{ "schema_version": "2.0", "engine_version": "3.0.0-rc.3", "pattern_version": "2026.09.4", "scan_id": "95ecd503859555463b18e998", "domain": "jcconfection.fr", "scanned_at": "2026-09-21T06:20:07+00:00", "duration_ms": 5993, "entity": { "id": "5f43678720f5d44e52f85aeea88ffa9c78f6935210b1600b258b29bf21b8a4fa", "display_name": "jcconfection.fr", "slug": "jcconfection-fr", "entity_type": "domain_subject", "auto_created": true, "primary_asset": "jcconfection.fr" }, "scope": { "mode": "passive", "coverage": "full", "access_level": "full", "access_reason": "public_document_available", "requests": 7, "homepage_only": true, "javascript_executed": false, "ports_scanned": false, "private_networks_blocked": true, "protection_bypassed": false, "max_body_bytes": 1572864, "scan_budget_seconds": 24, "budget_exhausted": false, "transport": "curl_with_socket_fallback" }, "trust_profile": { "methodology_version": "2.1.0", "knowledge_coverage": 84, "dimensions": { "security": { "quality": 73, "coverage": 100, "band": "watch", "conclusive": true, "evidence_count": 3, "unknown_count": 0 }, "privacy": { "quality": 84, "coverage": 100, "band": "favorable", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "dependencies_control": { "quality": 59, "coverage": 100, "band": "watch", "conclusive": true, "evidence_count": 7, "unknown_count": 2 }, "resilience": { "quality": 85, "coverage": 35, "band": "non_conclusive", "conclusive": false, "evidence_count": 1, "unknown_count": 1 }, "transparency": { "quality": 40, "coverage": 70, "band": "fragile", "conclusive": true, "evidence_count": 1, "unknown_count": 0 }, "mail": { "quality": 53, "coverage": 100, "band": "fragile", "conclusive": true, "evidence_count": 1, "unknown_count": 0 } }, "global": { "quality": 62, "coverage": 84, "secondary": true } }, "signals": [ { "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480", "key": "data_location_unknown", "category": "dependencies_control", "importance": "medium", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Localisation effective des données non déterminable", "en": "Effective data location cannot be determined" }, "explanation": { "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.", "en": "Public observations cannot establish where data is actually processed or stored." }, "limitations": { "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.", "en": "A provider headquarters, an IP address, or a CDN is not proof of data location." }, "evidence_ids": [], "change_status": "stable" }, { "id": "b374d9a10a2d00dec82358c60040ee24c7d9afa91b8b9ebfd4230453f888266a", "key": "visible_provider_dependencies", "category": "dependencies_control", "importance": "medium", "direction": "neutral", "state": "corroborated", "title": { "fr": "Dépendances fournisseurs visibles", "en": "Visible provider dependencies" }, "explanation": { "fr": "7 fournisseur(s) sont reliés au périmètre observable.", "en": "7 provider(s) are linked to the observable scope." }, "limitations": { "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.", "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location." }, "evidence_ids": [ "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725", "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566", "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587", "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0", "f3ccfbc167cca8d6afb0ffcccd948ced8da9941a8fb8683d9df0da90e73d4d84", "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3", "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1", "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4", "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d" ], "change_status": "stable" }, { "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9", "key": "origin_host_unknown", "category": "dependencies_control", "importance": "low", "direction": "indeterminate", "state": "unknown", "title": { "fr": "Hébergement d’origine non déterminable", "en": "Origin hosting cannot be determined" }, "explanation": { "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.", "en": "An edge service or reverse proxy can hide origin infrastructure." }, "limitations": { "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.", "en": "Edge presence must not be treated as origin hosting." }, "evidence_ids": [], "change_status": "stable" } ], "changes": [], "knowledge": { "claims": [ { "id": "03a9007cc8b9f7dc151b9a7f2a9b55978ce62b2eb4d43fbc42876d8cc5b6d3d5", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "vade-mx-eu-fallback02.hornetsecurity.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "1b8eacd46a54a03590bfae177cae679d82ee7aa4d2290b5024f5f6521d4cb07e", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "cdn.jsdelivr.net", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "1ff77638e84a878159007baef241dfa5a2eb428363f5b68c1d69b1eb0e32569e", "subject": "jcconfection.