{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "kerkenniens.com",
    "measured_at": "2026-09-06T02:11:41+00:00",
    "engine_version": "2.9.3",
    "pattern_version": "2026.09.4",
    "summary": [
        "3 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "8 évolutions utiles sont retenues depuis la lecture précédente.",
        "4 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 3,
        "deduced": 0,
        "to_confirm": 2,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 1
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "0e6fbfe1b13cee3f00b3b79fcbd61c6b0b33cf3ac784622609185145a635008d",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "3305f8e2ecc78dc9c904897be60288b3e2d5ccd2a4d5c999e59ca1a059c64695",
                        "db28680d60cf82ee130b82550bdec42e494fe7f5fbfaea0eb3ea9d744d570eb6",
                        "5cfc7d003dcad7cb6bf1e4f16c462049c380a1ef307cafe8306e26f71df3117c"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "6086675e1b28ccc7985e8fff7339d47a2ce55516b0e57f72db5c6dea399e6751",
                    "title": "Canary detection",
                    "value": false,
                    "state": "to_confirm",
                    "state_label": "À confirmer",
                    "evidence_ids": [
                        "1530bc634ce9ef2b49bedf1b48a8d39253658b043215f96ed0a8d55e493dea99"
                    ],
                    "rationale": "no_known_passive_signature_observed"
                },
                {
                    "id": "d5577e8ce8ff786fb6c9725cac176af5f16052e807cbf2b3ec29d448b238ad47",
                    "title": "Openpgp",
                    "value": null,
                    "state": "to_confirm",
                    "state_label": "À confirmer",
                    "evidence_ids": [
                        "57f1f801bc8cf8e0d2f2b271d489d3eec2dd5492a0eeb7262fc1fb4bb3447dcc"
                    ],
                    "rationale": "security_txt_encryption_not_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 2,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "4de4467b8e0e66609f78f63039f236cd9b1433e4de7ae193279fa58daa2e7768",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [
                        "bd20024cf918ec0a0435d2f2bf3b18d5a76bb7c532f36e31fe2fdd891d2e1a9e"
                    ],
                    "rationale": "client_capability_unavailable"
                },
                {
                    "id": "ef529324d16ae7eaf701f5853d2f36b0139d024751ec17b6190a597f673598e3",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "5f2efeb3e6b2b48e2f7ae638bfce1ca3ed59654427236f4a77ca7f32eeb8df85"
                    ],
                    "rationale": "certificate_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "459be582f929267e7823a283cee9b1d8205f30539d2f6f6b0630f3846c784682",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "82355c03ab6513a95e23228363f79dba048e21545fdd016a6ad8dfe688dd4f43"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "03f5af8632cbb5801166f409a9d27a3e9b2ab0db9f5393bfaed72f77315bab37",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:34:54+00:00",
        "last_observed_at": "2026-09-06T02:11:41+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 7,
            "modified": 1,
            "stable": 33,
            "disappeared": 0
        },
        "meaningful_change_count": 8,
        "change_summary": {
            "appeared": 7,
            "modified": 1,
            "disappeared": 0,
            "stable": 33,
            "meaningful": 8,
            "volatile_filtered": 1,
            "unresolved": 0
        },
        "changes": [
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Canary signal",
                "before": null,
                "after": {
                    "matches": [],
                    "reason": "no_known_passive_signature_observed",
                    "signature_version": "2026.09.1",
                    "state": "not_observed"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Csp evidence",
                "before": null,
                "after": {
                    "enforced": true,
                    "frame_ancestors": true,
                    "hash_present": false,
                    "nonce_present": true,
                    "object_src": true,
                    "report_only": false,
                    "reporting_endpoint": false,
                    "state": "observed",
                    "strict_dynamic": false,
                    "trusted_types": false
