{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.7.1",
    "pattern_version": "2026.09.4",
    "scan_id": "2059dc5d9ee12bbe980a24df",
    "domain": "kachouri.com",
    "scanned_at": "2026-09-04T23:56:47+00:00",
    "evidence_count": 34,
    "evidence": [
        {
            "id": "a509d15e377994e36f4f7ba3379c53d4bd512bbacd458459051788fad4e36fbd",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "06dfabf7a8196be4a2cce91ce1b4dcc0305c40166257a99c2f45b603552317e3"
            ],
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "a8d414cbd294bab6d3a9a8eac6b5f8765e354ef7b4dff8757edcccfd19aee5a2",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "07763a593d450561760cb5e2da8fdc0069379d71326b1f7fa524b208123ae968"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "41edf0d25acd0e9ae67f5d6bfa77e045b3b6a835fa0b9d3ed414b44b3ac24928",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0d658e1c7ab40781859f4102b9c78b4e3f58f9afa32e0da30cff8547d226caa7"
            ],
            "excerpt": "172.67.130.209",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "e4e8e135a9618d72bc66dc2c70f7cd5b3edb1af7653f4813607b1644cfaf7e35",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0f55672c4579b0be0b47b3ad3378c7044b128775070a7c95e05f62f4a1c4d8c9"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "1ce67bbf12c0542d997d0e6b0e1081200084d3dccf69b0c4f7322659b14443ab",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "164ada7cc3e2d327798318e0abf206610568365d3b4c41740da2692dcad55780"
            ],
            "excerpt": "missing",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "d4b9781d2353c7f7f8c9313f2dfe91d19ad625cce0bb4bc931ce351704f42014",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2b2f7d3fa77d4c3a17da3cae2766a8699ed883f4092191ba420e3e8f02314c05"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "659da2132e0b2e7f4ff57f3c394ab78de95d3e2b90a9854ad8ec3f544d081672",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2e30409961cb59e0b37bf093747f1a1c1b270e17bd5d6d84d1e5840cd1239c2e"
            ],
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "6ebf315959e070828ed71652b465054aaa83922834ac705a08edfe6a841306d9",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31fcd420cf91c8cc637d9cef1cb087c0452b400455c584a7b9558279abac934d"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "f885b3181046e0a5e98ca192d75d74e515edf90172060837dc53ddbe1c8b850a",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "47d1204dde82bec10d7be54f12319a90bc56812ffe17239e0f8c17881b94b52c"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "014c813231908c1cad9c6eef35a55fba5c27ff6bc3b4ec9719ff3175046f7831",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5aae5c6c0ae36f954e5e90dc31ff172e25f1012bba845eb62a347241795e38a5"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "80212bebeded30a76d9f5acb874dfa7c42a67ca60e81817ebf4c2b0b9f41463d",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "68877fdc5d6edc02cf3a9d0c8c568dc47aaffbe5b816384eee9ce885fab115f1"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "ba9141090618dc69d21afc019295385ba2d5b663853f5d2bb19f171404b590a4",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7035c6af5a00e8ee1c60ae533f4a3884fa67884e467692706d4364c97cc03b23"
            ],
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "6af851838745693f9aac30c8ec35e6b8f546db6e04c1156373f5bef0243d62db",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "73cc9d0c8c97de1c8be2d1e669ad516e763452ea4fd9a609c0795e7673dd9902"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "e431d9a95d2c6b9e67925ecb5c9a63f1ee02690f76a9a8556882f55ce772e1a1",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7ae104ce7f9f329cb38580401a3a8233c98f7e23f37fa0cc3851f42fe81fb728"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "a353171b737aa11fc56c4adcedf2aa8e6fd2651839aa4155cf6bae55e1c317d7",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7eaf77a2421e288058f0b06fa6b714487b1dd0280e4d3a690be9f5a5527917c8"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "9e12b42b206faf59ee3300fd405abea03db083c8baac5c756b413df9479d4fee",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8e7904bf484462ed489fd2736e1bb5ff7d78cb333f49ae4c77f7c17b9b320391"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "f70f111e990e605919560e870cb54a990b9e0f42a42a7ffbc1e2df12f93346aa",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9f525d1620514fec1e59bb9abb93553e3653e25e12ceabe6350d400f8334c0d1"
            ],
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "b0d63fb03373f23b72214967171841c6a60df38239e3c822620dbebefc2304b0",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9f72c7dc47ebb0152828bf42749dd05208452a8d11ff9fd220cdba7b752ea8af"
            ],
            "excerpt": [
