{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "itylos.com",
    "measured_at": "2026-09-06T02:09:58+00:00",
    "engine_version": "2.9.3",
    "pattern_version": "2026.09.4",
    "summary": [
        "6 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "8 évolutions utiles sont retenues depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 6,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 1
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "26ed28e91d12319af8761815ae834cb634959a3482ce21b906010a63f9dca048",
                    "title": "Openpgp",
                    "value": null,
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "6902d08dba6291c7af246bcbe293725f08503233c9c2d9b446f090e270b20eee"
                    ],
                    "rationale": "security_txt_encryption_observed"
                },
                {
                    "id": "2ccd26f3177d8611e4e0dec8c584950c84bed15e7fb71042a3c2fc942b0c6f4a",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "ac071fd7227df148e8a37f03590d700a9dba9908ba9c2e399f5d8c17eeaef82c",
                    "title": "Canary detection",
                    "value": true,
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "581c10ee07ccd969279e6f3f07aab305e921194e68ccba47ff37dbec6472f0b7"
                    ],
                    "rationale": "known_passive_signature_observed"
                }
            ],
            "states": {
                "observed": 3,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "2e4dd38a7b42192e0a1139628a8cfc799e4bcdf9088140f63ec092ca120c8693",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YE2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "f317c6f494497cf70893b695fbe5a13a1cb42267802e46c94c6efb215df00275"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "9d54bace9a2242e04bfa1dc20a3dbb6bad0ea4e0b318bd42c57a655349652919",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [
                        "3692851c6ad53107334003e737901bdc73c5944992b3459a4ccd1c32c8315129"
                    ],
                    "rationale": "client_capability_unavailable"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "2ad761bfccc1f38f25409dd23fdf4cb7ea55c6cf4c0a70179dcf03df405c851e",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "1eb9790b009b36e1aaaf3367e7f783425bb743a66459a017aa9734d38343de82"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "db47ae487bf701de4ee838a997f24d671aa53b528731b2755cb29ecee1e03931",
                    "title": "Spf policy",
                    "value": "softfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "6eaeca02526658a2caee7ea719bcd507eb79986a405defc844d24b58f38ca916"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "9dff5361e74364b332cad63e0ce1e5ed65959fdd50dfa3596d26e8f37cd859e6",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:29:06+00:00",
        "last_observed_at": "2026-09-06T02:09:58+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 7,
            "modified": 1,
            "stable": 37,
            "disappeared": 0
        },
        "meaningful_change_count": 8,
        "change_summary": {
            "appeared": 7,
            "modified": 1,
            "disappeared": 0,
            "stable": 37,
            "meaningful": 8,
            "volatile_filtered": 1,
            "unresolved": 0
        },
        "changes": [
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Canary signal",
                "before": null,
                "after": {
                    "matches": [
                        {
                            "name": "canary_field",
                            "source": "security_txt"
                        }
                    ],
                    "reason": "known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "observed"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Csp evidence",
                "before": null,
                "after": {
                    "enforced": true,
                    "frame_ancestors": true,
                    "hash_present": false,
                    "nonce_present": true,
                    "object_src": false,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dnssec evidence",
                "before": null,
                "after": {
                    "chain_consistency": {
                        "reason": "insufficient_record_evidence",
                        "state": "untested"
                    },
                    "dnskey": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "ds": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "validation": {
                        "reason": "no_validating_resolver",