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Dnssec evidence",
                "before": null,
                "after": {
                    "chain_consistency": {
                        "reason": "insufficient_record_evidence",
                        "state": "untested"
                    },
                    "dnskey": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "ds": {
                        "query_supported": false,
                        "records": [],
                        "state": "untested"
                    },
                    "validation": {
                        "reason": "no_validating_resolver",
                        "state": "untested"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Mail transport evidence",
                "before": null,
                "after": {
                    "bimi": {
                        "records": [],
                        "state": "not_observed"
                    },
                    "dane_tlsa": {
                        "query_supported": false,
                        "reason": "tlsa_query_not_available",
                        "records": [],
                        "state": "untested"
                    },
                    "dkim": {
                        "reason": "no_selector_bruteforce",
                        "state": "untested"
                    },
                    "mta_sts": {
                        "policy": null,
                        "policy_state": "untested",
                        "records": [],
                        "state": "not_observed"
                    },
                    "tls_rpt": {
                        "records": [],
                        "state": "not_observed"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Modern transport evidence",
                "before": null,
                "after": {
                    "alpn": {
                        "state": "untested",
                        "value": ""
                    },
                    "certificate": {
                        "cipher": "",
                        "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                        "protocol": "",
                        "san_count": 0,
                        "state": "observed",
                        "valid_from": "2026-08-07T00:12:59+00:00",
                        "valid_to": "2026-11-05T00:12:58+00:00"
                    },
                    "http2": {
                        "negotiated": "3",
                        "state": "untested"
                    },
                    "http3_advertised": {
                        "alt_svc": "",
                        "state": "not_observed"
                    },
                    "ipv4": {
                        "addresses": [
                            "185.125.27.197"
                        ],
                        "state": "observed"
                    },
                    "ipv6": {
                        "addresses": [
                            "2001:1600::aaaa:0:0:80:5b"
                        ],
                        "state": "observed"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "modified",
                "label": "Modifié",
                "title": "Module finding",
                "before": {
                    "evidence": {
                        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "after": {
                    "evidence": {
                        "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Openpgp discovery",
                "before": null,
                "after": {
                    "dns_openpgpkey": {
                        "reason": "recipient_identity_required",
                        "state": "untested"
                    },
                    "fingerprint": null,
                    "mechanisms": [],
                    "reason": "security_txt_encryption_not_observed",
                    "state": "not_observed",
                    "wkd": {
                        "reason": "wkd_not_fetched_without_identity",
                        "state": "untested"
                    }
                },
                "direction": "indeterminate"
            },
            {
                "status": "appeared",
                "label": "Nouveau",
                "title": "Post quantum tls",
                "before": null,
                "after": {
                    "capability": {
                        "capable": false,