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "6562b1b9421800a0e57036fbd7de4f907a2b30f87f500bb3e33313ec5f6edb47", "subject": "jcconfection.fr", "predicate": "canary_detection", "value": false, "state": "to_confirm", "rationale": "no_known_passive_signature_observed", "evidence_ids": [ "7f5b4a11d96bdcd445200b0a9047a317bc7c6fcd690cd9f21c6ee25f20e296f1" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "760f4115a0c031bb11b936828b4492b3c41bffc61dbd7ce521fb6a02a2045d5b", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "vade-mx-fr01.hornetsecurity.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "81f897dec24f805bdca8c1f73a7af80cc48c77bdf1839f2ffd6727f545bc25c4", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "vade-mx-fr02.hornetsecurity.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "86bba24451a7b771fbb3058adeff9e375627b0423e8cf2fc7a1cd5d53c80f72d", "subject": "jcconfection.fr", "predicate": "tls_issuer", "value": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4", "state": "observed", "rationale": "certificate_observed", "evidence_ids": [ "e9b1812da442d9b9565fbbc473b17a810a41505dc9ccf52e736b48f3ae6a7885" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "86c3ae5e8f99fe374bb79316a107bf032269c59d0a2c763669641c77f4863be6", "subject": "jcconfection.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "98be05586803b005e10b6b7f437d1eef5c8b7c126ff1ded38f36709fe84326f3", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "vade-mx-eu-fallback01.hornetsecurity.com", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "f3ccfbc167cca8d6afb0ffcccd948ced8da9941a8fb8683d9df0da90e73d4d84" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "9ccf410299b566bc4b7f8755b3234838296361ea41fcdb041cc7cf317cc6823d", "subject": "jcconfection.fr", "predicate": "openpgp", "value": null, "state": "to_confirm", "rationale": "security_txt_encryption_not_observed", "evidence_ids": [ "3f955ad404796de3391783700787922bb69ea2d6a74bdae117c6bd13458ded71" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "a7d59deeb155a7de7d17130b535f86aa02d970c9f7a684c8371b4be47b6c5138", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "Google", "state": "observed", "rationale": "provider_observed_once", "evidence_ids": [ "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "d0f83495e6b321db3474541f2f1f98a3a7b077c07757664df88d9d81c52a9e9a", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "value": "Cloudflare", "state": "corroborated", "rationale": "independent_provider_evidence_converges", "evidence_ids": [ "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1", "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4", "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "e63392a0e795d0e687114436c861a90a5aad5605a118c2bafcdaed6da23c1a9f", "subject": "jcconfection.fr", "predicate": "post_quantum_tls", "value": null, "state": "untested", "rationale": "client_capability_unavailable", "evidence_ids": [ "ba97a0ab028fd96d32dbb09864d6384d281a35f8acd39494d39cbf2e34c72586" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "f9eaf2573d61c2d39b42feef91dc77c26a854e5d605b6be2c06e6bf51b2400d4", "subject": "jcconfection.fr", "predicate": "spf_policy", "value": "softfail", "state": "observed", "rationale": "mail_policy_observed", "evidence_ids": [ "09f98e65f9e91b64631e5c507122bcbd012853b028a825417011fd3f26d2b4e2" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true } ], "relations": [ { "id": "0d50df27f3bfd0a63861e01385f4cd63024c98d82bada85fda73f5c964060f67", "subject": "jcconfection.fr", "predicate": "uses_mail_exchanger", "object": "vade-mx-fr01.hornetsecurity.com", "state": "observed", "evidence_ids": [ "a7178d668e0a046c7774873c2157382f945da232f4b2b66764a5700494963052" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "33380a0ff2355c27bb97e5cc05fae2c907fef661c9b02753e32eca14cad77db4", "subject": "jcconfection.fr", "predicate": "uses_nameserver", "object": "boyd.ns.cloudflare.com", "state": "observed", "evidence_ids": [ "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "3fd910af58842ee582c9b2810f16c3332368e5412c6d1e2722144eea0cfbedd0", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "vade-mx-eu-fallback02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "4ecc2c027545d78f7d5c5817b6e2fe2d435fa6cd947efe607466efced8174e25", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "vade-mx-fr01.hornetsecurity.com", "state": "observed", "evidence_ids": [ "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "587a86fca1e766f37a3e6bd673c9cff4feb64879e1d70c2d927c7f5e26130f07", "subject": "jcconfection.fr", "predicate": "uses_mail_exchanger", "object": "vade-mx-eu-fallback01.hornetsecurity.com", "state": "observed", "evidence_ids": [ "4b58f7f554c8bd3c50d69128f8ed92f038b59f1973011cd3861f59b17a35169d" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "58ff197530a0e9c304c1590f7e9266cbff48ad682c9168cc2bc9191c9e61ac49", "subject": "jcconfection.fr", "predicate": "uses_technology", "object": "Apache", "state": "observed", "evidence_ids": [ "06c4b3c80ecfa5a42197da9cacc67354bf90045153d8836b37d4d32b7373f79f" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "5fcdecc6a35ab808a2092e654b8bb18fd916ce3bf184f3959bdb4d0d33e33fff", "subject": "jcconfection.fr", "predicate": "resolves_to", "object": "5.250.177.164", "state": "observed", "evidence_ids": [ "15471723ace686e8c5d010bb0870fba820bfbb52fd7193e8f60e0c3488069e79" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "716be0bb00632df18c59963b369ecb89efe434e2230761a0c4fbe9c0df665f2a", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "vade-mx-fr02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "9a3d8612fbf5ff289989a9aa50696c328cd84c84debc46ce7f5671888a0f169b", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "Cloudflare", "state": "corroborated", "evidence_ids": [ "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1", "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4", "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "a9626e671640cf1ecc867df2b07f64f31b23caca309d4494f6f8dc0b01753b2e", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "cdn.jsdelivr.net", "state": "observed", "evidence_ids": [ "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "d4f11c98a94daf1aaaecc615b706857752aecdd58d8dfa11d1b68047fe6a6e21", "subject": "jcconfection.fr", "predicate": "uses_nameserver", "object": "nancy.ns.cloudflare.com", "state": "observed", "evidence_ids": [ "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "dae19cc7b7ffb5dd47e98f786346e53885d6e7afdb9ae6975feac5ec14e96a74", "subject": "jcconfection.fr", "predicate": "uses_technology", "object": "WordPress", "state": "observed", "evidence_ids": [ "08a4750667eabfc3449273beae313119b5577044ed8edd1875754aae79929786" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "e8e6638102acd6388b21047f3ad1ae92f50a620576bf071b678223b156863aab", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "Google", "state": "observed", "evidence_ids": [ "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f23d664aa584fd751fff0fbc87c88d3233693e917b8be100e14515607c58867c", "subject": "jcconfection.fr", "predicate": "depends_on_provider", "object": "vade-mx-eu-fallback01.hornetsecurity.com", "state": "observed", "evidence_ids": [ "f3ccfbc167cca8d6afb0ffcccd948ced8da9941a8fb8683d9df0da90e73d4d84" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f655fbf80529d2d0e56117f70b97f350c998baafd0a23b0a59bb9b66fa61b728", "subject": "jcconfection.fr", "predicate": "uses_mail_exchanger", "object": "vade-mx-fr02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "e3ae37410d468a9eaf3783aacf62c56226ea38f60bec69b160fd42c68f676242" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "fbfa31063987ba03220afad98eff0738182c9b86d312cdb59696dc3a1dea780e", "subject": "jcconfection.fr", "predicate": "uses_mail_exchanger", "object": "vade-mx-eu-fallback02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "7a40600a86a933bf54d9909a1e2a4bf26eb6bc33bc4d5edd1ad5cce4fa22366b" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" } ], "unknowns": [ { "id": "86c3ae5e8f99fe374bb79316a107bf032269c59d0a2c763669641c77f4863be6", "subject": "jcconfection.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "1ff77638e84a878159007baef241dfa5a2eb428363f5b68c1d69b1eb0e32569e", "subject": "jcconfection.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true } ], "evidence": [ { "id": "e0e25e39e1bc21daee50c42aabf197e12ff0bb44d641dfa798f813cdbd537c95", "observation_ids": [ "1096a9537c9ca488f25ecca29a6955e819871102408a95a6e2f50358044f41e2" ], "evidence_type": "module_finding", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "Cloudflare", "Google", "cdn.jsdelivr.net", "vade-mx-eu-fallback01.hornetsecurity.com", "vade-mx-eu-fallback02.hornetsecurity.com", "vade-mx-fr01.hornetsecurity.com", "vade-mx-fr02.hornetsecurity.com" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "02d8b381ffad3f0084760f14d9e290c531c56b8f3dcbf7cc8d005e46493649cd", "observation_ids": [ "1486b070d96e422755175210c63eeff85bf5456cf8de16f31a130decc55b81df" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "boyd.ns.cloudflare.com", "nancy.ns.cloudflare.com" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "e9b1812da442d9b9565fbbc473b17a810a41505dc9ccf52e736b48f3ae6a7885", "observation_ids": [ "157e25721a5fa16d00f1fceab1f47c64a41c5c51da9d770d2a2a1a99dcb39e38" ], "evidence_type": "tls_issuer", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "2b739454355b0685e9e9f98732635d357501fd2d2f8aab6c5e8384706d7d93c6", "observation_ids": [ "1b1fdaa8502eb4e2a7b8ec1a2d4bf834a02db883be934dab4cfcdcf6954d9cc7" ], "evidence_type": "module_finding", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "Google" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3", "observation_ids": [ "2761c332e19cbee245395144c25f4036501bd5101ed12235dfc1342c56271543" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "www.googletagmanager.com" ], "id": "google", "known": true, "name": "Google", "observation_count": 1, "services": [ "analytics", "captcha", "fonts", "maps", "video" ], "tracker": true }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1", "observation_ids": [ "28d1479633706662909f28570a133c29f326c81766e1670147b42bd1bd952ec6" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": true, "hosts": [ "boyd.ns.cloudflare.com", "nancy.ns.cloudflare.com" ], "id": "cloudflare", "known": true, "name": "Cloudflare", "observation_count": 2, "services": [ "cdn", "security" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "916eda3980ffa4e29c6a695373ce84fbc9f2f95a80bfe5fa0154d208ba602a07", "observation_ids": [ "2b503927e5eeed73b868e96b0bf92a85cb2f2ee4eb2f32a2991bb1d1a5a999ad" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f3dd7d911f93ef74ac73a5a584570c39c25f62d48f7b5278217242a381432815", "observation_ids": [ "39658f5a1dec0e17e270d0182f8fb2ffa7cf3ba1b735e5b91c96ed56e75621d3" ], "evidence_type": "dnssec_evidence", "collector": "dnssec_depth", "rule_version": "2026.09.4", "excerpt": { "chain_consistency": { "reason": "insufficient_record_evidence", "state": "untested" }, "dnskey": { "query_supported": false, "records": [], "state": "untested" }, "ds": { "query_supported": false, "records": [], "state": "untested" }, "validation": { "reason": "no_validating_resolver", "state": "untested" } }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725", "observation_ids": [ "40ad2a97704580805ad64d7d7eccba54f5a0faa4be129e733c2b2378d6ab0a32" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "vade-mx-eu-fallback02.hornetsecurity.com" ], "id": "host-0afb53ca7550", "known": false, "name": "vade-mx-eu-fallback02.hornetsecurity.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "15471723ace686e8c5d010bb0870fba820bfbb52fd7193e8f60e0c3488069e79", "observation_ids": [ "4878d554c846e13c9b8d13ffddc58c87d31f1e281ebab16ad438bc07ce9338a3" ], "evidence_type": "dns_address", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "5.250.177.164", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f17d48dbda3a263138b2d97c200cd6319f05fbe377c51131b0ffe0f554d79b1d", "observation_ids": [ "5299804996a5572524efe3e33784fd4eb83826f3a44396a0a7dec9119bdbfed4" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "SAMEORIGIN" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "8e1e72a3cec489b69e4187953a178537d7329f950e22b5cc78be8c0f07c7f6f8", "observation_ids": [ "57bcbf419485a9024765e9837153f01d9a4a28daeb9e68aa5a7d516a406f06cc" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "Apache" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "cf3d74c26e7e69dfd1b96ddb86006e54101c9bfdcb0896594ed8d4dfb923ea85", "observation_ids": [ "57f706654e4e60432baa6f74ca4a5dfff0936815bd1576dc24df0e50c354075c" ], "evidence_type": "modern_transport_evidence", "collector": "modern_transport", "rule_version": "2026.09.4", "excerpt": { "alpn": { "state": "untested", "value": "" }, "certificate": { "cipher": "", "issuer": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4", "protocol": "", "san_count": 0, "state": "observed", "valid_from": "2026-06-29T00:00:00+00:00", "valid_to": "2027-01-13T23:59:59+00:00" }, "http2": { "negotiated": "2", "state": "observed" }, "http3_advertised": { "alt_svc": "", "state": "not_observed" }, "ipv4": { "addresses": [ "5.250.177.164" ], "state": "observed" }, "ipv6": { "addresses": [], "state": "not_observed" } }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "31d7527d467e50229f0c2b5da780d4634f8978e2a03ffdce8081517d7c8a0474", "observation_ids": [ "5a29179d505c3750935689f7444587d843f8d2d49eff4b433bd5643f342fce4e" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "no-referrer-when-downgrade" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566", "observation_ids": [ "5cd1a8ce35f5e42bd11181109f0b1bbf42d8b4febbcaca6ecba8b8bd3abfca55" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "cdn.jsdelivr.net" ], "id": "host-edf7dcad352d", "known": false, "name": "cdn.jsdelivr.net", "observation_count": 2, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "4209a88e341bffff0c84695991f551e106fd8afd869abfa77a30b96e673b6850", "observation_ids": [ "65391e659219353a00ecc665b6db2a6290f3cc13a765c22f42cd61773f71bf96" ], "evidence_type": "module_finding", "collector": "reachability", "rule_version": "2026.09.4", "excerpt": { "evidence": "3327.08 ms", "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "08a4750667eabfc3449273beae313119b5577044ed8edd1875754aae79929786", "observation_ids": [ "6b6b0197e4a7b69e716ba7b5371c4b6051e27ce3acb39ceef35f92a537b76ccb" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "WordPress", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "06c4b3c80ecfa5a42197da9cacc67354bf90045153d8836b37d4d32b7373f79f", "observation_ids": [ "6f5475753b8360cbd56168ebf9d1fef936b3e49ffa80a18929f6d5baa90ade1f" ], "evidence_type": "technology", "collector": "technology", "rule_version": "2026.09.4", "excerpt": { "name": "Apache", "version": "", "version_exposed": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7911013ccde93890c9feb9a67e45c1218a5dc3e2a87016de71bc5bc14811ad6d", "observation_ids": [ "758c4ac6c956f298483ebc3906ff0c98393dd5389a212fbb2299cefa074b1d74" ], "evidence_type": "tracker_provider", "collector": "privacy", "rule_version": "2026.09.4", "excerpt": "Google", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "53a1aeec68aa723060789e4403c4690f38705c131ef637c9d87b6c22d067e6eb", "observation_ids": [ "759cf369c3ada9474aeb821a0779f52c1c3df7fe2f45a26cd3fabf35441bec08" ], "evidence_type": "tls_valid_to", "collector": "tls", "rule_version": "2026.09.4", "excerpt": "2027-01-13T23:59:59+00:00", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "4b58f7f554c8bd3c50d69128f8ed92f038b59f1973011cd3861f59b17a35169d", "observation_ids": [ "7c33102085220c10c3b54d1f817294b90128c5c0047391500df68372b7c89f94" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "vade-mx-eu-fallback01.hornetsecurity.