                        "state": "untested"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Mail transport evidence",
                "before": null,
                "after": {
                    "bimi": {
                        "records": [],
                        "state": "not_observed"
                    },
                    "dane_tlsa": {
                        "query_supported": false,
                        "reason": "tlsa_query_not_available",
                        "records": [],
                        "state": "untested"
                    },
                    "dkim": {
                        "reason": "no_selector_bruteforce",
                        "state": "untested"
                    },
                    "mta_sts": {
                        "policy": null,
                        "policy_state": "untested",
                        "records": [],
                        "state": "not_observed"
                    },
                    "tls_rpt": {
                        "records": [],
                        "state": "not_observed"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Modern transport evidence",
                "before": null,
                "after": {
                    "alpn": {
                        "state": "untested",
                        "value": ""
                    },
                    "certificate": {
                        "cipher": "",
                        "issuer": "C = US, O = Let's Encrypt, CN = YE2",
                        "protocol": "",
                        "san_count": 0,
                        "state": "observed",
                        "valid_from": "2026-08-16T23:25:57+00:00",
                        "valid_to": "2026-11-14T23:25:56+00:00"
                    },
                    "http2": {
                        "negotiated": "3",
                        "state": "untested"
                    },
                    "http3_advertised": {
                        "alt_svc": "h3=\":443\"; ma=86400",
                        "state": "observed"
                    },
                    "ipv4": {
                        "addresses": [
                            "104.21.4.32",
                            "172.67.131.153"
                        ],
                        "state": "observed"
                    },
                    "ipv6": {
                        "addresses": [
                            "2606:4700:3031::6815:420",
                            "2606:4700:3035::ac43:8399"
                        ],
                        "state": "observed"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "modified",
                "label": "Modifié",
                "title": "Module finding",
                "before": {
                    "evidence": {
                        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "after": {
                    "evidence": {
                        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Openpgp discovery",
                "before": null,
                "after": {
                    "dns_openpgpkey": {
                        "reason": "recipient_identity_required",
                        "state": "untested"
                    },
                    "fingerprint": null,
                    "mechanisms": [
                        "https://itylos.com/assets/koperateur-pubkey.asc"
                    ],
                    "reason": "security_txt_encryption_observed",
                    "state": "observed",
                    "wkd": {
                        "reason": "wkd_not_fetched_without_identity",
                        "state": "untested"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Post quantum tls",
                "before": null,
                "after": {
                    "capability": {
                        "capable": false,
                        "groups": [],
                        "reason": "proc_open_unavailable"
                    },
                    "group": null,
                    "reason": "client_capability_unavailable",
                    "state": "untested"
                },
                "direction": "indeterminate"
            }
        ],
        "history_count": 3
    },
    "observations": [
        {
            "id": "0140bb1a08164aeb77d91240df84dbfbf7f4d03892a6397af02ad4edfc8e9431",
            "type": "dns_nameserver",
            "subject": "itylos.com",
            "predicate": "uses_nameserver",
