{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.9.3",
    "pattern_version": "2026.09.4",
    "scan_id": "0e2c5ca490fc98b48977331d",
    "domain": "kerkenniens.com",
    "scanned_at": "2026-09-06T02:11:41+00:00",
    "evidence_count": 40,
    "evidence": [
        {
            "id": "5f2efeb3e6b2b48e2f7ae638bfce1ca3ed59654427236f4a77ca7f32eeb8df85",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0a22214e2d53b8c10a4efe8ff46c4a55d66517ef8d621b1bd64fbaae0f7df1cb"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0b8663d1531976872773f6901ce6ed3620696866f8f52635787ced51772c0313",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0b496f5abc6153684bed633a360ca167ea2bba6efe41968845bdf3bbf5255261"
            ],
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d1faee394df72e23d6affa05e83bba2dcdc40d2793aa889ccd3383d370dd572f",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0cca5f9c9be18acd96f39a5f03af3cd5aa5413007e5f885bad6dbc5a75caf2cb"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "0683840ea53bd87eb15390fcb53d17b601e5bb81089b0382c0989bf88018b9c5",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0d04e0d6773bde3d6085bc056faad372e36d681fd91ab7f89fb622aba1bd003c"
            ],
            "excerpt": "2026-11-05T00:12:58+00:00",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "6e5ea515e886219d942e4254eaca80cc583e8dfd0e246ef2f7c523c6b40da5e6",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "11f0d7fb5d1cc658b33377c018029e9e91c37f4e0cb3053cc163f8e7745f6b6c"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "1ea81eaa7a09551d6a0dc3784351a413f8057559b29a4b4d2efb2ba92a4d4405",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "128aa01e6eb6a12f0003766f595447fbb9adb74a0d0be0c79986a48e2835e850"
            ],
            "excerpt": [
                "camera=(), microphone=(), geolocation=(), payment=(), usb=(), browsing-topics=()"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "3305f8e2ecc78dc9c904897be60288b3e2d5ccd2a4d5c999e59ca1a059c64695",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "12c77238f9836f9ca5beff4fd8cebffc72b3c5df2670004b25c582676c3f727e"
            ],
            "excerpt": "ns41.infomaniak.com",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "57f1f801bc8cf8e0d2f2b271d489d3eec2dd5492a0eeb7262fc1fb4bb3447dcc",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "157b2b4d8784e730fd6a342ee28c97c84bfbb7ddf5360b4809d8428c9a4cf1f7"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "b966120436feda796c1afd9c9e65417048bdfa868d118488f43f7acb30591c2b",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "158c7f703c3412e1c53824bcd270d875733c8e987efcdc0636e1e7f4c3d91632"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "5c34b1efe4e0a348dbeab8e9e3dbca8f235a7ef946bacb12d796eddd135043f4",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2f220271d13b7a952e2201ec7cc7c6d3a2e771f1e847de120403b0f43b0e48e1"
            ],
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-UQo7PZaK4bqeUiAn8AnRBvTm'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; manifest-src 'self'"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "1530bc634ce9ef2b49bedf1b48a8d39253658b043215f96ed0a8d55e493dea99",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "43e70f18cf6da66112d724cafa9a6c194ea7c6e1c803eec6bbb0f59e42fdc800"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c8965aadb286e0168bca98ad9404d81a36b979db759606f891b4ebe329408b36",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "496d3b031ce38590e7d6e8465f2af6e786c5238f79cce4e1f33367d50ee7e349"
            ],
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "17d68278e46c70cb92b913eb6ffeaffb12d0f6bdf699ba0117c9f77e7de1b307",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4bdb1b32cfd41dcd6d9ed4330f69cdf71bfc97979b814277cdbec052b8a44db8"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "6adde282b55ea5ed2276f8d98879a0b4483df9b1d64d7c6bbd6af17143fd5988",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "57b26e36c75e627a5f853ea6ce14224a8ebdc26ef9b94e12bc813c43e81a304e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "12b668ac7a80fbc8452d903f4d3fd48de3d3e0ac2297aedcf4211e9d59b63a32",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5f514610cf3f7d1e9a0b97d4bdb7323b0d5cc7852a40495f1d9f66e731396485"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-07T00:12:59+00:00",
                    "valid_to": "2026-11-05T00:12:58+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.197"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5b"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "3f4d22477c91c7139c2feca2f8522c32fee92b7532cc3115c341f7c04433598b",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "65c64ab96b53ba5a7bd330a28ffef3ec08ff06037c45e8ca4ea7e2055f102cec"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "82355c03ab6513a95e23228363f79dba048e21545fdd016a6ad8dfe688dd4f43",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "692e204e24d9928c732913b092e071ec7a4e81a6df3d99eb9c234d7efe3fbf2f"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "be4507f99ec3977171d1508e9dc602c1dfc8c53752f4d5af3ad5803512f8be52",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "71361c5d89db7a8cd02016099608462c5c1830e68bfa500b374c32402d5cc368"
            ],