                        "groups": [],
                        "reason": "proc_open_unavailable"
                    },
                    "group": null,
                    "reason": "client_capability_unavailable",
                    "state": "untested"
                },
                "direction": "indeterminate"
            }
        ],
        "history_count": 2
    },
    "observations": [
        {
            "id": "0a22214e2d53b8c10a4efe8ff46c4a55d66517ef8d621b1bd64fbaae0f7df1cb",
            "type": "tls_issuer",
            "subject": "kerkenniens.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0b496f5abc6153684bed633a360ca167ea2bba6efe41968845bdf3bbf5255261",
            "type": "dns_address",
            "subject": "kerkenniens.com",
            "predicate": "resolves_to",
            "value": "185.125.27.197",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0cca5f9c9be18acd96f39a5f03af3cd5aa5413007e5f885bad6dbc5a75caf2cb",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0d04e0d6773bde3d6085bc056faad372e36d681fd91ab7f89fb622aba1bd003c",
            "type": "tls_valid_to",
            "subject": "kerkenniens.com",
            "predicate": "valid_to",
            "value": "2026-11-05T00:12:58+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "11f0d7fb5d1cc658b33377c018029e9e91c37f4e0cb3053cc163f8e7745f6b6c",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "128aa01e6eb6a12f0003766f595447fbb9adb74a0d0be0c79986a48e2835e850",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "permissions-policy",
            "value": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "12c77238f9836f9ca5beff4fd8cebffc72b3c5df2670004b25c582676c3f727e",
            "type": "dns_nameserver",
            "subject": "kerkenniens.com",
            "predicate": "uses_nameserver",
            "value": "ns41.infomaniak.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "157b2b4d8784e730fd6a342ee28c97c84bfbb7ddf5360b4809d8428c9a4cf1f7",
            "type": "openpgp_discovery",
            "subject": "kerkenniens.com",
            "predicate": "openpgp",
            "value": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "source": "advanced_openpgp",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "158c7f703c3412e1c53824bcd270d875733c8e987efcdc0636e1e7f4c3d91632",
            "type": "mail_policy_flag",
            "subject": "kerkenniens.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "2f220271d13b7a952e2201ec7cc7c6d3a2e771f1e847de120403b0f43b0e48e1",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; script-src 'self' 'nonce-UQo7PZaK4bqeUiAn8AnRBvTm'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; manifest-src 'self'"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "43e70f18cf6da66112d724cafa9a6c194ea7c6e1c803eec6bbb0f59e42fdc800",
            "type": "canary_signal",
            "subject": "kerkenniens.com",
            "predicate": "canary_detection",
            "value": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "source": "advanced_canary",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "496d3b031ce38590e7d6e8465f2af6e786c5238f79cce4e1f33367d50ee7e349",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "require-corp"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "4bdb1b32cfd41dcd6d9ed4330f69cdf71bfc97979b814277cdbec052b8a44db8",
            "type": "dnssec_evidence",
            "subject": "kerkenniens.com",
            "predicate": "dnssec_depth",
            "value": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "source": "advanced_dnssec",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "57b26e36c75e627a5f853ea6ce14224a8ebdc26ef9b94e12bc813c43e81a304e",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "5f514610cf3f7d1e9a0b97d4bdb7323b0d5cc7852a40495f1d9f66e731396485",
            "type": "modern_transport_evidence",
            "subject": "kerkenniens.com",
            "predicate": "modern_transport",
            "value": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-07T00:12:59+00:00",
                    "valid_to": "2026-11-05T00:12:58+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.197"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5b"
                    ],
                    "state": "observed"
                }
            },
            "source": "advanced_modern_transport",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "65c64ab96b53ba5a7bd330a28ffef3ec08ff06037c45e8ca4ea7e2055f102cec",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "692e204e24d9928c732913b092e071ec7a4e81a6df3d99eb9c234d7efe3fbf2f",