            "value": "david.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "03ea76f725f5c1bcd120008b23c95b21174995dd1a8670f7ee834fa63d3e5a33",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "095fd8177115039a31c2916fedb86eba7833b2738048f34731d8f078256976f7",
            "type": "dns_nameserver",
            "subject": "itylos.com",
            "predicate": "uses_nameserver",
            "value": "thea.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "0e1ea26659636ff5457c406818cbc86cd717368363008a95ca9635fd9a2d0055",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "require-corp"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "1355eb0eb5dd6c5ed82497543a2f89f97c3286b951037c965f29ea69ae3d2591",
            "type": "mail_exchanger",
            "subject": "itylos.com",
            "predicate": "uses_mail_exchanger",
            "value": "route3.mx.cloudflare.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "148cea9b1e1919b5e7a3bad6631117cadd608a9e5da84c55d00275182bc854d5",
            "type": "mail_exchanger",
            "subject": "itylos.com",
            "predicate": "uses_mail_exchanger",
            "value": "route1.mx.cloudflare.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "1605eb5e275bf8f28c71f81750fe7ffeb1b49081e2181136d6f343856e58ea34",
            "type": "mail_policy_flag",
            "subject": "itylos.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "213dfa4ca1c0a60303d6df78563b4c58ea1bdcbdcc40e484a31f2cc2228f91a3",
            "type": "dmarc_policy",
            "subject": "itylos.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "393cfaac509bc62d48d872d1fd8400dc311ef1e66de8536dbb2b95d3b558b076",
            "type": "mail_exchanger",
            "subject": "itylos.com",
            "predicate": "uses_mail_exchanger",
            "value": "route2.mx.cloudflare.net",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "418442603847291bd86705e246bad664de7e78756ad6a7218257f4e9f218ae96",
            "type": "mail_policy_flag",
            "subject": "itylos.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "436134befc17e050bf9b7b51026f050a3758cfb94e5789268a92e5e8a130bccf",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "referrer-policy",
            "value": [
                "no-referrer"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "4f6b6ebfeba666ff7dcc6de597e6b38446a12d3dc5dc774ae6c455a839220212",
            "type": "dns_address",
            "subject": "itylos.com",
            "predicate": "resolves_to",
            "value": "172.67.131.153",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "503c84f63b7d4679b43c182b2b0092721425f96e6d87ddd4585f9c11a4e27896",
            "type": "mail_policy_flag",
            "subject": "itylos.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "51d83497907ce387b3268852f27a1082f2753d24063c892f420eab3b7a4d7cc0",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "547423df2cc87e3f0971ceadda950e093ac32d4897cfe5f6f07d6b438fb5139a",
            "type": "technology",
            "subject": "itylos.com",
            "predicate": "uses_technology",
            "value": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "5b598cfff8c34b5226c5936f631cc191d6b546101d83eec57970978f8f94e51d",
            "type": "spf_policy",
            "subject": "itylos.com",
            "predicate": "spf_policy",
            "value": "softfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "74d877067f7f8f3f6ad2ad7a54d5b1882292195a8d43f157264c83e58a3fe3af",
            "type": "modern_transport_evidence",
            "subject": "itylos.com",
            "predicate": "modern_transport",
            "value": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YE2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-16T23:25:57+00:00",
                    "valid_to": "2026-11-14T23:25:56+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "h3=\":443\"; ma=86400",
                    "state": "observed"
                },
                "ipv4": {
                    "addresses": [
                        "104.21.4.32",
                        "172.67.131.153"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2606:4700:3031::6815:420",
                        "2606:4700:3035::ac43:8399"
                    ],
                    "state": "observed"
                }
            },
            "source": "advanced_modern_transport",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "7d22368874ecad1eb76f127231628a707af617e02b18a1b5bbaeb1a9877bc717",
            "type": "dnssec_evidence",
            "subject": "itylos.com",
            "predicate": "dnssec_depth",
            "value": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "source": "advanced_dnssec",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "822085b5f28373ca80cfaef1e705d6442e9aa749a440c8e0378ff46aeec70adf",
