{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "3.0.0-rc.3",
    "pattern_version": "2026.09.4",
    "scan_id": "95ecd503859555463b18e998",
    "domain": "jcconfection.fr",
    "scanned_at": "2026-09-21T06:20:07+00:00",
    "evidence_count": 60,
    "evidence": [
        {
            "id": "e0e25e39e1bc21daee50c42aabf197e12ff0bb44d641dfa798f813cdbd537c95",
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1096a9537c9ca488f25ecca29a6955e819871102408a95a6e2f50358044f41e2"
            ],
            "excerpt": {
                "evidence": [
                    "Cloudflare",
                    "Google",
                    "cdn.jsdelivr.net",
                    "vade-mx-eu-fallback01.hornetsecurity.com",
                    "vade-mx-eu-fallback02.hornetsecurity.com",
                    "vade-mx-fr01.hornetsecurity.com",
                    "vade-mx-fr02.hornetsecurity.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "02d8b381ffad3f0084760f14d9e290c531c56b8f3dcbf7cc8d005e46493649cd",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1486b070d96e422755175210c63eeff85bf5456cf8de16f31a130decc55b81df"
            ],
            "excerpt": {
                "evidence": [
                    "boyd.ns.cloudflare.com",
                    "nancy.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "e9b1812da442d9b9565fbbc473b17a810a41505dc9ccf52e736b48f3ae6a7885",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "157e25721a5fa16d00f1fceab1f47c64a41c5c51da9d770d2a2a1a99dcb39e38"
            ],
            "excerpt": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "2b739454355b0685e9e9f98732635d357501fd2d2f8aab6c5e8384706d7d93c6",
            "evidence_type": "module_finding",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1b1fdaa8502eb4e2a7b8ec1a2d4bf834a02db883be934dab4cfcdcf6954d9cc7"
            ],
            "excerpt": {
                "evidence": [
                    "Google"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2761c332e19cbee245395144c25f4036501bd5101ed12235dfc1342c56271543"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "www.googletagmanager.com"
                ],
                "id": "google",
                "known": true,
                "name": "Google",
                "observation_count": 1,
                "services": [
                    "analytics",
                    "captcha",
                    "fonts",
                    "maps",
                    "video"
                ],
                "tracker": true
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "28d1479633706662909f28570a133c29f326c81766e1670147b42bd1bd952ec6"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "boyd.ns.cloudflare.com",
                    "nancy.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 2,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "916eda3980ffa4e29c6a695373ce84fbc9f2f95a80bfe5fa0154d208ba602a07",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2b503927e5eeed73b868e96b0bf92a85cb2f2ee4eb2f32a2991bb1d1a5a999ad"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "f3dd7d911f93ef74ac73a5a584570c39c25f62d48f7b5278217242a381432815",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "39658f5a1dec0e17e270d0182f8fb2ffa7cf3ba1b735e5b91c96ed56e75621d3"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "40ad2a97704580805ad64d7d7eccba54f5a0faa4be129e733c2b2378d6ab0a32"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "vade-mx-eu-fallback02.hornetsecurity.com"
                ],
                "id": "host-0afb53ca7550",
                "known": false,
                "name": "vade-mx-eu-fallback02.hornetsecurity.com",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "15471723ace686e8c5d010bb0870fba820bfbb52fd7193e8f60e0c3488069e79",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4878d554c846e13c9b8d13ffddc58c87d31f1e281ebab16ad438bc07ce9338a3"
            ],
            "excerpt": "5.250.177.164",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "f17d48dbda3a263138b2d97c200cd6319f05fbe377c51131b0ffe0f554d79b1d",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5299804996a5572524efe3e33784fd4eb83826f3a44396a0a7dec9119bdbfed4"
            ],
            "excerpt": [
                "SAMEORIGIN"
            ],
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "8e1e72a3cec489b69e4187953a178537d7329f950e22b5cc78be8c0f07c7f6f8",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "57bcbf419485a9024765e9837153f01d9a4a28daeb9e68aa5a7d516a406f06cc"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "cf3d74c26e7e69dfd1b96ddb86006e54101c9bfdcb0896594ed8d4dfb923ea85",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "57f706654e4e60432baa6f74ca4a5dfff0936815bd1576dc24df0e50c354075c"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-06-29T00:00:00+00:00",
                    "valid_to": "2027-01-13T23:59:59+00:00"
                },
                "http2": {
                    "negotiated": "2",