            "type": "spf_policy",
            "subject": "kerkenniens.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "71361c5d89db7a8cd02016099608462c5c1830e68bfa500b374c32402d5cc368",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "7376200fa09f895717d4e102ce41b32fa1917ca9461dcbc107ed01cefd7e1b38",
            "type": "csp_evidence",
            "subject": "kerkenniens.com",
            "predicate": "csp_depth",
            "value": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "source": "advanced_csp",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "7a6673b1189b0fd0d8829351f639a916bb71d913c8415249c178f493762b3484",
            "type": "post_quantum_tls",
            "subject": "kerkenniens.com",
            "predicate": "post_quantum_tls",
            "value": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "source": "advanced_post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "822bf1c0dea8b4515bb82a28753a0837c21653f219e4e2b19cd23b3b7c745295",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "84940846833241bd661925dfab8f0eabc3150d8b021cbe0720a9cc2ef548b097",
            "type": "dns_nameserver",
            "subject": "kerkenniens.com",
            "predicate": "uses_nameserver",
            "value": "ns42.infomaniak.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "88e9431c001154f71426042f53cdc02d72c2081b82a67757225b2b4784d8981d",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "dns:dmarc_missing",
            "value": {
                "evidence": null,
                "severity": "medium"
            },
            "source": "finding_dmarc_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "8fb37e92ca7cca1d84d7e338c2b1ae1ab3bc614104fe25186e42b2e7a6cdb2c3",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "96644920865ffa377f5b9bce2c78a9b26f3681b357b3f034b1c13d04222fecd5",
            "type": "mail_policy_flag",
            "subject": "kerkenniens.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9793d06186533ebc1a6c84766c137876bb94f9691a6a863b24ba10660c37678f",
            "type": "spf_record",
            "subject": "kerkenniens.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9c8e0cce40527087fba4abd65d18b2c508e55ec83dceeaa4344c11a05f480f68",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "a0e46feefb51d06dbcf8a41ce7b415ba95c5e3c1b4c040c040ff4c223689b410",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ad588e491a274310265cd52b42a009662f2d94825e978936b9c368be4c0e4948",
            "type": "mail_policy_flag",
            "subject": "kerkenniens.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "adb50ebe966b8b3dd146b2d138df74f98f5737a3b07b9307f285f15d7b542514",
            "type": "technology",
            "subject": "kerkenniens.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ade6728bfa7c0d8b26f1d44008df4cc90852fb8fb10779e21f62ad449cf1391a",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "b046e72b0c1ee9cde00f81412f7468dcb8c8d0d0426cd9b13714b08dbf48abc1",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "b9780564b3c3821027e77d5da6a87514298c2c7ae79d0962c2774c78d452f318",
            "type": "mail_exchanger",
            "subject": "kerkenniens.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c3569a34d59e59c3975802a981c513d1fd7f5244e411fca0b2b1891827924359",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c73d83444482921c08f13cb9601e612adbfa43f77020394d12975f0a001c024c",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d51c9ebc3bb7302c83ac20f4ec9c757580d09a771bb342f9e091596c9d4384c5",
            "type": "dependency_provider",
            "subject": "kerkenniens.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d793bec4ced899165a2fa90134fcb8cf1ffebd4d31ee49f5dac0b75e7a002138",
            "type": "dns_address",
            "subject": "kerkenniens.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5b",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "da1ba69db099f8e191814891a0e3c11f718d803aafacf7960857b5dc62b13542",
            "type": "mail_transport_evidence",
            "subject": "kerkenniens.com",
            "predicate": "mail_transport_depth",
            "value": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "source": "advanced_mail_transport",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f4913830d217334ec18a94177c9a3b01fd3e506e950358aa52631bf6181358c9",
            "type": "http_header",
            "subject": "kerkenniens.com",