            "type": "dns_address",
            "subject": "itylos.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3031::6815:420",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "85420213ebd87597a25e10d9ff12f36148790b9fe4a80755a73003cb4e3f86af",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; script-src 'self' 'nonce-8SumOqGSk6tX9hHvKk6gcw=='; style-src 'self' 'nonce-8SumOqGSk6tX9hHvKk6gcw=='; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; worker-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self';"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "85f83a9a7e0d90f52757b0f9a31d1907ed0da0134a90560e493198933ce31cc3",
            "type": "tls_valid_to",
            "subject": "itylos.com",
            "predicate": "valid_to",
            "value": "2026-11-14T23:25:56+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "860c05157e0e21ba6ddd05ffe4e7b95aa7f8c57720f108035780b62c91c1931a",
            "type": "dependency_provider",
            "subject": "itylos.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "route1.mx.cloudflare.net",
                    "route2.mx.cloudflare.net",
                    "route3.mx.cloudflare.net",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 6,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "9241f4556d38cdaea118c9be7578af725eeab3d4bf2c8476355c7d9c6b572146",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "9d626d49ac20c84eab57f268d740664f7f27769a52a7cd3411a4e6b15157081e",
            "type": "csp_evidence",
            "subject": "itylos.com",
            "predicate": "csp_depth",
            "value": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": false,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "source": "advanced_csp",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "a13ec9426de44c90572e18692036f7151473b1e4afbb74145428d63e6a9a6ecf",
            "type": "mail_transport_evidence",
            "subject": "itylos.com",
            "predicate": "mail_transport_depth",
            "value": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "source": "advanced_mail_transport",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "a8eb2a76cd2c9a7c9c0d8ccf9cfa43bc6407f6d8d33d5a0fd36308fd444939f0",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "a901db7337d973213c47d014a6eb6cc497bb9028beb429aa243becc039dadff9",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "abd9cd1552f5b7386b86069717f95372075e5c5e07e6aedea609a1faca3e42ac",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b605ca353d722142fbdad0d44b00f1f0dc85cc60eef2a30f93ec4064220e02ee",
            "type": "post_quantum_tls",
            "subject": "itylos.com",
            "predicate": "post_quantum_tls",
            "value": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "source": "advanced_post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b96acea0c4797d31fcac0ffdac816b0b227a2973b0e23afe9c1dd6791419ae93",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "c0d8a89d8d6b8570fbb622b9a30845e9835e804324425c93c18baf60c72a51c5",
            "type": "openpgp_discovery",
            "subject": "itylos.com",
            "predicate": "openpgp",
            "value": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [
                    "https://itylos.com/assets/koperateur-pubkey.asc"
                ],
                "reason": "security_txt_encryption_observed",
                "state": "observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "source": "advanced_openpgp",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "cfceb23153a6bea06c42c4bff6a8b303598d6404beb53b6afcbb2ee4bd889b7e",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "d2695acf32085e24706dd3f480fa6d374dcf26d3ddf6fca467a054537a3f24fb",
            "type": "dns_address",
            "subject": "itylos.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3035::ac43:8399",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "e5186a3cfd2b73a89e1ed481ade9214b1d81f336f07de30285fd00d6d7d561fe",
            "type": "tls_issuer",
            "subject": "itylos.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "eb2619023ff863bced71d6a9c8b28db8c82b2b9dbf2884d34cf490cbacc5e2f3",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "f4899ead5c50d320edc4bb89be8ce4844379a68c3cfc95094a6b43ee8a6bff3f",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "f4fc08c82875c2b240838dcf0948d13bc676c6778c3ecda4c53b19355cf1f053",
            "type": "canary_signal",
            "subject": "itylos.com",
            "predicate": "canary_detection",
            "value": {