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "20eba0b0ead40827a70736356d7ed5cf10c46fb6aab6e380fb6e4e766c18121c",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7376200fa09f895717d4e102ce41b32fa1917ca9461dcbc107ed01cefd7e1b38"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "bd20024cf918ec0a0435d2f2bf3b18d5a76bb7c532f36e31fe2fdd891d2e1a9e",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7a6673b1189b0fd0d8829351f639a916bb71d913c8415249c178f493762b3484"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9dc78808929646b2c341ffb3d45d119e8aca27be8e0ca5e8d4ce646b781e8014",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "822bf1c0dea8b4515bb82a28753a0837c21653f219e4e2b19cd23b3b7c745295"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "db28680d60cf82ee130b82550bdec42e494fe7f5fbfaea0eb3ea9d744d570eb6",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "84940846833241bd661925dfab8f0eabc3150d8b021cbe0720a9cc2ef548b097"
            ],
            "excerpt": "ns42.infomaniak.com",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "55c91a813f320721edc07b0768464ea1667e7a865edab8a82160205f5a43bdce",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "88e9431c001154f71426042f53cdc02d72c2081b82a67757225b2b4784d8981d"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d1f7bb45cfa23f39079923263ba0d06b2ba10673ec6c3cfc62bec7b7e92e5462",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8fb37e92ca7cca1d84d7e338c2b1ae1ab3bc614104fe25186e42b2e7a6cdb2c3"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "d3fe5957ceed216f2723f08d3c13becdb903d41fd8bc126f5de07f2083d1eb6a",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "96644920865ffa377f5b9bce2c78a9b26f3681b357b3f034b1c13d04222fecd5"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f534957f27c7aeee1c7a49f6ddab6f92744a313c4a833d9bfdbf955c397f3655",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9793d06186533ebc1a6c84766c137876bb94f9691a6a863b24ba10660c37678f"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "9a5932cd1d49f952607dacd5296cf06fdb1bb138e1d61de5ef965af8c43eb333",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9c8e0cce40527087fba4abd65d18b2c508e55ec83dceeaa4344c11a05f480f68"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f7ee91298265ff878a5c700d49531e7f690cac9f57f01e598cf08a635c6054e8",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a0e46feefb51d06dbcf8a41ce7b415ba95c5e3c1b4c040c040ff4c223689b410"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f7bdc573412845c2931ddcf32c0ef1360e123b8f772528b43c1b85983732109b",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ad588e491a274310265cd52b42a009662f2d94825e978936b9c368be4c0e4948"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "26e1f05436ec9fcc2750945ddd5114ffc0a1520710c980dea17751022c5ef0fd",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "adb50ebe966b8b3dd146b2d138df74f98f5737a3b07b9307f285f15d7b542514"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ec04fcdc5bc44b9300c0119f770b275214c0ae6667ad3a6f581c97cf55a9e70d",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ade6728bfa7c0d8b26f1d44008df4cc90852fb8fb10779e21f62ad449cf1391a"
            ],
            "excerpt": {
                "evidence": [
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "aa3925200641e722fc53bed83fe1520307018839192ce4b4be8198ec8bbc1805",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b046e72b0c1ee9cde00f81412f7468dcb8c8d0d0426cd9b13714b08dbf48abc1"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "f0d9e70609155fb3e090f3a74d9ee386c7a1fa2476cb7e24e3d73caeeb86b47a",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b9780564b3c3821027e77d5da6a87514298c2c7ae79d0962c2774c78d452f318"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "e13a858123266e1a0fade39982fe99c875a0c5e7ea0278a00e823b0b24cf49fd",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c3569a34d59e59c3975802a981c513d1fd7f5244e411fca0b2b1891827924359"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "c2681925348a08deb0e714001582155a35f94dec31c83afe59cc3d430cae65fd",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c73d83444482921c08f13cb9601e612adbfa43f77020394d12975f0a001c024c"
            ],
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "5cfc7d003dcad7cb6bf1e4f16c462049c380a1ef307cafe8306e26f71df3117c",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d51c9ebc3bb7302c83ac20f4ec9c757580d09a771bb342f9e091596c9d4384c5"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns41.infomaniak.com",
                    "ns42.infomaniak.com"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "cabe53b1bd9a9fe94e8002839a5962af397fa28d6c1e4a4181f3eb48d2af8580",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d793bec4ced899165a2fa90134fcb8cf1ffebd4d31ee49f5dac0b75e7a002138"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "ee48981db0739b07cfaad796e70ee9f22db968bad967177f29887ea0ed1f9db9",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "da1ba69db099f8e191814891a0e3c11f718d803aafacf7960857b5dc62b13542"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "81c7edd53e1e5be0d6ee3ab1d75499235b9cbf74d3018e6310cbf58114d6b86d",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f4913830d217334ec18a94177c9a3b01fd3e506e950358aa52631bf6181358c9"
            ],
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        },
        {
            "id": "afcc289968c3d321083d8fcbddec61a721f0b2b32f369ebd2a0efcec173cc5ca",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fc7bccd25c60a6aca7f5403d8c664d62918a34182c2f268daa373d6e00c6fe52"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-09-06T02:11:41+00:00",
            "last_seen_at": "2026-09-06T02:11:41+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}