                    "state": "observed"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "5.250.177.164"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "31d7527d467e50229f0c2b5da780d4634f8978e2a03ffdce8081517d7c8a0474",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5a29179d505c3750935689f7444587d843f8d2d49eff4b433bd5643f342fce4e"
            ],
            "excerpt": [
                "no-referrer-when-downgrade"
            ],
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5cd1a8ce35f5e42bd11181109f0b1bbf42d8b4febbcaca6ecba8b8bd3abfca55"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "cdn.jsdelivr.net"
                ],
                "id": "host-edf7dcad352d",
                "known": false,
                "name": "cdn.jsdelivr.net",
                "observation_count": 2,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "4209a88e341bffff0c84695991f551e106fd8afd869abfa77a30b96e673b6850",
            "evidence_type": "module_finding",
            "collector": "reachability",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "65391e659219353a00ecc665b6db2a6290f3cc13a765c22f42cd61773f71bf96"
            ],
            "excerpt": {
                "evidence": "3327.08 ms",
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "08a4750667eabfc3449273beae313119b5577044ed8edd1875754aae79929786",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6b6b0197e4a7b69e716ba7b5371c4b6051e27ce3acb39ceef35f92a537b76ccb"
            ],
            "excerpt": {
                "name": "WordPress",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "06c4b3c80ecfa5a42197da9cacc67354bf90045153d8836b37d4d32b7373f79f",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6f5475753b8360cbd56168ebf9d1fef936b3e49ffa80a18929f6d5baa90ade1f"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7911013ccde93890c9feb9a67e45c1218a5dc3e2a87016de71bc5bc14811ad6d",
            "evidence_type": "tracker_provider",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "758c4ac6c956f298483ebc3906ff0c98393dd5389a212fbb2299cefa074b1d74"
            ],
            "excerpt": "Google",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "53a1aeec68aa723060789e4403c4690f38705c131ef637c9d87b6c22d067e6eb",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "759cf369c3ada9474aeb821a0779f52c1c3df7fe2f45a26cd3fabf35441bec08"
            ],
            "excerpt": "2027-01-13T23:59:59+00:00",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "4b58f7f554c8bd3c50d69128f8ed92f038b59f1973011cd3861f59b17a35169d",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7c33102085220c10c3b54d1f817294b90128c5c0047391500df68372b7c89f94"
            ],
            "excerpt": "vade-mx-eu-fallback01.hornetsecurity.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7c5ca05cb019fe6baffeffc54424d44e0c03b3b628eb003f90cd162007deff08"
            ],
            "excerpt": "nancy.ns.cloudflare.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7a40600a86a933bf54d9909a1e2a4bf26eb6bc33bc4d5edd1ad5cce4fa22366b",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7c69751db5fbbf3ad8a4c0dc0f108f7b01d63790ef7858d913b2bdde06c492be"
            ],
            "excerpt": "vade-mx-eu-fallback02.hornetsecurity.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "3ff105668bebc15c9451d6ac7d0b64c7d7c3325f3f6919a8b72fe14be8088bff",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "818d6ecf66b0b07c91b0345a2ee1a11fa9f42cf1507f7ea92e03320642487af5"
            ],
            "excerpt": [
                "max-age=31536000; includeSubDomains"
            ],
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "9181e590a14c9124ae082838f1765a00e4f0b685f6d3097403a740c2ac09d7cf",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8551f5b2f6f65b8a104b17e4ddd13358b3178995781c4bf087b87fb2ccd4ac88"
            ],
            "excerpt": {
                "evidence": [
                    "cdn.jsdelivr.net",
                    "www.googletagmanager.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "66b41a123967fb4933f48d4ece8d65aa37b95c2ee48f6e19f2d74655e58d82db",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "899ffbda4baa5e98c4c335b7014b47a9b7bb7b40e9dbecc3f3be9e5066cb16f2"
            ],
            "excerpt": {
                "evidence": 1,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "b73dae643260024611191893abcbe68b20bb846b424cf7022fbd0652dcad73dc",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "89be6f736560a4c7e08c893bd0aa60aa59e77f33752154162e6b642f618fc158"
            ],
            "excerpt": {
                "evidence": [
                    "Cloudflare",
                    "Google"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "4d09156fda9186cd1b8aefd3f473990d8f326ab2f26bcca24ec0232544682c10",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8b25b6cdcbedc502a2080f28b8e88192c12deaa0f17118e4a155d045f24caaf3"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "c75916ea84540599ddc16db29455c30f0732214b4e09628bc1ed188adad8d882",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9aea4dd258d81390138a2dd2532929dddcf4f5c4ea63ebda881cdcc7076ee5ed"