                "matches": [
                    {
                        "name": "canary_field",
                        "source": "security_txt"
                    }
                ],
                "reason": "known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "observed"
            },
            "source": "advanced_canary",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "f5ef9a4354b1d2553e7506820c11e8c5aef9c46f86be7ca49cd6ec9058defad5",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "f62bb74ab55319396442ba0df4e59eb0c77c2c99086eee49930ae871f7603a24",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "fa797d4e75129a74aebab332aed6bbcfa1b338e8e4122f55fd2ce927dea41b66",
            "type": "module_finding",
            "subject": "itylos.com",
            "predicate": "sovereignty:outside_europe",
            "value": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "source": "finding_outside_europe",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "fa8881af4118d32987289fcd525b3c364321d127ddd128b50760a549828b544e",
            "type": "dns_address",
            "subject": "itylos.com",
            "predicate": "resolves_to",
            "value": "104.21.4.32",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "fb6a2751169d3c56c49f225eb9cac706b456b7b035dd601b6c857f3fd21f132f",
            "type": "spf_record",
            "subject": "itylos.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "fed805a7d5b787a7cbe1b331d38975f5e47fece63f931692c71abd1c69dd6288",
            "type": "dmarc_record",
            "subject": "itylos.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject; rua=mailto:8870125b546740519c318961703dc7fd@dmarc-reports.cloudflare.net;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "ff278f74102d639101d8a9f27db0221a11c44aa5b76f0467362979845e702b0a",
            "type": "http_header",
            "subject": "itylos.com",
            "predicate": "server",
            "value": [
                "cloudflare"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:09:58+00:00"
        }
    ],
    "claims": [
        {
            "id": "26ed28e91d12319af8761815ae834cb634959a3482ce21b906010a63f9dca048",
            "subject": "itylos.com",
            "predicate": "openpgp",
            "value": null,
            "state": "observed",
            "rationale": "security_txt_encryption_observed",
            "evidence_ids": [
                "6902d08dba6291c7af246bcbe293725f08503233c9c2d9b446f090e270b20eee"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "2ad761bfccc1f38f25409dd23fdf4cb7ea55c6cf4c0a70179dcf03df405c851e",
            "subject": "itylos.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "1eb9790b009b36e1aaaf3367e7f783425bb743a66459a017aa9734d38343de82"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "2ccd26f3177d8611e4e0dec8c584950c84bed15e7fb71042a3c2fc942b0c6f4a",
            "subject": "itylos.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "2e4dd38a7b42192e0a1139628a8cfc799e4bcdf9088140f63ec092ca120c8693",
            "subject": "itylos.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "f317c6f494497cf70893b695fbe5a13a1cb42267802e46c94c6efb215df00275"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "9d54bace9a2242e04bfa1dc20a3dbb6bad0ea4e0b318bd42c57a655349652919",
            "subject": "itylos.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "client_capability_unavailable",
            "evidence_ids": [
                "3692851c6ad53107334003e737901bdc73c5944992b3459a4ccd1c32c8315129"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "9dff5361e74364b332cad63e0ce1e5ed65959fdd50dfa3596d26e8f37cd859e6",
            "subject": "itylos.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "ac071fd7227df148e8a37f03590d700a9dba9908ba9c2e399f5d8c17eeaef82c",
            "subject": "itylos.com",
            "predicate": "canary_detection",
            "value": true,
            "state": "observed",
            "rationale": "known_passive_signature_observed",
            "evidence_ids": [
                "581c10ee07ccd969279e6f3f07aab305e921194e68ccba47ff37dbec6472f0b7"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "db47ae487bf701de4ee838a997f24d671aa53b528731b2755cb29ecee1e03931",
            "subject": "itylos.com",
            "predicate": "spf_policy",
            "value": "softfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "6eaeca02526658a2caee7ea719bcd507eb79986a405defc844d24b58f38ca916"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        },
        {
            "id": "e1c63ce77fe01aaf2f24bc8674b58c0bcced35c188b2638a5c72108df2285336",