            "predicate": "referrer-policy",
            "value": [
                "strict-origin-when-cross-origin"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "fc7bccd25c60a6aca7f5403d8c664d62918a34182c2f268daa373d6e00c6fe52",
            "type": "module_finding",
            "subject": "kerkenniens.com",
            "predicate": "mail_trust:mail_dmarc_missing",
            "value": {
                "evidence": null,
                "severity": "high"
            },
            "source": "finding_mail_dmarc_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-06T02:11:41+00:00"
        }
    ],
    "claims": [
        {
            "id": "03f5af8632cbb5801166f409a9d27a3e9b2ab0db9f5393bfaed72f77315bab37",
            "subject": "kerkenniens.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "0e6fbfe1b13cee3f00b3b79fcbd61c6b0b33cf3ac784622609185145a635008d",
            "subject": "kerkenniens.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "3305f8e2ecc78dc9c904897be60288b3e2d5ccd2a4d5c999e59ca1a059c64695",
                "db28680d60cf82ee130b82550bdec42e494fe7f5fbfaea0eb3ea9d744d570eb6",
                "5cfc7d003dcad7cb6bf1e4f16c462049c380a1ef307cafe8306e26f71df3117c"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "459be582f929267e7823a283cee9b1d8205f30539d2f6f6b0630f3846c784682",
            "subject": "kerkenniens.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "82355c03ab6513a95e23228363f79dba048e21545fdd016a6ad8dfe688dd4f43"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "4de4467b8e0e66609f78f63039f236cd9b1433e4de7ae193279fa58daa2e7768",
            "subject": "kerkenniens.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "client_capability_unavailable",
            "evidence_ids": [
                "bd20024cf918ec0a0435d2f2bf3b18d5a76bb7c532f36e31fe2fdd891d2e1a9e"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "6086675e1b28ccc7985e8fff7339d47a2ce55516b0e57f72db5c6dea399e6751",
            "subject": "kerkenniens.com",
            "predicate": "canary_detection",
            "value": false,
            "state": "to_confirm",
            "rationale": "no_known_passive_signature_observed",
            "evidence_ids": [
                "1530bc634ce9ef2b49bedf1b48a8d39253658b043215f96ed0a8d55e493dea99"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "d5577e8ce8ff786fb6c9725cac176af5f16052e807cbf2b3ec29d448b238ad47",
            "subject": "kerkenniens.com",
            "predicate": "openpgp",
            "value": null,
            "state": "to_confirm",
            "rationale": "security_txt_encryption_not_observed",
            "evidence_ids": [
                "57f1f801bc8cf8e0d2f2b271d489d3eec2dd5492a0eeb7262fc1fb4bb3447dcc"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "ef529324d16ae7eaf701f5853d2f36b0139d024751ec17b6190a597f673598e3",
            "subject": "kerkenniens.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "5f2efeb3e6b2b48e2f7ae638bfce1ca3ed59654427236f4a77ca7f32eeb8df85"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        },
        {
            "id": "ef85b5789380c0a58e09d25793656596719afc60dd8585f9b4eb82274223a092",
            "subject": "kerkenniens.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "5f2efeb3e6b2b48e2f7ae638bfce1ca3ed59654427236f4a77ca7f32eeb8df85",
            "observation_ids": [
                "0a22214e2d53b8c10a4efe8ff46c4a55d66517ef8d621b1bd64fbaae0f7df1cb"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0b8663d1531976872773f6901ce6ed3620696866f8f52635787ced51772c0313",
            "observation_ids": [
                "0b496f5abc6153684bed633a360ca167ea2bba6efe41968845bdf3bbf5255261"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d1faee394df72e23d6affa05e83bba2dcdc40d2793aa889ccd3383d370dd572f",
            "observation_ids": [
                "0cca5f9c9be18acd96f39a5f03af3cd5aa5413007e5f885bad6dbc5a75caf2cb"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0683840ea53bd87eb15390fcb53d17b601e5bb81089b0382c0989bf88018b9c5",
            "observation_ids": [
                "0d04e0d6773bde3d6085bc056faad372e36d681fd91ab7f89fb622aba1bd003c"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-05T00:12:58+00:00",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "6e5ea515e886219d942e4254eaca80cc583e8dfd0e246ef2f7c523c6b40da5e6",
            "observation_ids": [
                "11f0d7fb5d1cc658b33377c018029e9e91c37f4e0cb3053cc163f8e7745f6b6c"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "1ea81eaa7a09551d6a0dc3784351a413f8057559b29a4b4d2efb2ba92a4d4405",