                "default-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; worker-src 'none'; img-src 'self' data:; font-src 'self'; style-src 'self'; script-src 'self' 'nonce-gVG0B+EwSi2nrLcP2OYcW4PY'; connect-src 'self'; media-src 'self'; manifest-src 'self'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "acae6780a55d2bcdbf19214ba3a1ed6ff278bfdfd3e227c78096af661ab3b289",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a87f604f9345f6e23de03f94365ef7621199aaa305d84771d2bf0a759fef6d7f"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YE1",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "7ce8040d915884d10ba23fed0b1fd0bd704d07a6139f703860e0bad2887ac8d9",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a9eacf4333c17943b73fb58b49c3d2116f9c48dcf13dd073ff30db473323384c"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "ea6bc848eb325144fb20aed153d16911440858c7209962eab22c2c54b6923448",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ab368a343ecc85214e3b4bafc4743b0d4ca1739f364ab73e81c023eadda773a0"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "3bfbcf51ef09792dc4aadd99b13e989434ed924bf3a42f1789eae2db37bc4187",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b7b611c4cd6ffd8b2891cf37d69d105b85e10b74d4a2526327832d42f3488ca8"
            ],
            "excerpt": "2606:4700:3037::ac43:82d1",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "1051340fab2df15bef1368f45c9eebea598e8cbce8c9e4eac5f96ff9bbcf9dbd",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bc57eba7e44e99417c9819432cac49da56e3e89f394fecb8724a88a5b809b915"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "7547c5bcf3324c28d0d1822ac093aa4166ca178cf4cceb34f0ab46220e54d9cb",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bc9fc1504682f4b1c384b4e87ca4c018e17095a59a1a9e8fb1321c7784c9a8fa"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "aa322333542afc0a3a7423536f19fe13eb1d2fd678c89f54e416e13138d43359",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c21f0a225ab8d506150830a981dff4448df547725fc60d98369468b18d333c0c"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 1,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "92793dd9590d84e6014de9d0edb1a75842e04b6b7f1869e60335171ea72666e0",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c7742c73fa7dc1f917bf80591cf01bc5ccb7c5eb7bb403dd4cdbde881b17236e"
            ],
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "5e0af4284ff7b63c5f48646372ef3eadcf05c716102fd85ce07611de9c71f10c",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c81b7230982da070627493419dcbf71bca68fd5c7d116d5a85f0f38d6d89a8da"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "88f21ac00cbafc1d4714bc31156cea2622994e8808403e9a3ced91823e0546b6",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cf778814e4b542ae1ab5ee66a0eb0f55d3d5fbcdccf2004932c948e44419fa91"
            ],
            "excerpt": "104.21.3.144",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "bd09bff751372d461db758c0f31b769ec402a051a1bdfb64178470c37417ecf4",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d6952e7a90d78e2305719066051efda6ec11433fa44796bf44d9324d086c65dd"
            ],
            "excerpt": {
                "evidence": [],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "eb43a066acd71c668ded0100de7c09473d060f072e65f9ad8851188e6a3918d3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ed9fe4a7c0053506066d696b469c314c7b7ad372caefcaf79b8588574c1fa3f5"
            ],
            "excerpt": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=()"
            ],
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "99ea6e4bb447721ce517ed84a6936a99fc39b3e84bf24de259190c7c80926fe9",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ee2a151621663e49080e10327b456c70e9b0af9851008b1d5538919483fb41bd"
            ],
            "excerpt": "2606:4700:3035::6815:390",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "0872d1b0ebd14c72173185240ec91dd4bfd737a4ad1fc4a4930feb7dd8213753",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eeb8de6ba3a1206178f9e5ae5909dcb501731c142361c0e4d720c3c96aea86f5"
            ],
            "excerpt": "2026-10-20T16:23:42+00:00",
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "2316c19d8914920b97f6294ff0bda7920037c90998aed3105be0924957275c47",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f4e38396dbc76af46c95c159c96b42f4b52ddce407747cc01fe8bedaeab2c3fc"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YE1",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-07-22T16:23:43+00:00",
                    "valid_to": "2026-10-20T16:23:42+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "h3=\":443\"; ma=86400",
                    "state": "observed"
                },
                "ipv4": {
                    "addresses": [
                        "104.21.3.144",
                        "172.67.130.209"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2606:4700:3035::6815:390",
                        "2606:4700:3037::ac43:82d1"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        },
        {
            "id": "0313cd00cdc37d5ed2bef1eeb9425967c94e834e44f9e39936e72c175d5f3a91",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f6037f73e87238a9d250d1402141936e68561a05e73cc478228ca6b2692cf4c3"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-04T23:56:47+00:00",
            "last_seen_at": "2026-09-04T23:56:47+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}