            ],
            "excerpt": {
                "evidence": [
                    "5.250.177.164"
                ],
                "severity": "info"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "f0f8327aa1fc9cca5e41d286205b05be5461f5f87e49aaf2a00edb1f50c1e4c4",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9b47385eb3d853910f3925bfdc1af6bc9d416d5a932b5860b06777eb629c5913"
            ],
            "excerpt": {
                "evidence": 404,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "70c218193c8935593295b63ddbe598c5bdcee3b9a69465f5be9e896613617d34",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9d17fd6cab1842b0f185155c44fbe3f59a3b205cf4ba4f54a74ca9f13d346096"
            ],
            "excerpt": {
                "evidence": [
                    "boyd.ns.cloudflare.com",
                    "nancy.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "f0b1f43370b8220550afd0c21325fe36c814ba4e2411356c88b796330da3f9e8",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9dc87d04f16e726085099a729c00f5f3ff21ab525d6570971985c796c78be1ec"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7f5b4a11d96bdcd445200b0a9047a317bc7c6fcd690cd9f21c6ee25f20e296f1",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a340ade32815f85d4cd85668b5fb9d8d1c5b5b147c671259d62a333c4d8f5687"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "fa33267707ec65f7135f7f26e56ee4eb7dae4da28fda2d82e4340960fd9a0f1b",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a42971902cb26e553d71bc75443fe2c1dce15094868122620ea2843a69c25cab"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "42bddd86fa87eda2c439e17f25f3b45b123808644dd30d883aaed4f232907f41",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a544d3863250041a2a2e426899331e84d3f63fd817d10a6e19ce3400acd87039"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "064112197434787bc41192ca4123e3e18064f1bf1332b9592ca4f247a6d1d87a",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a548b30c93e350eeed3945e68a95ed605783b9c08cec5eb9e6bd6cfdbfd417c8"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "81e2fdf5beee388dc52e677bed2623510fc96bd6fc3f42222ee4860ae76cfe82",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "aa2c7bd0a195616fd7b6d0eacd32f20e40e2108abb3655c3d24f3bed28e4e307"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "0c470fc3c8a26e2f61a9f96805f4454c010bd06ab62d3f55168ea01563851577",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "aa4352e1a635a149da9a61c41a86bbd02b49ebfa47c5f58659ecc4ddc8616613"
            ],
            "excerpt": {
                "evidence": [
                    "cdn.jsdelivr.net",
                    "vade-mx-eu-fallback01.hornetsecurity.com",
                    "vade-mx-eu-fallback02.hornetsecurity.com",
                    "vade-mx-fr01.hornetsecurity.com",
                    "vade-mx-fr02.hornetsecurity.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "09f98e65f9e91b64631e5c507122bcbd012853b028a825417011fd3f26d2b4e2",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "afc1b61e4b57255454641a4ecf42b5bfe526e1b22549823a1d5094a26af4ec2d"
            ],
            "excerpt": "softfail",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7fedcd8b55194bbd0be8ab718099b41fb60dad974758942bed5959cb490d9942",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b03beedbfe4303c2cbaa1c721fca05c8423e4dd05b90b0c7c9f8abfa0744f172"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "3f955ad404796de3391783700787922bb69ea2d6a74bdae117c6bd13458ded71",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b5a74cff5cb08f5ddf53a648b6fa595b03d8b36efed2d00d73c9b3abe24aafde"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "d00c4d8df9f9f8fc6a38f90a40f8a23ef7a4debe85bf57d3b4a59d1efb79825a",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b75775575354b43f75a2552ef95041baec9c46a253cb80a1158b5bb7a2fce6c2"
            ],
            "excerpt": "v=spf1 mx ip4:5.250.177.164 ip4:109.69.190.26 ip4:109.69.190.29 include:spf.protection.outlook.com ~all",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "c5129d5f6bbf9ceea521ed9cba0e883477718f6c6e209d464dba33c66dd4f273",
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b8af8baf8c74b73336c41174c53da1d94b9693e6d83fd81916f2c5f78ab35379"
            ],
            "excerpt": {
                "evidence": [
                    "cdn.jsdelivr.net",
                    "vade-mx-eu-fallback01.hornetsecurity.com",
                    "vade-mx-eu-fallback02.hornetsecurity.com",
                    "vade-mx-fr01.hornetsecurity.com",
                    "vade-mx-fr02.hornetsecurity.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "f3ccfbc167cca8d6afb0ffcccd948ced8da9941a8fb8683d9df0da90e73d4d84",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bc2bced5595e77bab5993d5a60a2c4a89348f950b7c5875e834dea452c1880c1"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "vade-mx-eu-fallback01.hornetsecurity.com"