            "observation_ids": [
                "128aa01e6eb6a12f0003766f595447fbb9adb74a0d0be0c79986a48e2835e850"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=()"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "3305f8e2ecc78dc9c904897be60288b3e2d5ccd2a4d5c999e59ca1a059c64695",
            "observation_ids": [
                "12c77238f9836f9ca5beff4fd8cebffc72b3c5df2670004b25c582676c3f727e"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns41.infomaniak.com",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "57f1f801bc8cf8e0d2f2b271d489d3eec2dd5492a0eeb7262fc1fb4bb3447dcc",
            "observation_ids": [
                "157b2b4d8784e730fd6a342ee28c97c84bfbb7ddf5360b4809d8428c9a4cf1f7"
            ],
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "b966120436feda796c1afd9c9e65417048bdfa868d118488f43f7acb30591c2b",
            "observation_ids": [
                "158c7f703c3412e1c53824bcd270d875733c8e987efcdc0636e1e7f4c3d91632"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "5c34b1efe4e0a348dbeab8e9e3dbca8f235a7ef946bacb12d796eddd135043f4",
            "observation_ids": [
                "2f220271d13b7a952e2201ec7cc7c6d3a2e771f1e847de120403b0f43b0e48e1"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-UQo7PZaK4bqeUiAn8AnRBvTm'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; manifest-src 'self'"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "1530bc634ce9ef2b49bedf1b48a8d39253658b043215f96ed0a8d55e493dea99",
            "observation_ids": [
                "43e70f18cf6da66112d724cafa9a6c194ea7c6e1c803eec6bbb0f59e42fdc800"
            ],
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c8965aadb286e0168bca98ad9404d81a36b979db759606f891b4ebe329408b36",
            "observation_ids": [
                "496d3b031ce38590e7d6e8465f2af6e786c5238f79cce4e1f33367d50ee7e349"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "17d68278e46c70cb92b913eb6ffeaffb12d0f6bdf699ba0117c9f77e7de1b307",
            "observation_ids": [
                "4bdb1b32cfd41dcd6d9ed4330f69cdf71bfc97979b814277cdbec052b8a44db8"
            ],
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "6adde282b55ea5ed2276f8d98879a0b4483df9b1d64d7c6bbd6af17143fd5988",
            "observation_ids": [
                "57b26e36c75e627a5f853ea6ce14224a8ebdc26ef9b94e12bc813c43e81a304e"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "12b668ac7a80fbc8452d903f4d3fd48de3d3e0ac2297aedcf4211e9d59b63a32",
            "observation_ids": [
                "5f514610cf3f7d1e9a0b97d4bdb7323b0d5cc7852a40495f1d9f66e731396485"
            ],
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-07T00:12:59+00:00",
                    "valid_to": "2026-11-05T00:12:58+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.197"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5b"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "3f4d22477c91c7139c2feca2f8522c32fee92b7532cc3115c341f7c04433598b",
            "observation_ids": [
                "65c64ab96b53ba5a7bd330a28ffef3ec08ff06037c45e8ca4ea7e2055f102cec"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "82355c03ab6513a95e23228363f79dba048e21545fdd016a6ad8dfe688dd4f43",
            "observation_ids": [
                "692e204e24d9928c732913b092e071ec7a4e81a6df3d99eb9c234d7efe3fbf2f"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "be4507f99ec3977171d1508e9dc602c1dfc8c53752f4d5af3ad5803512f8be52",
            "observation_ids": [
                "71361c5d89db7a8cd02016099608462c5c1830e68bfa500b374c32402d5cc368"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "20eba0b0ead40827a70736356d7ed5cf10c46fb6aab6e380fb6e4e766c18121c",
            "observation_ids": [
                "7376200fa09f895717d4e102ce41b32fa1917ca9461dcbc107ed01cefd7e1b38"
            ],
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "bd20024cf918ec0a0435d2f2bf3b18d5a76bb7c532f36e31fe2fdd891d2e1a9e",
            "observation_ids": [
                "7a6673b1189b0fd0d8829351f639a916bb71d913c8415249c178f493762b3484"
            ],
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9dc78808929646b2c341ffb3d45d119e8aca27be8e0ca5e8d4ce646b781e8014",
            "observation_ids": [
                "822bf1c0dea8b4515bb82a28753a0837c21653f219e4e2b19cd23b3b7c745295"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "db28680d60cf82ee130b82550bdec42e494fe7f5fbfaea0eb3ea9d744d570eb6",
            "observation_ids": [
