{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "koperateur.com",
    "measured_at": "2026-09-04T12:36:40+00:00",
    "engine_version": "2.5.1",
    "pattern_version": "2026.09.4",
    "summary": [
        "6 observations publiques sont documentées dans ce dossier.",
        "3 dépendances publiques structurantes sont visibles.",
        "Aucune évolution utile n’est retenue depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 6,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "37682b7bb25f106527a3ca231c5af3b3e64b7f936aa8b7b05c9654217c3fce9e",
                    "title": "Depends on provider",
                    "value": "Cloudflare",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac",
                        "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979",
                        "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "573ed9f25ea9e49356e67572a0b390ede1a60a34d67d57941f2408e08f9beb2e",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "c2e7ce9004cdc89b252f07c9408c84980c8d1637b5103e182ed206f29031e76f",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "219faf6dae8e45991c66ebc316dc06b8927881e41529d69ba5aff923d3a11a58",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YE2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "a578071a0dee2865b7600d44c6738dc477b367d0d801292fbb88ff5e3b3d369d",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "0288934bf54857db8d4fb2ab594ce2a1cab424dc6972ea1d07b3d13ad066be11",
                    "title": "Dmarc policy",
                    "value": "quarantine",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "bf75249d62b111805545da810cadc7a0ba34d478b9dbb073247de28710cb2d44",
                    "title": "Spf policy",
                    "value": "softfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "4c11046ce67cfb758aaf0d32bce513f9a071ddd80fc0f35dcb7c0ee0234a2b78",
                    "title": "Depends on provider",
                    "value": "mailsec.protonmail.ch",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40"
                    ],
                    "rationale": "provider_observed_once"
                },
                {
                    "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                },
                {
                    "id": "9b12f4ce9965092ad7e5019cd689d7c6cdc993b266a85e6a387d9ca9e0ca7163",
                    "title": "Depends on provider",
                    "value": "mail.protonmail.ch",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161"
                    ],
                    "rationale": "provider_observed_once"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T12:36:40+00:00",
        "last_observed_at": "2026-09-04T12:36:40+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "changes": [],
        "history_count": 1
    },
    "observations": [
        {
            "id": "0aaeeb34a50afb0337978f150e81b4a3a5c794259604e062f5a66a3640f6703c",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "12122f28da50bca98b94c0a968c45b9f9cf2d1a68eb13387b650dfcb80596519",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "147cec655efe8198783c12f714c8db635fba34c2d09231fb1a194329b73cd33e",
            "type": "mail_policy_flag",
            "subject": "koperateur.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "153959bb8517f4787abd9a97d44759adeec1183ea2aa5524b61768edb4691e5b",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "server",
            "value": [
                "cloudflare"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "23d0240ab2f025523b620c19cafc959e28d45f398420febf36f9a04ca018b930",
            "type": "dependency_provider",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": false,
                "hosts": [
                    "mail.protonmail.ch"
                ],
                "id": "host-d87c7268dbc2",
                "known": false,
                "name": "mail.protonmail.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "26adaa68ad9bdd57270ff7da4294f50eed8a86f07fc89b7094817d79c9130ef3",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "2cd8527f1c7ee423f3400700e87f89b8b0175740c8e105f52ce1217121500ff7",
            "type": "dmarc_policy",
            "subject": "koperateur.com",
            "predicate": "dmarc_policy",
            "value": "quarantine",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "2f4fd943c7dedd4060f7c342d8fc0c42a388ac891ae388c4b6094e267d40250a",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "3288678d34277d0cf973d1633d62ff9a6b376fd3143407637df4f9aa02d9084a",
            "type": "tls_valid_to",