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4", "observation_ids": [ "7c5ca05cb019fe6baffeffc54424d44e0c03b3b628eb003f90cd162007deff08" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "nancy.ns.cloudflare.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7a40600a86a933bf54d9909a1e2a4bf26eb6bc33bc4d5edd1ad5cce4fa22366b", "observation_ids": [ "7c69751db5fbbf3ad8a4c0dc0f108f7b01d63790ef7858d913b2bdde06c492be" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "vade-mx-eu-fallback02.hornetsecurity.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "3ff105668bebc15c9451d6ac7d0b64c7d7c3325f3f6919a8b72fe14be8088bff", "observation_ids": [ "818d6ecf66b0b07c91b0345a2ee1a11fa9f42cf1507f7ea92e03320642487af5" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "max-age=31536000; includeSubDomains" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "9181e590a14c9124ae082838f1765a00e4f0b685f6d3097403a740c2ac09d7cf", "observation_ids": [ "8551f5b2f6f65b8a104b17e4ddd13358b3178995781c4bf087b87fb2ccd4ac88" ], "evidence_type": "module_finding", "collector": "supply_chain", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "cdn.jsdelivr.net", "www.googletagmanager.com" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "66b41a123967fb4933f48d4ece8d65aa37b95c2ee48f6e19f2d74655e58d82db", "observation_ids": [ "899ffbda4baa5e98c4c335b7014b47a9b7bb7b40e9dbecc3f3be9e5066cb16f2" ], "evidence_type": "module_finding", "collector": "supply_chain", "rule_version": "2026.09.4", "excerpt": { "evidence": 1, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "b73dae643260024611191893abcbe68b20bb846b424cf7022fbd0652dcad73dc", "observation_ids": [ "89be6f736560a4c7e08c893bd0aa60aa59e77f33752154162e6b642f618fc158" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "Cloudflare", "Google" ], "severity": "high" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "4d09156fda9186cd1b8aefd3f473990d8f326ab2f26bcca24ec0232544682c10", "observation_ids": [ "8b25b6cdcbedc502a2080f28b8e88192c12deaa0f17118e4a155d045f24caaf3" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "c75916ea84540599ddc16db29455c30f0732214b4e09628bc1ed188adad8d882", "observation_ids": [ "9aea4dd258d81390138a2dd2532929dddcf4f5c4ea63ebda881cdcc7076ee5ed" ], "evidence_type": "module_finding", "collector": "resilience", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "5.250.177.164" ], "severity": "info" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f0f8327aa1fc9cca5e41d286205b05be5461f5f87e49aaf2a00edb1f50c1e4c4", "observation_ids": [ "9b47385eb3d853910f3925bfdc1af6bc9d416d5a932b5860b06777eb629c5913" ], "evidence_type": "module_finding", "collector": "transparency", "rule_version": "2026.09.4", "excerpt": { "evidence": 404, "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "70c218193c8935593295b63ddbe598c5bdcee3b9a69465f5be9e896613617d34", "observation_ids": [ "9d17fd6cab1842b0f185155c44fbe3f59a3b205cf4ba4f54a74ca9f13d346096" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "boyd.ns.cloudflare.com", "nancy.ns.cloudflare.com" ], "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f0b1f43370b8220550afd0c21325fe36c814ba4e2411356c88b796330da3f9e8", "observation_ids": [ "9dc87d04f16e726085099a729c00f5f3ff21ab525d6570971985c796c78be1ec" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7f5b4a11d96bdcd445200b0a9047a317bc7c6fcd690cd9f21c6ee25f20e296f1", "observation_ids": [ "a340ade32815f85d4cd85668b5fb9d8d1c5b5b147c671259d62a333c4d8f5687" ], "evidence_type": "canary_signal", "collector": "canary_passive", "rule_version": "2026.09.4", "excerpt": { "matches": [], "reason": "no_known_passive_signature_observed", "signature_version": "2026.09.1", "state": "not_observed" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "fa33267707ec65f7135f7f26e56ee4eb7dae4da28fda2d82e4340960fd9a0f1b", "observation_ids": [ "a42971902cb26e553d71bc75443fe2c1dce15094868122620ea2843a69c25cab" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "42bddd86fa87eda2c439e17f25f3b45b123808644dd30d883aaed4f232907f41", "observation_ids": [ "a544d3863250041a2a2e426899331e84d3f63fd817d10a6e19ce3400acd87039" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": { "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.", "status": "not_tested" }, "severity": "info" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "064112197434787bc41192ca4123e3e18064f1bf1332b9592ca4f247a6d1d87a", "observation_ids": [ "a548b30c93e350eeed3945e68a95ed605783b9c08cec5eb9e6bd6cfdbfd417c8" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "high" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "81e2fdf5beee388dc52e677bed2623510fc96bd6fc3f42222ee4860ae76cfe82", "observation_ids": [ "aa2c7bd0a195616fd7b6d0eacd32f20e40e2108abb3655c3d24f3bed28e4e307" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "0c470fc3c8a26e2f61a9f96805f4454c010bd06ab62d3f55168ea01563851577", "observation_ids": [ "aa4352e1a635a149da9a61c41a86bbd02b49ebfa47c5f58659ecc4ddc8616613" ], "evidence_type": "module_finding", "collector": "sovereignty", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "cdn.jsdelivr.net", "vade-mx-eu-fallback01.hornetsecurity.com", "vade-mx-eu-fallback02.hornetsecurity.com", "vade-mx-fr01.hornetsecurity.com", "vade-mx-fr02.hornetsecurity.com" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "09f98e65f9e91b64631e5c507122bcbd012853b028a825417011fd3f26d2b4e2", "observation_ids": [ "afc1b61e4b57255454641a4ecf42b5bfe526e1b22549823a1d5094a26af4ec2d" ], "evidence_type": "spf_policy", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": "softfail", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7fedcd8b55194bbd0be8ab718099b41fb60dad974758942bed5959cb490d9942", "observation_ids": [ "b03beedbfe4303c2cbaa1c721fca05c8423e4dd05b90b0c7c9f8abfa0744f172" ], "evidence_type": "module_finding", "collector": "dns", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "3f955ad404796de3391783700787922bb69ea2d6a74bdae117c6bd13458ded71", "observation_ids": [ "b5a74cff5cb08f5ddf53a648b6fa595b03d8b36efed2d00d73c9b3abe24aafde" ], "evidence_type": "openpgp_discovery", "collector": "openpgp_discovery", "rule_version": "2026.09.4", "excerpt": { "dns_openpgpkey": { "reason": "recipient_identity_required", "state": "untested" }, "fingerprint": null, "mechanisms": [], "reason": "security_txt_encryption_not_observed", "state": "not_observed", "wkd": { "reason": "wkd_not_fetched_without_identity", "state": "untested" } }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "d00c4d8df9f9f8fc6a38f90a40f8a23ef7a4debe85bf57d3b4a59d1efb79825a", "observation_ids": [ "b75775575354b43f75a2552ef95041baec9c46a253cb80a1158b5bb7a2fce6c2" ], "evidence_type": "spf_record", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "v=spf1 mx ip4:5.250.177.164 ip4:109.69.190.26 ip4:109.69.190.29 include:spf.protection.outlook.com ~all", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "c5129d5f6bbf9ceea521ed9cba0e883477718f6c6e209d464dba33c66dd4f273", "observation_ids": [ "b8af8baf8c74b73336c41174c53da1d94b9693e6d83fd81916f2c5f78ab35379" ], "evidence_type": "module_finding", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "evidence": [ "cdn.jsdelivr.net", "vade-mx-eu-fallback01.hornetsecurity.com", "vade-mx-eu-fallback02.hornetsecurity.com", "vade-mx-fr01.hornetsecurity.com", "vade-mx-fr02.hornetsecurity.com" ], "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "f3ccfbc167cca8d6afb0ffcccd948ced8da9941a8fb8683d9df0da90e73d4d84", "observation_ids": [ "bc2bced5595e77bab5993d5a60a2c4a89348f950b7c5875e834dea452c1880c1" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "vade-mx-eu-fallback01.hornetsecurity.com" ], "id": "host-e868676588ab", "known": false, "name": "vade-mx-eu-fallback01.hornetsecurity.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d", "observation_ids": [ "c845ab1765789150bf371ff7db4e8825a198ca72ae430ff079ae11cca9698315" ], "evidence_type": "dns_nameserver", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "boyd.ns.cloudflare.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587", "observation_ids": [ "cdc9b51636cac94a86434f06fc706fe7305fa49892bfbd80748dc287d17a7abd" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "vade-mx-fr01.hornetsecurity.com" ], "id": "host-a77ccaf26f6b", "known": false, "name": "vade-mx-fr01.hornetsecurity.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "220bbbab046459beb07c36c9e518fcc88ab1e903956ab6552b35994ddab945b3", "observation_ids": [ "d075d049a98700d8bfb8fcdfd6241fa9946efd41e238b83ae86dec4f1cdcf0fd" ], "evidence_type": "mail_transport_evidence", "collector": "mail_transport", "rule_version": "2026.09.4", "excerpt": { "bimi": { "records": [], "state": "not_observed" }, "dane_tlsa": { "query_supported": false, "reason": "tlsa_query_not_available", "records": [], "state": "untested" }, "dkim": { "reason": "no_selector_bruteforce", "state": "untested" }, "mta_sts": { "policy": null, "policy_state": "untested", "records": [], "state": "not_observed" }, "tls_rpt": { "records": [], "state": "not_observed" } }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "8a19490563e72ef53bd58edd689a3dfb2dfeb8ef7758fc23feacbca136c09cc9", "observation_ids": [ "d21cb354e578cc2330fbb6c0dba989d64bcb71ab73c0c89503559824341f5d9d" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7e09bad093273c3be138f397fbfc7bc82a19e39b56eb54e9b54fc30780768f8f", "observation_ids": [ "d5df6910e3622269f641891ba819143cebe8ccdc53934ce16404da258eafee1e" ], "evidence_type": "module_finding", "collector": "transparency", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "medium" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "a7178d668e0a046c7774873c2157382f945da232f4b2b66764a5700494963052", "observation_ids": [ "d8778dac4d48309088628ef3b1d1bae68d76c2cbb00c5fc1f7f763934b4e8c51" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "vade-mx-fr01.hornetsecurity.