                "84940846833241bd661925dfab8f0eabc3150d8b021cbe0720a9cc2ef548b097"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns42.infomaniak.com",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "55c91a813f320721edc07b0768464ea1667e7a865edab8a82160205f5a43bdce",
            "observation_ids": [
                "88e9431c001154f71426042f53cdc02d72c2081b82a67757225b2b4784d8981d"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d1f7bb45cfa23f39079923263ba0d06b2ba10673ec6c3cfc62bec7b7e92e5462",
            "observation_ids": [
                "8fb37e92ca7cca1d84d7e338c2b1ae1ab3bc614104fe25186e42b2e7a6cdb2c3"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d3fe5957ceed216f2723f08d3c13becdb903d41fd8bc126f5de07f2083d1eb6a",
            "observation_ids": [
                "96644920865ffa377f5b9bce2c78a9b26f3681b357b3f034b1c13d04222fecd5"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f534957f27c7aeee1c7a49f6ddab6f92744a313c4a833d9bfdbf955c397f3655",
            "observation_ids": [
                "9793d06186533ebc1a6c84766c137876bb94f9691a6a863b24ba10660c37678f"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9a5932cd1d49f952607dacd5296cf06fdb1bb138e1d61de5ef965af8c43eb333",
            "observation_ids": [
                "9c8e0cce40527087fba4abd65d18b2c508e55ec83dceeaa4344c11a05f480f68"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f7ee91298265ff878a5c700d49531e7f690cac9f57f01e598cf08a635c6054e8",
            "observation_ids": [
                "a0e46feefb51d06dbcf8a41ce7b415ba95c5e3c1b4c040c040ff4c223689b410"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f7bdc573412845c2931ddcf32c0ef1360e123b8f772528b43c1b85983732109b",
            "observation_ids": [
                "ad588e491a274310265cd52b42a009662f2d94825e978936b9c368be4c0e4948"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "26e1f05436ec9fcc2750945ddd5114ffc0a1520710c980dea17751022c5ef0fd",
            "observation_ids": [
                "adb50ebe966b8b3dd146b2d138df74f98f5737a3b07b9307f285f15d7b542514"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ec04fcdc5bc44b9300c0119f770b275214c0ae6667ad3a6f581c97cf55a9e70d",
            "observation_ids": [
                "ade6728bfa7c0d8b26f1d44008df4cc90852fb8fb10779e21f62ad449cf1391a"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "aa3925200641e722fc53bed83fe1520307018839192ce4b4be8198ec8bbc1805",
            "observation_ids": [
                "b046e72b0c1ee9cde00f81412f7468dcb8c8d0d0426cd9b13714b08dbf48abc1"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f0d9e70609155fb3e090f3a74d9ee386c7a1fa2476cb7e24e3d73caeeb86b47a",
            "observation_ids": [
                "b9780564b3c3821027e77d5da6a87514298c2c7ae79d0962c2774c78d452f318"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "e13a858123266e1a0fade39982fe99c875a0c5e7ea0278a00e823b0b24cf49fd",
            "observation_ids": [
                "c3569a34d59e59c3975802a981c513d1fd7f5244e411fca0b2b1891827924359"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c2681925348a08deb0e714001582155a35f94dec31c83afe59cc3d430cae65fd",
            "observation_ids": [
                "c73d83444482921c08f13cb9601e612adbfa43f77020394d12975f0a001c024c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "5cfc7d003dcad7cb6bf1e4f16c462049c380a1ef307cafe8306e26f71df3117c",
            "observation_ids": [
                "d51c9ebc3bb7302c83ac20f4ec9c757580d09a771bb342f9e091596c9d4384c5"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "cabe53b1bd9a9fe94e8002839a5962af397fa28d6c1e4a4181f3eb48d2af8580",
            "observation_ids": [
                "d793bec4ced899165a2fa90134fcb8cf1ffebd4d31ee49f5dac0b75e7a002138"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ee48981db0739b07cfaad796e70ee9f22db968bad967177f29887ea0ed1f9db9",
            "observation_ids": [
                "da1ba69db099f8e191814891a0e3c11f718d803aafacf7960857b5dc62b13542"
            ],
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "81c7edd53e1e5be0d6ee3ab1d75499235b9cbf74d3018e6310cbf58114d6b86d",
            "observation_ids": [
                "f4913830d217334ec18a94177c9a3b01fd3e506e950358aa52631bf6181358c9"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "afcc289968c3d321083d8fcbddec61a721f0b2b32f369ebd2a0efcec173cc5ca",
            "observation_ids": [
                "fc7bccd25c60a6aca7f5403d8c664d62918a34182c2f268daa373d6e00c6fe52"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "c908518a05f01cded7c79ecdb51a731595cc50c0f3de3acc40d821a0828fa70f"
}