{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.6.2",
    "pattern_version": "2026.09.4",
    "scan_id": "d4d4c818fb70f1b27ba9e51f",
    "domain": "itylos.com",
    "scanned_at": "2026-09-04T22:04:25+00:00",
    "evidence_count": 37,
    "evidence": [
        {
            "id": "7cb0af852fc197e1da66065c811910b18123502a14fb5c4239d3c0006580df3e",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0140bb1a08164aeb77d91240df84dbfbf7f4d03892a6397af02ad4edfc8e9431"
            ],
            "excerpt": "david.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "2e3cf289660fcf3c2177efa38b6092b05d8f74b6eb54d1f287a75b84c2238f1b",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "03ea76f725f5c1bcd120008b23c95b21174995dd1a8670f7ee834fa63d3e5a33"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "0d26e7bbf53fae77dbe9fa59e3b3b15eb9434e91159dd1a37e40ae9be03dc211",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "095fd8177115039a31c2916fedb86eba7833b2738048f34731d8f078256976f7"
            ],
            "excerpt": "thea.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "2da81eb9562f78a2d2220c0931f56e154e190314f692ccc5a81117514f77bec9",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0aac71e456fcba84d17e15b7e5e9a5030aeb6482ab3160508f14c1efc9ff8f5b"
            ],
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-+f95MKSGo9R10hPN2Leynw=='; style-src 'self' 'nonce-+f95MKSGo9R10hPN2Leynw=='; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; worker-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self';"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "cdbc422e97f88d78c57ecaa34e844b1b765b99ff27d2f6ed1e3b3c68e245f9cf",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0e1ea26659636ff5457c406818cbc86cd717368363008a95ca9635fd9a2d0055"
            ],
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "c0ebbdb41e1830b372961ef9ec99511487d2d5dd55977eed49a0da3a5a6c75d3",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1355eb0eb5dd6c5ed82497543a2f89f97c3286b951037c965f29ea69ae3d2591"
            ],
            "excerpt": "route3.mx.cloudflare.net",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "b4e948f558e527efc9916b5023970042344017f74970481eec8b5c9b75975f99",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "148cea9b1e1919b5e7a3bad6631117cadd608a9e5da84c55d00275182bc854d5"
            ],
            "excerpt": "route1.mx.cloudflare.net",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "1f62591c15c7b7efcff1fe42ce06c1e884b5dcb3a1cbab8accb428fda9e2aec2",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1605eb5e275bf8f28c71f81750fe7ffeb1b49081e2181136d6f343856e58ea34"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "1eb9790b009b36e1aaaf3367e7f783425bb743a66459a017aa9734d38343de82",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "213dfa4ca1c0a60303d6df78563b4c58ea1bdcbdcc40e484a31f2cc2228f91a3"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "66ed07d60aea92813eeb9788c2e2422b410be1a529d5538278355180515045d4",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "393cfaac509bc62d48d872d1fd8400dc311ef1e66de8536dbb2b95d3b558b076"
            ],
            "excerpt": "route2.mx.cloudflare.net",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "73f927cdf4410dc89a253392aacca200a6bbe671080436ede601e3dfe51b87ea",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "418442603847291bd86705e246bad664de7e78756ad6a7218257f4e9f218ae96"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "3ae66201633f11050560f9bc70092faecf47a6298c5b19f497f2bc11c0abfdd4",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "436134befc17e050bf9b7b51026f050a3758cfb94e5789268a92e5e8a130bccf"
            ],
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "e08566b9eafe8e8d036175de77abc10a7998e70f5fb219126d2729d40979a62d",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4f6b6ebfeba666ff7dcc6de597e6b38446a12d3dc5dc774ae6c455a839220212"
            ],
            "excerpt": "172.67.131.153",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "30bc71f8dd3a4dc2f210f9c7aa2ee61bdeeed51e0d0acf1f8f487ed549dc2362",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "503c84f63b7d4679b43c182b2b0092721425f96e6d87ddd4585f9c11a4e27896"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "fb942bbca19bbb0102d366c2a5432c2401790a155cee911df93ce4c6715611ef",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "51d83497907ce387b3268852f27a1082f2753d24063c892f420eab3b7a4d7cc0"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "6e878d73b048d3cb0f3500e15c827e10a69684ed34fd4e6a06d1e273e1e8e3de",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "547423df2cc87e3f0971ceadda950e093ac32d4897cfe5f6f07d6b438fb5139a"
            ],
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "6eaeca02526658a2caee7ea719bcd507eb79986a405defc844d24b58f38ca916",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5b598cfff8c34b5226c5936f631cc191d6b546101d83eec57970978f8f94e51d"
            ],
            "excerpt": "softfail",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "c6f790ea42d192f05c8769a58204d177b4d2680c4cd71605731c47c190b74188",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "822085b5f28373ca80cfaef1e705d6442e9aa749a440c8e0378ff46aeec70adf"
            ],
            "excerpt": "2606:4700:3031::6815:420",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "49171eb2af1a5fec499ca38a59439dd622b892315e17d84b8b5671fd237c6da2",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "85f83a9a7e0d90f52757b0f9a31d1907ed0da0134a90560e493198933ce31cc3"