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "7895e7d5e6b92b8736f66c55b4023965e036f3435582c6ab691b3ee66212242b", "observation_ids": [ "d8ea04aa7f8bc774c27bb95c87af022291c1b022bfc7c9acfdd46908708e07fd" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "info" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "ff47755057a62bb482f50349076bafd320ab702f557f9dc96c06ffe08a63b331", "observation_ids": [ "d97deb1750bf87be4dfc10a35903ba03e05cc49ef669edaed7cec7679f64ac29" ], "evidence_type": "csp_evidence", "collector": "csp_depth", "rule_version": "2026.09.4", "excerpt": { "enforced": false, "frame_ancestors": false, "hash_present": false, "nonce_present": false, "object_src": false, "report_only": false, "reporting_endpoint": false, "state": "not_observed", "strict_dynamic": false, "trusted_types": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "975a2c1fffeb89f669267bb1f45c177fbf594aa1f4819da62f203dc2d8028ab9", "observation_ids": [ "d9f317e78c3d9cac444b7186b9b184edb3ede106b79159d049baf07595e4ae9e" ], "evidence_type": "mail_policy_flag", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": false, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "b637869279990b977a72be28166238d37e574b257f2ff56deb300a077865b68d", "observation_ids": [ "ea2606f13f5ccbb36af5218bfba053bf1f4317af331d01ee8ee9b17658fd37cc" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "532be8bc1bc1ea98fbbd609569162c4f556ecb4566df2796ab9c0aaac28a8238", "observation_ids": [ "ee7305754110e51c04e23de90e74039a3b88977f869d7f1ecca716aa5275029a" ], "evidence_type": "module_finding", "collector": "headers", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "critical" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "37a6490cbfaac29f798ed00e5e8c294329456b77b1759404a268c4add0a5d25e", "observation_ids": [ "f090867285d43b8f379bfe627628b51bd98f4fbac7b522992bef3e49e27e36c8" ], "evidence_type": "http_header", "collector": "headers", "rule_version": "2026.09.4", "excerpt": [ "nosniff" ], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0", "observation_ids": [ "f2baf75d9620ad236892308550cf60c108ff367ac8f9bb5433a350a2376b55bf" ], "evidence_type": "dependency_provider", "collector": "dependencies", "rule_version": "2026.09.4", "excerpt": { "critical": false, "hosts": [ "vade-mx-fr02.hornetsecurity.com" ], "id": "host-9635c290ae7e", "known": false, "name": "vade-mx-fr02.hornetsecurity.com", "observation_count": 1, "services": [ "unknown" ], "tracker": false }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "e3ae37410d468a9eaf3783aacf62c56226ea38f60bec69b160fd42c68f676242", "observation_ids": [ "f5a193fba81e628daefb1b86bbf0e2fc0935bfee6bfe75f703c6c5b819665792" ], "evidence_type": "mail_exchanger", "collector": "dns", "rule_version": "2026.09.4", "excerpt": "vade-mx-fr02.hornetsecurity.com", "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "ba97a0ab028fd96d32dbb09864d6384d281a35f8acd39494d39cbf2e34c72586", "observation_ids": [ "f9ab568cbed426e5ab2ef6efc432717a87e8651a99b307dbf1c889d695e0f2a8" ], "evidence_type": "post_quantum_tls", "collector": "pq_tls_probe", "rule_version": "2026.09.4", "excerpt": { "capability": { "capable": false, "groups": [], "reason": "proc_open_unavailable" }, "group": null, "reason": "client_capability_unavailable", "state": "untested" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" }, { "id": "a7bee64e6923668f856a0c6105796d36a04ebdf0e6114f6d67c27d2089f96cc9", "observation_ids": [ "fc4657d7ad8fe4c7a3b8e1037745ca7bdd70212b5ba4d1dc4444cd4b3344403c" ], "evidence_type": "module_finding", "collector": "mail_trust", "rule_version": "2026.09.4", "excerpt": { "evidence": null, "severity": "low" }, "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00" } ] }, "dossier": { "executive_summary": [ "9 observations publiques sont documentées dans ce dossier.", "7 dépendances publiques structurantes sont visibles.", "Aucune évolution utile n’est retenue depuis la lecture précédente.", "4 points restent à confirmer ou ne sont pas observables de l’extérieur." ], "knowledge_states": { "observed": 9, "deduced": 0, "to_confirm": 2, "not_observable": 2, "contradictory": 0, "untested": 1 }, "short_view": [ { "key": "identity_governance", "label": "Identité et gouvernance", "items": [ { "id": "6562b1b9421800a0e57036fbd7de4f907a2b30f87f500bb3e33313ec5f6edb47", "title": "Canary detection", "value": false, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "7f5b4a11d96bdcd445200b0a9047a317bc7c6fcd690cd9f21c6ee25f20e296f1" ], "rationale": "no_known_passive_signature_observed" }, { "id": "86c3ae5e8f99fe374bb79316a107bf032269c59d0a2c763669641c77f4863be6", "title": "Origin host", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "public_edge_does_not_reveal_origin" }, { "id": "9ccf410299b566bc4b7f8755b3234838296361ea41fcdb041cc7cf317cc6823d", "title": "Openpgp", "value": null, "state": "to_confirm", "state_label": "À