            "subject": "koperateur.com",
            "predicate": "valid_to",
            "value": "2026-11-14T18:09:19+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "3b0064d4294ebb03ac9e7281c1605f23fd919d52caca39cbc5c45d2b856311df",
            "type": "dependency_provider",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "3e6687ef1582879be16cc6981d6a93f7a40d8892e985e75fad91d0c83abd1d7c",
            "type": "dns_address",
            "subject": "koperateur.com",
            "predicate": "resolves_to",
            "value": "172.67.182.192",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "3fbedc4f52fe0fff38fcef25ed37b9df39be1d6ea73ce983884e2ef7a3230d09",
            "type": "dmarc_record",
            "subject": "koperateur.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=quarantine",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "4198be99a22412819d63f1db861078e3cb51025634712068c54ef2794e8a8bf4",
            "type": "mail_policy_flag",
            "subject": "koperateur.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "45a2fff912dc3e36ddf5fa5ad0993492212cc538f19130ee50b2bf5266cb57af",
            "type": "dns_address",
            "subject": "koperateur.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3032::6815:12a6",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "4a56fa08f54258c292f83b3c71e7d5ea68435a144189ebd5bb7f217edcfab917",
            "type": "mail_policy_flag",
            "subject": "koperateur.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "5314bf6fe1b9e2c4f81fe81b4f48aff3aacadf166bc87e7b9491bfff629db293",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "62d07c27fd88e1c4e5e9ff418aa31c4f2449c7ea5d8af0da8de6bbefb21284ae",
            "type": "dns_address",
            "subject": "koperateur.com",
            "predicate": "resolves_to",
            "value": "104.21.18.166",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "65460c3298211277c41cf40a522249a1b521d72fa4a9fbfda820824cee47e213",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "sovereignty:jurisdiction_unknown",
            "value": {
                "evidence": [
                    "mail.protonmail.ch",
                    "mailsec.protonmail.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_jurisdiction_unknown",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "7379d30e396b53cd6b432240b7f216d43e356f3fe851319869c384977256c934",
            "type": "technology",
            "subject": "koperateur.com",
            "predicate": "uses_technology",
            "value": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "73e18ac556ef9cebd5dc19cad1eccc2927952716464b8529bbadda252106a554",
            "type": "dns_nameserver",
            "subject": "koperateur.com",
            "predicate": "uses_nameserver",
            "value": "thea.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "74b317134bb05e2b631f8f80ba18762a8f39c68ca39671638e5da62474336991",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "referrer-policy",
            "value": [
                "strict-origin-when-cross-origin"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "7667709d5acd0aaeb928a7b9efb17dd871c832715fbb4fecd221d85b65ccf7b8",
            "type": "dns_address",
            "subject": "koperateur.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3031::ac43:b6c0",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "7ad34b6dc95a3dd4ad536df97358b3970426d5053a86de5f56f29a7fe93f6d84",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "84bae46b30b2c6ff4f28fee83febd9c68b2e645d9d512346a62024d4ef1fd8c7",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "888e3b22ce835091be2cdc7e1eeefe8fdcaa73253c8c6db0a5ef65e959c844b1",
            "type": "spf_record",
            "subject": "koperateur.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:_spf.protonmail.ch ~all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "8fddb7d2d3b22b811d765804c8c0ac7005368993d4f3fc1e7bc542c7557511db",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "dependencies:unknown_dependencies",
            "value": {
                "evidence": [
                    "mail.protonmail.ch",
                    "mailsec.protonmail.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_unknown_dependencies",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "973030585e95ee113159492205fa962c124149682a5e5ee15e25981ded21d8f2",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "require-corp"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "9a5d77c9478462279ba8106328aec7a2f6c4e8aed1b92f02261406462df3a00b",
            "type": "cookie",
            "subject": "koperateur.com",