            "subject": "itylos.com",
            "predicate": "depends_on_provider",
            "value": "Cloudflare",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "7cb0af852fc197e1da66065c811910b18123502a14fb5c4239d3c0006580df3e",
                "0d26e7bbf53fae77dbe9fa59e3b3b15eb9434e91159dd1a37e40ae9be03dc211",
                "d89c759194d95876cde81d3a24e6d48d0b8852cecb25013d88b28cfd605e806b"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "7cb0af852fc197e1da66065c811910b18123502a14fb5c4239d3c0006580df3e",
            "observation_ids": [
                "0140bb1a08164aeb77d91240df84dbfbf7f4d03892a6397af02ad4edfc8e9431"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "david.ns.cloudflare.com",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "2e3cf289660fcf3c2177efa38b6092b05d8f74b6eb54d1f287a75b84c2238f1b",
            "observation_ids": [
                "03ea76f725f5c1bcd120008b23c95b21174995dd1a8670f7ee834fa63d3e5a33"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "0d26e7bbf53fae77dbe9fa59e3b3b15eb9434e91159dd1a37e40ae9be03dc211",
            "observation_ids": [
                "095fd8177115039a31c2916fedb86eba7833b2738048f34731d8f078256976f7"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "thea.ns.cloudflare.com",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "cdbc422e97f88d78c57ecaa34e844b1b765b99ff27d2f6ed1e3b3c68e245f9cf",
            "observation_ids": [
                "0e1ea26659636ff5457c406818cbc86cd717368363008a95ca9635fd9a2d0055"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "c0ebbdb41e1830b372961ef9ec99511487d2d5dd55977eed49a0da3a5a6c75d3",
            "observation_ids": [
                "1355eb0eb5dd6c5ed82497543a2f89f97c3286b951037c965f29ea69ae3d2591"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "route3.mx.cloudflare.net",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b4e948f558e527efc9916b5023970042344017f74970481eec8b5c9b75975f99",
            "observation_ids": [
                "148cea9b1e1919b5e7a3bad6631117cadd608a9e5da84c55d00275182bc854d5"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "route1.mx.cloudflare.net",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "1f62591c15c7b7efcff1fe42ce06c1e884b5dcb3a1cbab8accb428fda9e2aec2",
            "observation_ids": [
                "1605eb5e275bf8f28c71f81750fe7ffeb1b49081e2181136d6f343856e58ea34"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "1eb9790b009b36e1aaaf3367e7f783425bb743a66459a017aa9734d38343de82",
            "observation_ids": [
                "213dfa4ca1c0a60303d6df78563b4c58ea1bdcbdcc40e484a31f2cc2228f91a3"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "66ed07d60aea92813eeb9788c2e2422b410be1a529d5538278355180515045d4",
            "observation_ids": [
                "393cfaac509bc62d48d872d1fd8400dc311ef1e66de8536dbb2b95d3b558b076"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "route2.mx.cloudflare.net",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "73f927cdf4410dc89a253392aacca200a6bbe671080436ede601e3dfe51b87ea",
            "observation_ids": [
                "418442603847291bd86705e246bad664de7e78756ad6a7218257f4e9f218ae96"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "3ae66201633f11050560f9bc70092faecf47a6298c5b19f497f2bc11c0abfdd4",
            "observation_ids": [
                "436134befc17e050bf9b7b51026f050a3758cfb94e5789268a92e5e8a130bccf"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "e08566b9eafe8e8d036175de77abc10a7998e70f5fb219126d2729d40979a62d",
            "observation_ids": [
                "4f6b6ebfeba666ff7dcc6de597e6b38446a12d3dc5dc774ae6c455a839220212"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "172.67.131.153",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "30bc71f8dd3a4dc2f210f9c7aa2ee61bdeeed51e0d0acf1f8f487ed549dc2362",
            "observation_ids": [
                "503c84f63b7d4679b43c182b2b0092721425f96e6d87ddd4585f9c11a4e27896"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "fb942bbca19bbb0102d366c2a5432c2401790a155cee911df93ce4c6715611ef",
            "observation_ids": [
                "51d83497907ce387b3268852f27a1082f2753d24063c892f420eab3b7a4d7cc0"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "6e878d73b048d3cb0f3500e15c827e10a69684ed34fd4e6a06d1e273e1e8e3de",
            "observation_ids": [
                "547423df2cc87e3f0971ceadda950e093ac32d4897cfe5f6f07d6b438fb5139a"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "6eaeca02526658a2caee7ea719bcd507eb79986a405defc844d24b58f38ca916",
            "observation_ids": [