            ],
            "excerpt": "2026-11-14T23:25:56+00:00",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "d89c759194d95876cde81d3a24e6d48d0b8852cecb25013d88b28cfd605e806b",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "860c05157e0e21ba6ddd05ffe4e7b95aa7f8c57720f108035780b62c91c1931a"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "route1.mx.cloudflare.net",
                    "route2.mx.cloudflare.net",
                    "route3.mx.cloudflare.net",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 6,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "91c818fba343dd28c0a515e07b29b0e6ab42b01022139d3501b1b5eadb16fbce",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9241f4556d38cdaea118c9be7578af725eeab3d4bf2c8476355c7d9c6b572146"
            ],
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "7cb6f5a330280b8b61f9e0492c834687c806f268b1c0720e2fa6d80b35bac24e",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "946466093476cf266ee3da6ddfb51b87247cbf7415dc7fd32fc9d569e6b393ad"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "354fb29febb8eca9b07b68a32826e33464a74fd923802889d19ae073927e3efb",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a8eb2a76cd2c9a7c9c0d8ccf9cfa43bc6407f6d8d33d5a0fd36308fd444939f0"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "ba5f9783dffa77c82ac958cfb3ffbba1ada559dbc33271dc936859102a692e04",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a901db7337d973213c47d014a6eb6cc497bb9028beb429aa243becc039dadff9"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "6ec630bc2ea5021eb9f813b933558505fd660c045a2be497c8a64408e40b66e2",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "abd9cd1552f5b7386b86069717f95372075e5c5e07e6aedea609a1faca3e42ac"
            ],
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(self), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "57b2d26d296ffe06632775b8add81611dcecf3ae31db95bbffc9542a22017a66",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b96acea0c4797d31fcac0ffdac816b0b227a2973b0e23afe9c1dd6791419ae93"
            ],
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "359a6cd54f7e20a9fe96cfc6ecd490b53ec4fc642ba050f8d95ee121c2ce04a4",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d2695acf32085e24706dd3f480fa6d374dcf26d3ddf6fca467a054537a3f24fb"
            ],
            "excerpt": "2606:4700:3035::ac43:8399",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "f317c6f494497cf70893b695fbe5a13a1cb42267802e46c94c6efb215df00275",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e5186a3cfd2b73a89e1ed481ade9214b1d81f336f07de30285fd00d6d7d561fe"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YE2",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "7052f0d52f436265335e60d3ed369c59d466ca60ea40f4f8059ceb78ec6763de",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eb2619023ff863bced71d6a9c8b28db8c82b2b9dbf2884d34cf490cbacc5e2f3"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "b35c5f75233697a8d68676d035998ec3388d6c4b412d809bdb1c916b6e26a0e8",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f4899ead5c50d320edc4bb89be8ce4844379a68c3cfc95094a6b43ee8a6bff3f"
            ],
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "1aecd1c88e0de29ae5ec9fcbe921244553cd18d08028f767f40c841aecd90807",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f5ef9a4354b1d2553e7506820c11e8c5aef9c46f86be7ca49cd6ec9058defad5"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "dd55ebfecb07a72d6afd4037eb41bcac4785293c6fd71a2fef8c3cd989321f43",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f62bb74ab55319396442ba0df4e59eb0c77c2c99086eee49930ae871f7603a24"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "8f06f7ac79001890f4ea3dc0e673dd90f9350c6761711d11d95d483a9ca096f3",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fa797d4e75129a74aebab332aed6bbcfa1b338e8e4122f55fd2ce927dea41b66"
            ],
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "8fe3f64b6fa96c24987fefc3ce093780995c49802ef0f5aa47b6a331ffcb056c",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fa8881af4118d32987289fcd525b3c364321d127ddd128b50760a549828b544e"
            ],
            "excerpt": "104.21.4.32",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "b2e278b5d659be3a18396e0cc5e0d7d65ebbe21e84733bed73a7c8b24acebc22",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fb6a2751169d3c56c49f225eb9cac706b456b7b035dd601b6c857f3fd21f132f"
            ],
            "excerpt": "v=spf1 include:_spf.mx.cloudflare.net ~all",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "58ec985860955a17aa6b1e9e598a3f152c94a7528fdd11494cda5dd286e74696",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fed805a7d5b787a7cbe1b331d38975f5e47fece63f931692c71abd1c69dd6288"
            ],
            "excerpt": "v=DMARC1; p=reject; rua=mailto:8870125b546740519c318961703dc7fd@dmarc-reports.cloudflare.net;",
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        },
        {
            "id": "93bc9d47cf7261dc6f02f2fa434de5c0c9ced18060fc39306c65398d9fae0777",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ff278f74102d639101d8a9f27db0221a11c44aa5b76f0467362979845e702b0a"
            ],
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T22:04:25+00:00",
            "last_seen_at": "2026-09-04T22:04:25+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}