            "predicate": "sets_cookie",
            "value": {
                "http_only": true,
                "name": "kop_lang",
                "same_site": "strict",
                "secure": true
            },
            "source": "privacy_cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "a4dfb5f1e56ede6310d5221839f026cb442fab9bc8562f468c03aef223894ccc",
            "type": "mail_exchanger",
            "subject": "koperateur.com",
            "predicate": "uses_mail_exchanger",
            "value": "mailsec.protonmail.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "bc3e9c26724c08a7280d88371e163cee489184e5d58c646ab217ced74f56e392",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "beb2be6aded1248d95cead6b502a950e79ed3b1ec23105bec8e8a4a4eb8929fb",
            "type": "tls_issuer",
            "subject": "koperateur.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "c40acf1b1b2a81da77ff2ae215fb0c61783b0178af7ba2dd84262f8b8a57a15c",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "c82ed014f4a15c9a3082b877cfb9963b11c383d4adaf0fdfa543820582a3f486",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "c8bc92a8d560b04b9be4be8009fc1ecdf5eb08869269ea805f3457633e9187cd",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "d376ffa507c24143874dfe818ed66ddbfa5c6a74f283bc77164ec4fdacdd01f7",
            "type": "dependency_provider",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": false,
                "hosts": [
                    "mailsec.protonmail.ch"
                ],
                "id": "host-795bfed2e90f",
                "known": false,
                "name": "mailsec.protonmail.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "dacdfe0977167e70f3a96c694c9844d23366765862a70a672c3b1576d4cd6603",
            "type": "spf_policy",
            "subject": "koperateur.com",
            "predicate": "spf_policy",
            "value": "softfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "dadeca8c6bc1ea9d7618bfe70b9fbc96764c4dd7d79185d7ae4f07b9712b264b",
            "type": "mail_exchanger",
            "subject": "koperateur.com",
            "predicate": "uses_mail_exchanger",
            "value": "mail.protonmail.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e27f49918cc375af20096928e62c0faa63f78c4b6139633bafa642d7c4b580de",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "sovereignty:outside_europe",
            "value": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "source": "finding_outside_europe",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e7852629fc87307c18a1ded64dea314b571b80196b10b81399cb187e8c31664c",
            "type": "module_finding",
            "subject": "koperateur.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "ef92d3136c728887e25dd8dd66cb63b313548943d4ad4ccfd80875197896b524",
            "type": "dns_nameserver",
            "subject": "koperateur.com",
            "predicate": "uses_nameserver",
            "value": "david.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "fbd1c2f2c5068b7d789a75ec52ae80341dc128e143443f38b4474787281cbcdb",
            "type": "http_header",
            "subject": "koperateur.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; script-src 'nonce-miFD3pcpAp7z6uLYfNQVbg==' 'strict-dynamic'; style-src 'self' 'nonce-miFD3pcpAp7z6uLYfNQVbg=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T12:36:40+00:00"
        }
    ],
    "claims": [
        {
            "id": "0288934bf54857db8d4fb2ab594ce2a1cab424dc6972ea1d07b3d13ad066be11",
            "subject": "koperateur.com",
            "predicate": "dmarc_policy",
            "value": "quarantine",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "219faf6dae8e45991c66ebc316dc06b8927881e41529d69ba5aff923d3a11a58",
            "subject": "koperateur.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "37682b7bb25f106527a3ca231c5af3b3e64b7f936aa8b7b05c9654217c3fce9e",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": "Cloudflare",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac",
                "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979",
                "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "4c11046ce67cfb758aaf0d32bce513f9a071ddd80fc0f35dcb7c0ee0234a2b78",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": "mailsec.protonmail.ch",
            "state": "observed",
            "rationale": "provider_observed_once",
            "evidence_ids": [
                "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "573ed9f25ea9e49356e67572a0b390ede1a60a34d67d57941f2408e08f9beb2e",