confirmer", "evidence_ids": [ "3f955ad404796de3391783700787922bb69ea2d6a74bdae117c6bd13458ded71" ], "rationale": "security_txt_encryption_not_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 2, "not_observable": 1, "contradictory": 0, "untested": 0 } }, { "key": "infrastructure_transport", "label": "Infrastructure et transport", "items": [ { "id": "86bba24451a7b771fbb3058adeff9e375627b0423e8cf2fc7a1cd5d53c80f72d", "title": "Tls issuer", "value": "C = FR, O = Gandi, CN = Gandi RSA Domain Validation Secure Server CA 4", "state": "observed", "state_label": "Observé", "evidence_ids": [ "e9b1812da442d9b9565fbbc473b17a810a41505dc9ccf52e736b48f3ae6a7885" ], "rationale": "certificate_observed" }, { "id": "e63392a0e795d0e687114436c861a90a5aad5605a118c2bafcdaed6da23c1a9f", "title": "Post quantum tls", "value": null, "state": "untested", "state_label": "Non testé", "evidence_ids": [ "ba97a0ab028fd96d32dbb09864d6384d281a35f8acd39494d39cbf2e34c72586" ], "rationale": "client_capability_unavailable" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 1 } }, { "key": "mail_trust", "label": "Messagerie et confiance", "items": [ { "id": "f9eaf2573d61c2d39b42feef91dc77c26a854e5d605b6be2c06e6bf51b2400d4", "title": "Spf policy", "value": "softfail", "state": "observed", "state_label": "Observé", "evidence_ids": [ "09f98e65f9e91b64631e5c507122bcbd012853b028a825417011fd3f26d2b4e2" ], "rationale": "mail_policy_observed" } ], "states": { "observed": 1, "deduced": 0, "to_confirm": 0, "not_observable": 0, "contradictory": 0, "untested": 0 } }, { "key": "dependencies_exposure", "label": "Dépendances et exposition", "items": [ { "id": "03a9007cc8b9f7dc151b9a7f2a9b55978ce62b2eb4d43fbc42876d8cc5b6d3d5", "title": "Depends on provider", "value": "vade-mx-eu-fallback02.hornetsecurity.com", "state": "observed", "state_label": "Observé", "evidence_ids": [ "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725" ], "rationale": "provider_observed_once" }, { "id": "1b8eacd46a54a03590bfae177cae679d82ee7aa4d2290b5024f5f6521d4cb07e", "title": "Depends on provider", "value": "cdn.jsdelivr.net", "state": "observed", "state_label": "Observé", "evidence_ids": [ "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566" ], "rationale": "provider_observed_once" }, { "id": "1ff77638e84a878159007baef241dfa5a2eb428363f5b68c1d69b1eb0e32569e", "title": "Data location", "value": null, "state": "not_observable", "state_label": "Non observable de l'extérieur", "evidence_ids": [], "rationale": "provider_metadata_does_not_prove_processing_location" } ], "states": { "observed": 6, "deduced": 0, "to_confirm": 0, "not_observable": 1, "contradictory": 0, "untested": 0 } } ], "structuring_dependencies": [ { "label": "vade-mx-eu-fallback02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "bd747df18699e6ebb64ba1e0f1c847820200ebb63ba46cfa96e8249150f33725" ] }, { "label": "vade-mx-fr01.hornetsecurity.com", "state": "observed", "evidence_ids": [ "faff69959ceac5e98a1291f12cf56f9636ab3a144b0a3d30e9a5a7c068809587" ] }, { "label": "vade-mx-fr02.hornetsecurity.com", "state": "observed", "evidence_ids": [ "893b8c734a8a9751c485dc2d6a7d43772d3f823d5d16c83271a81872d217dcd0" ] }, { "label": "Cloudflare", "state": "observed", "evidence_ids": [ "fc8b11710b6467536114976d03ffa4d517abc8ebb3964c275fbd21345d504ac1", "95478f19272a5b30fa5ce0daadbfcaa3fce8d8aa8bef5e13014304cfe86a88e4", "85310fc7809cd584275599b39f41b4acad7e6a5c04474515fe3fc2831ae1d66d" ] }, { "label": "cdn.jsdelivr.net", "state": "observed", "evidence_ids": [ "a501a884995960a420e1f52137062e586ad56f14661bd0ab8f76bf46679c7566" ] }, { "label": "Google", "state": "observed", "evidence_ids": [ "1d688564023d3dcd9e157df55eda18cd1e4e76a40c52058d3c231daacc00fce3" ] } ], "open_questions": [ { "id": "86c3ae5e8f99fe374bb79316a107bf032269c59d0a2c763669641c77f4863be6", "subject": "jcconfection.fr", "predicate": "origin_host", "value": null, "state": "unknown", "rationale": "public_edge_does_not_reveal_origin", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true }, { "id": "1ff77638e84a878159007baef241dfa5a2eb428363f5b68c1d69b1eb0e32569e", "subject": "jcconfection.fr", "predicate": "data_location", "value": null, "state": "unknown", "rationale": "provider_metadata_does_not_prove_processing_location", "evidence_ids": [], "first_seen_at": "2026-09-21T06:20:07+00:00", "last_seen_at": "2026-09-21T06:20:07+00:00", "active": true } ], "evidence_count": 60, "meaningful_change_count": 0 }, "timeline": { "first_observed_at": "2026-09-21T06:20:07+00:00", "last_observed_at": "2026-09-21T06:20:07+00:00", "reference_state": "initial", "message": "Point de référence initial créé aujourd'hui", "counts": { "appeared": 0, "modified": 0, "stable": 0, "disappeared": 0 }, "changes": [], "history_count": 1 }, "methodology": { "version": "2.3.1", "model": "evidence_first", "principles": [ "absence_of_evidence_is_not_evidence_of_absence", "unknown_remains_unknown", "provider_metadata_is_not_data_location", "edge_provider_is_not_origin_host", "single_snapshot_does_not_prove_resilience" ] } }