids": [ "423e90f196f435f72e539f1c200cc6e9217424318b210b8df061ee198826f7c2" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "193.246.48.80", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "ea87afcb68667e5c13e30de6d61ab6eaca7acfe2457e598a05f3c22b632ec9cb", "observation_ids": [ "4a725d740f58474a7e2a9704c370d22a77f0746b3b1866eafc8ff8d3fbeaaa6f" ], "evidence_type": "module_finding", "collector": "transparency", "rule_version": "2026.09.4", "excerpt": { "evidence": 200, "severity": "medium" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "f4794994cb81c7796ab1a2e5c55e26e7edb259c8a6fabe0bee9f87d25e3db4ec", "observation_ids": [ "5209f3bae66193de2afe585c953c02da646d542f3ff2d4260fa4fff1eb152b8d" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "331a192ac491a3bf94f8cdf52543d3b3c96dbfb6557aaab1b42fdbbc0eebff39", "observation_ids": [ "56631b82e9474f144e4d11a980f85db5004b811756e9fdc80f9e132921cd53a8" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "27d757fc4812e631a3595b312e9d864f1fd02489d0fc9c711dd8e85185684585", "observation_ids": [ "57c80728df15c282519a41dd9eb6401f98556f84e36217391e2df74aec76fe0e" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "medium" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83", "observation_ids": [ "5f0661c68c93cd84e1366dc2859a515041a1ae9d576001b84b6a3839f925ea36" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "8c051b367b42cf4ebd68384eb0210084c7aed76c05d49724b1c60c06fed3e040", "observation_ids": [ "62599acea862e365b47b65014ee68b0eea960f34d701143669ece8ca1543bcd8" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [], "severity": "high" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "10cafdbae5038002855ff58978aafedd907770b9aabdb03d3c4ddd1a31154e91", "observation_ids": [ "667ef041a2b281fae6b98b4443a8e2b86a624f5b49085dea6915c39efcfca395" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "info" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "80ad21656ae037abb1219bb10dfcf79ca848dc650c0f630137a1fdc81ac2ef2d", "observation_ids": [ "6d709db4c3cd23cfb3f58a8e88ba13e7784629646be9787b7c377b404b6e62f1" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "08a376e225fa1fa7f2f835d7627ed804df1cdc9d3f4fee0d6f59301c687cde46", "observation_ids": [ "706c3d42e55afcbfb637c9dde9ca041ca3f2a32ca49b2cfcc5eea173d8208088" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db", "observation_ids": [ "706d4ee60763f2985b32e59d02235f2ca9ef8513afed22d5066b925663be49d7" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "da77a821be1812ae1a8aa29cce23dd93e6edab59987edd4e85d9920905109a9f", "observation_ids": [ "848cc37446dce5d1fdcfa087ceee74f5e6d74c42bcc6142f34ab3ec9f23026d0" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2026-10-03T23:59:59+00:00", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "7caf9d481a3d8d0dad3a1a6c0e8af0c789b62194b4899efc54867467358454b7", "observation_ids": [ "85b1a1f8b7b5726feecb9730fe0522325bdb6701b972794cc260e96c185f4cf9" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "3ab196516bff362147fb25e8bf46eb0156e0ea768428777d025b09a412310dc5", "observation_ids": [ "8786993ec46a6b30485ebecfb2046ffad7f5313c1c74b64ab820ac0e9688b70d" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": true, "frame_ancestors": true, "hash_present": false, "nonce_present": false, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "observed", "strict_dynamic": false, "trusted_types": false }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "a1b91240e9b508961ada33dd086d399b78156eee8f094e73915e1f0910347871", "observation_ids": [ "8919b362bbb4ec7f65193ab104f2ae680e571c0f9d242ba8f143e0121b96f231" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "7a9a99611db62fd127b9a0658c548ad95d980237e751597e077b197ed403daa1", "observation_ids": [ "8e93ef906fe0fbc0267db82c0cf31cd33405d4ee4f2ea5c092ec6e9a2c1bc962" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "medium" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "6b9a4fa65e440ab44ee9a867afa7489686811fac62bcfb244a42ae246404d7c9", "observation_ids": [ "8ea6930fb7ae7373a700deb96f1b1d0c652f04c5392f2b6f161ffa554557a9bb" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-03-19T00:00:00+00:00", "valid_to": "2026-10-03T23:59:59+00:00" }, "http2": { "negotiated": "3", "state": "untested" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "193.246.48.80", "193.246.48.99" ], "state": "observed" }, "ipv6": { "addresses": [ "2001:918:ffcb::c1f6:3050", "2001:918:ffcb::c1f6:3063" ], "state": "observed" } }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "070e3dcb7c4d68182110d19ef1b3ef9d6f381c0dffc3d830c678d600df0299ff", "observation_ids": [ "94956e683d439f3665f5b8c64fe8214ed9d13e91a01c1151cc4e262d4a034837" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "SAMEORIGIN" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8", "observation_ids": [ "9795719527d6652c41ed856c68da255f696e984a529b13c20e184dced2c5d086" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "missing", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "6523d083ab08fac927ced59e901c75538c46c4569061999b7849f6e0f2aa52ae", "observation_ids": [ "99e346aa469b1850674fc4901cdea98e1b3ee474b0a7eea2947fde350aa077fb" ], "evidence_type": "module_finding", "collector": "supply_chain", "rule_version": "2026.09.4", "excerpt": { "evidence": 3, "severity": "low" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "9552ca19228f1a9329b935c08956c5f46ebabe047ef4fd587857f22d567d8eea", "observation_ids": [ "a330173bb6e6bf2b032b2a704a1e318733530e796e728b0fe31931e153f74d61" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2001:918:ffcb::c1f6:3063", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "3ea810e63fe4ca0c8f903e41df59b5a94ef8bd295bda4aa72d6149b5a91ceb04", "observation_ids": [ "ae4f0095481959efbbfad3ccf0089c653003eabb53715ea9e64e257d3d526ad7" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": "img-src 'self' impots.gouv.fr *.impots.gouv.fr *.france-services.gouv.fr *.openstreetmap.org *.w3.org *.basemaps.cartocdn.com data: *.w3.org *.data.economie.gouv.fr *.basemaps.cartocdn.com; script-src 'self' impots.gouv.fr *.impots.gouv.fr 'unsafe-eval' 'unsafe-inline'; style-src 'unsafe-eval' 'unsafe-inline' *.impots.gouv.fr 'self';frame-ancestors 'self'; worker-src blob:", "severity": "high" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c", "observation_ids": [ "affd55a06fc0e857f02956b50128593f8f816fcfbe26cb9a03ec4aaa14a9b32e" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "05f7ff09f6e7c6aa20fa308ed57fbb7d2c41e83e8a327070da90826a56a67d7c", "observation_ids": [ "b4839ce381a82a1c262727f66bf93eee11d271be24705e1120298fea70b7de2b" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "881aa2079d0e3b57199368042011d08e255c8405418236635498d183ece3ab0c", "observation_ids": [ "be90da2668501cc2ea541dc4c5068ccc56d8698efe96f81d2c89f9d773550438" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=34560000; includeSubDomains" ], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "db673a75a08a881dc6285a5aa8f4441d4da83133a9f959d8f09fb54f3579d769", "observation_ids": [ "c7b04a1db6bd84ff14fe4cca375164395e91d50b3b8f657c0f62b94c0b384d9e" ], "evidence_type": "module_finding", "collector": "tls", "rule_version": "2026.09.4", "excerpt": { "evidence": "13 days", "severity": "high" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "512374c9ec3b0e96f8604688c00a4cb4178cf517a2bf6a3450fc5266fbc5ba9a", "observation_ids": [ "c9043bb2103f551fe41779d7212fd6c9c943f497e667e0a3baa43f5303f072e4" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "40a608777bc033cb4493333fc716abe6702dda08eca56e660c279929d4bc587b", "observation_ids": [ "d2d7ab8deddf4c00ae649266e8529b83f7b4ff4bb7df6597f1bd9691005af026" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "d68977bcaa4861e68e7c3788cb3be1a63dafaed5f6fd88b795c26fb640880e26", "observation_ids": [ "d6d42d948bfd5d016a358b078f712c5378b38ba6b8f3e4289ee6305bac01aef1" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "193.246.48.99", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "dd18b02868e014fb6f484369991fa1026874df16d8df82ce0c3e44dced92ed9d", "observation_ids": [ "d87d22ce27f27ede1705fb136bee23811ae084f56523d2981e197405c870212e" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "aac86f03253f52a4b4a840f8b62d3ca06ec9aec10bb334563b7f59bb86d5b9a5", "observation_ids": [ "ded62117c7d994b9fbf0bcff9ced645463f0a401ec7f779dedf181b1b79a2032" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Drupal", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373", "observation_ids": [ "eb3c0ef56c02b6eb938f18d51a952ca0cd1404f309d134a9da89834dbd295767" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "48ac1bf95bc6526112a0c29948d57aaf1c30e9db46d446d6cfda03af40555d3f", "observation_ids": [ "ecd0ca3518f8a97a1d498d7252cbd37b644aa1e7572724fb60c6f01a5fe1484a" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "info" }, "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" }, { "id": "fee6ae9564426e922e7191e3c8dab27f83ea5e75e269aec92cd5584d9b2be841", "observation_ids": [ "f707db67a11bdb4bf9091ade8d4cdfa0040b85050093e30776702a26cd0ddeb8" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "2001:918:ffcb::c1f6:3050", "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00" } ] }, "dossier": { "executive_summary": [ "2 observations publiques sont documentées dans ce dossier.", "Aucune dépendance structurante n’est mise en avant par les preuves publiques actuelles.", "Aucune évolution utile n’est retenue depuis la lecture précédente.", "4 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 2, "deduced": 0, "to_confirm": 2, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "1c909338b9d78724fda756e13d7de7a145126061b1176c47e20c5f82b9af8be6", "title": "Openpgp", "value": null, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "b304d5eb497eb35e2da631792ea582df5c8d2cc26a3ec5220f60015d631cfb83" ], "rationale": "security_txt_encryption_not_observed" }, { "id": "7ba86c6dc1bf5889bfdb353d93726910a87f05402bd9835bcbed856709718ad6", "title": "Canary detection", "value": false, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "207d4cf3d53d3dcc599e505283493dc582ed829cc3c8043af9fe7b7386ae146c" ], "rationale": "no_known_passive_signature_observed" }, { "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995", "title": "Origin host", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "public_edge_does_not_reveal_origin" } ], "states": { "observed": 0, "deduced": 0, "to_confirm": 2, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "3f0b160354098092dc69b99895343d6a65e7af391b894ab4c7f811fa1a437528", "title": "Tls issuer", "value": "C = GB, O = Sectigo Limited, CN = Sectigo Public Server Authentication CA OV R36", "state": "observed", "state_label": "Observé", "evidence_ids": [ "bcc6a65a4117972848abcde352ebc288cb85c4daa3595977292af7deeec243db" ], "rationale": "certificate_observed" }, { "id": "45adc511ccf5a3c47d53e58a1e63683456ab84f78bd5f9dac03b2b1479d7f4ac", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "6eb821a11905e366901bfb15671a0525f04699c19a86627333a57e43f0722373" ], "rationale": "client_capability_unavailable" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "433db0c38a8ef1ac8920368f779d67c5ed247ff90feaa6e57df84fc2d0ca4fe0", "title": "Spf policy", "value": "missing", "state": "observed", "state_label": "Observé", "evidence_ids": [ "4bb18e57de62c121858d74ab02e2162190375c64cb425e5fea68c0f0cffb97b8" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" } ], "states": { "observed": 0, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "structuring_dependencies": [], "open_questions": [ { "id": "8def02caa7080ebc876f1742597a8a3a40a56f4d15413a0b44bc4651fbb12995", "subject": "impots.gouv.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true }, { "id": "e8e338b06147810c7b7826faeb67072c497206246b2bff5848f9edf4c2134799", "subject": "impots.gouv.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-20T19:37:54+00:00", "last_seen_at": "2026-09-20T19:37:54+00:00", "active": true } ], "evidence_count": 37, "meaningful_change_count": 0 }, "timeline": { "first_observed_at": "2026-09-20T19:36:39+00:00", "last_observed_at": "2026-09-20T19:37:54+00:00", "reference_state": "compared", "message": "Comparé à la lecture précédente conservée", "counts": { "appeared": 0, "modified": 0, "stable": 38, "disappeared": 0 }, "changes": [], "history_count": 2 }, "methodology": { "version": "2.3.1", "model": "evidence_first", "principles": [ "absence_of_evidence_is_not_evidence_of_absence", "unknown_remains_unknown", "provider_metadata_is_not_data_location", "edge_provider_is_not_origin_host", "single_snapshot_does_not_prove_resilience" ] } }