                ],
                "id": "host-e868676588ab",
                "known": false,
                "name": "vade-mx-eu-fallback01.hornetsecurity.com",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c845ab1765789150bf371ff7db4e8825a198ca72ae430ff079ae11cca9698315"
            ],
            "excerpt": "boyd.ns.cloudflare.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cdc9b51636cac94a86434f06fc706fe7305fa49892bfbd80748dc287d17a7abd"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "vade-mx-fr01.hornetsecurity.com"
                ],
                "id": "host-a77ccaf26f6b",
                "known": false,
                "name": "vade-mx-fr01.hornetsecurity.com",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "220bbbab046459beb07c36c9e518fcc88ab1e903956ab6552b35994ddab945b3",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d075d049a98700d8bfb8fcdfd6241fa9946efd41e238b83ae86dec4f1cdcf0fd"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "8a19490563e72ef53bd58edd689a3dfb2dfeb8ef7758fc23feacbca136c09cc9",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d21cb354e578cc2330fbb6c0dba989d64bcb71ab73c0c89503559824341f5d9d"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7e09bad093273c3be138f397fbfc7bc82a19e39b56eb54e9b54fc30780768f8f",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d5df6910e3622269f641891ba819143cebe8ccdc53934ce16404da258eafee1e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "a7178d668e0a046c7774873c2157382f945da232f4b2b66764a5700494963052",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d8778dac4d48309088628ef3b1d1bae68d76c2cbb00c5fc1f7f763934b4e8c51"
            ],
            "excerpt": "vade-mx-fr01.hornetsecurity.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "7895e7d5e6b92b8736f66c55b4023965e036f3435582c6ab691b3ee66212242b",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d8ea04aa7f8bc774c27bb95c87af022291c1b022bfc7c9acfdd46908708e07fd"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "ff47755057a62bb482f50349076bafd320ab702f557f9dc96c06ffe08a63b331",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d97deb1750bf87be4dfc10a35903ba03e05cc49ef669edaed7cec7679f64ac29"
            ],
            "excerpt": {
                "enforced": false,
                "frame_ancestors": false,
                "hash_present": false,
                "nonce_present": false,
                "object_src": false,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "not_observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "975a2c1fffeb89f669267bb1f45c177fbf594aa1f4819da62f203dc2d8028ab9",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9f317e78c3d9cac444b7186b9b184edb3ede106b79159d049baf07595e4ae9e"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "b637869279990b977a72be28166238d37e574b257f2ff56deb300a077865b68d",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ea2606f13f5ccbb36af5218bfba053bf1f4317af331d01ee8ee9b17658fd37cc"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "532be8bc1bc1ea98fbbd609569162c4f556ecb4566df2796ab9c0aaac28a8238",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ee7305754110e51c04e23de90e74039a3b88977f869d7f1ecca716aa5275029a"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "critical"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "37a6490cbfaac29f798ed00e5e8c294329456b77b1759404a268c4add0a5d25e",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f090867285d43b8f379bfe627628b51bd98f4fbac7b522992bef3e49e27e36c8"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f2baf75d9620ad236892308550cf60c108ff367ac8f9bb5433a350a2376b55bf"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "vade-mx-fr02.hornetsecurity.com"
                ],
                "id": "host-9635c290ae7e",
                "known": false,
                "name": "vade-mx-fr02.hornetsecurity.com",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "e3ae37410d468a9eaf3783aacf62c56226ea38f60bec69b160fd42c68f676242",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f5a193fba81e628daefb1b86bbf0e2fc0935bfee6bfe75f703c6c5b819665792"
            ],
            "excerpt": "vade-mx-fr02.hornetsecurity.com",
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "ba97a0ab028fd96d32dbb09864d6384d281a35f8acd39494d39cbf2e34c72586",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f9ab568cbed426e5ab2ef6efc432717a87e8651a99b307dbf1c889d695e0f2a8"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        },
        {
            "id": "a7bee64e6923668f856a0c6105796d36a04ebdf0e6114f6d67c27d2089f96cc9",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fc4657d7ad8fe4c7a3b8e1037745ca7bdd70212b5ba4d1dc4444cd4b3344403c"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-21T06:20:07+00:00",
            "last_seen_at": "2026-09-21T06:20:07+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}