                "5b598cfff8c34b5226c5936f631cc191d6b546101d83eec57970978f8f94e51d"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "softfail",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "4ce4271ad23d0d95c0db1350add8bc6561471fafbb20ee3342c7751556331723",
            "observation_ids": [
                "74d877067f7f8f3f6ad2ad7a54d5b1882292195a8d43f157264c83e58a3fe3af"
            ],
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YE2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-16T23:25:57+00:00",
                    "valid_to": "2026-11-14T23:25:56+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "h3=\":443\"; ma=86400",
                    "state": "observed"
                },
                "ipv4": {
                    "addresses": [
                        "104.21.4.32",
                        "172.67.131.153"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2606:4700:3031::6815:420",
                        "2606:4700:3035::ac43:8399"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b3a683d4ec85cf2db113a3a780f323ab94f78d96fbd7663dfcd2d6aad5cc1563",
            "observation_ids": [
                "7d22368874ecad1eb76f127231628a707af617e02b18a1b5bbaeb1a9877bc717"
            ],
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "c6f790ea42d192f05c8769a58204d177b4d2680c4cd71605731c47c190b74188",
            "observation_ids": [
                "822085b5f28373ca80cfaef1e705d6442e9aa749a440c8e0378ff46aeec70adf"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3031::6815:420",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "ab709c3df29208c5c079c74beeb9bd82e80b98c7cb729826e7b7a22693c2f179",
            "observation_ids": [
                "85420213ebd87597a25e10d9ff12f36148790b9fe4a80755a73003cb4e3f86af"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-8SumOqGSk6tX9hHvKk6gcw=='; style-src 'self' 'nonce-8SumOqGSk6tX9hHvKk6gcw=='; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; worker-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self';"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "49171eb2af1a5fec499ca38a59439dd622b892315e17d84b8b5671fd237c6da2",
            "observation_ids": [
                "85f83a9a7e0d90f52757b0f9a31d1907ed0da0134a90560e493198933ce31cc3"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-14T23:25:56+00:00",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "d89c759194d95876cde81d3a24e6d48d0b8852cecb25013d88b28cfd605e806b",
            "observation_ids": [
                "860c05157e0e21ba6ddd05ffe4e7b95aa7f8c57720f108035780b62c91c1931a"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "route1.mx.cloudflare.net",
                    "route2.mx.cloudflare.net",
                    "route3.mx.cloudflare.net",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 6,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "91c818fba343dd28c0a515e07b29b0e6ab42b01022139d3501b1b5eadb16fbce",
            "observation_ids": [
                "9241f4556d38cdaea118c9be7578af725eeab3d4bf2c8476355c7d9c6b572146"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "9c649e89bc5c2c140ba4b517c77c4f00d99eaaf75b868b502ed422b6274f12d0",
            "observation_ids": [
                "9d626d49ac20c84eab57f268d740664f7f27769a52a7cd3411a4e6b15157081e"
            ],
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": false,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "8f6c5652d585f49c326f5d4af8c8cf3f477b6f942deee333a8ec7494ac9a7a6a",
            "observation_ids": [
                "a13ec9426de44c90572e18692036f7151473b1e4afbb74145428d63e6a9a6ecf"
            ],
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "354fb29febb8eca9b07b68a32826e33464a74fd923802889d19ae073927e3efb",
            "observation_ids": [
                "a8eb2a76cd2c9a7c9c0d8ccf9cfa43bc6407f6d8d33d5a0fd36308fd444939f0"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "ba5f9783dffa77c82ac958cfb3ffbba1ada559dbc33271dc936859102a692e04",
            "observation_ids": [
                "a901db7337d973213c47d014a6eb6cc497bb9028beb429aa243becc039dadff9"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "6ec630bc2ea5021eb9f813b933558505fd660c045a2be497c8a64408e40b66e2",
            "observation_ids": [
                "abd9cd1552f5b7386b86069717f95372075e5c5e07e6aedea609a1faca3e42ac"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "3692851c6ad53107334003e737901bdc73c5944992b3459a4ccd1c32c8315129",
            "observation_ids": [
                "b605ca353d722142fbdad0d44b00f1f0dc85cc60eef2a30f93ec4064220e02ee"
            ],
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "57b2d26d296ffe06632775b8add81611dcecf3ae31db95bbffc9542a22017a66",
            "observation_ids": [
                "b96acea0c4797d31fcac0ffdac816b0b227a2973b0e23afe9c1dd6791419ae93"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "6902d08dba6291c7af246bcbe293725f08503233c9c2d9b446f090e270b20eee",
            "observation_ids": [
                "c0d8a89d8d6b8570fbb622b9a30845e9835e804324425c93c18baf60c72a51c5"
            ],
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [
                    "https://itylos.com/assets/koperateur-pubkey.asc"
                ],
                "reason": "security_txt_encryption_observed",
                "state": "observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "0918c266a94afae0c8c31888f8df5a11c747285a43c5dee3326453901c1ae7cc",
            "observation_ids": [
                "cfceb23153a6bea06c42c4bff6a8b303598d6404beb53b6afcbb2ee4bd889b7e"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "359a6cd54f7e20a9fe96cfc6ecd490b53ec4fc642ba050f8d95ee121c2ce04a4",
            "observation_ids": [
                "d2695acf32085e24706dd3f480fa6d374dcf26d3ddf6fca467a054537a3f24fb"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3035::ac43:8399",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "f317c6f494497cf70893b695fbe5a13a1cb42267802e46c94c6efb215df00275",
            "observation_ids": [
                "e5186a3cfd2b73a89e1ed481ade9214b1d81f336f07de30285fd00d6d7d561fe"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YE2",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "7052f0d52f436265335e60d3ed369c59d466ca60ea40f4f8059ceb78ec6763de",
            "observation_ids": [
                "eb2619023ff863bced71d6a9c8b28db8c82b2b9dbf2884d34cf490cbacc5e2f3"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b35c5f75233697a8d68676d035998ec3388d6c4b412d809bdb1c916b6e26a0e8",
            "observation_ids": [
                "f4899ead5c50d320edc4bb89be8ce4844379a68c3cfc95094a6b43ee8a6bff3f"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "581c10ee07ccd969279e6f3f07aab305e921194e68ccba47ff37dbec6472f0b7",
            "observation_ids": [
                "f4fc08c82875c2b240838dcf0948d13bc676c6778c3ecda4c53b19355cf1f053"
            ],
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "excerpt": {
                "matches": [
                    {
                        "name": "canary_field",
                        "source": "security_txt"
                    }
                ],
                "reason": "known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "observed"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "1aecd1c88e0de29ae5ec9fcbe921244553cd18d08028f767f40c841aecd90807",
            "observation_ids": [
                "f5ef9a4354b1d2553e7506820c11e8c5aef9c46f86be7ca49cd6ec9058defad5"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "dd55ebfecb07a72d6afd4037eb41bcac4785293c6fd71a2fef8c3cd989321f43",
            "observation_ids": [
                "f62bb74ab55319396442ba0df4e59eb0c77c2c99086eee49930ae871f7603a24"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "8f06f7ac79001890f4ea3dc0e673dd90f9350c6761711d11d95d483a9ca096f3",
            "observation_ids": [
                "fa797d4e75129a74aebab332aed6bbcfa1b338e8e4122f55fd2ce927dea41b66"
            ],
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "8fe3f64b6fa96c24987fefc3ce093780995c49802ef0f5aa47b6a331ffcb056c",
            "observation_ids": [
                "fa8881af4118d32987289fcd525b3c364321d127ddd128b50760a549828b544e"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "104.21.4.32",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "b2e278b5d659be3a18396e0cc5e0d7d65ebbe21e84733bed73a7c8b24acebc22",
            "observation_ids": [
                "fb6a2751169d3c56c49f225eb9cac706b456b7b035dd601b6c857f3fd21f132f"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "58ec985860955a17aa6b1e9e598a3f152c94a7528fdd11494cda5dd286e74696",
            "observation_ids": [
                "fed805a7d5b787a7cbe1b331d38975f5e47fece63f931692c71abd1c69dd6288"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject; rua=mailto:8870125b546740519c318961703dc7fd@dmarc-reports.cloudflare.net;",
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        },
        {
            "id": "93bc9d47cf7261dc6f02f2fa434de5c0c9ced18060fc39306c65398d9fae0777",
            "observation_ids": [
                "ff278f74102d639101d8a9f27db0221a11c44aa5b76f0467362979845e702b0a"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-06T02:09:58+00:00",
            "last_seen_at": "2026-09-06T02:09:58+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "f4739ffdb39f5f1c8c75b773ad64761d1334816c67e4ae3427991d4fc3fbe013"
}