            "subject": "koperateur.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "973b1da5680770c36a40123c43f8a53bcf4cf0fe798ade9a4167a0cb3f1e87cf",
            "subject": "koperateur.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "9b12f4ce9965092ad7e5019cd689d7c6cdc993b266a85e6a387d9ca9e0ca7163",
            "subject": "koperateur.com",
            "predicate": "depends_on_provider",
            "value": "mail.protonmail.ch",
            "state": "observed",
            "rationale": "provider_observed_once",
            "evidence_ids": [
                "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "a578071a0dee2865b7600d44c6738dc477b367d0d801292fbb88ff5e3b3d369d",
            "subject": "koperateur.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "bf75249d62b111805545da810cadc7a0ba34d478b9dbb073247de28710cb2d44",
            "subject": "koperateur.com",
            "predicate": "spf_policy",
            "value": "softfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        },
        {
            "id": "c2e7ce9004cdc89b252f07c9408c84980c8d1637b5103e182ed206f29031e76f",
            "subject": "koperateur.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "9e522881db02d698a81feca18e41ef7f5f10553fcd84ac006825b66d47bb487d",
            "observation_ids": [
                "0aaeeb34a50afb0337978f150e81b4a3a5c794259604e062f5a66a3640f6703c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e96a5f0706b6aa901fb6e64e944d8f4977fa9563f2ac16536a58d8e10f216593",
            "observation_ids": [
                "12122f28da50bca98b94c0a968c45b9f9cf2d1a68eb13387b650dfcb80596519"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e2e3d580bb168e0a5d1adeda32b5076552f09ad33858fdcaf9a88d90cf284115",
            "observation_ids": [
                "147cec655efe8198783c12f714c8db635fba34c2d09231fb1a194329b73cd33e"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e88b9310b49920cba6ec60661d60eaab0d9f6dd8446ab425d67fecb59a9c98ca",
            "observation_ids": [
                "153959bb8517f4787abd9a97d44759adeec1183ea2aa5524b61768edb4691e5b"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "327333cf78a603d15b5747716c324b5d3a5235eb966e0f4a86850fdf32401161",
            "observation_ids": [
                "23d0240ab2f025523b620c19cafc959e28d45f398420febf36f9a04ca018b930"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mail.protonmail.ch"
                ],
                "id": "host-d87c7268dbc2",
                "known": false,
                "name": "mail.protonmail.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "fa4ba54f253ce0c8b0d41a4646e96707f171d3eb93807f73442b074098a9075d",
            "observation_ids": [
                "26adaa68ad9bdd57270ff7da4294f50eed8a86f07fc89b7094817d79c9130ef3"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "fc831c1e4054fedbf8729bb19082508f4e0c5774a8ea9c7a283d36a8088622d3",
            "observation_ids": [
                "2cd8527f1c7ee423f3400700e87f89b8b0175740c8e105f52ce1217121500ff7"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "quarantine",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "47931ebf44efdadbd76a3e50c2cd7cc5d1eca481fd4daced04363885fb6f9fdf",
            "observation_ids": [
                "2f4fd943c7dedd4060f7c342d8fc0c42a388ac891ae388c4b6094e267d40250a"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "9e696184e69f243b0530c8cda73b5248f862c2642d023a90cc51a59621bb43cf",
            "observation_ids": [
                "3288678d34277d0cf973d1633d62ff9a6b376fd3143407637df4f9aa02d9084a"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-14T18:09:19+00:00",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "cfe5c446492810f8aa27417f3a4f89c42983e0e6924f6a4392f9b78e3a1e7cac",
            "observation_ids": [
                "3b0064d4294ebb03ac9e7281c1605f23fd919d52caca39cbc5c45d2b856311df"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "20d02003850a7f7a66ed835cfc35a1a7254d1a53dfcb8f9931fb482241a25a46",
            "observation_ids": [
                "3e6687ef1582879be16cc6981d6a93f7a40d8892e985e75fad91d0c83abd1d7c"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "172.67.182.192",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "f8ee1ee15b6a6d63c30edd1c010f032b335573d749b9a96a984b06a3047ad101",
            "observation_ids": [
                "3fbedc4f52fe0fff38fcef25ed37b9df39be1d6ea73ce983884e2ef7a3230d09"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=quarantine",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "bed6ce4662d60187ce4d027423d7d4841dc87ed606920fc795a8f6ded1cb8633",
            "observation_ids": [
                "4198be99a22412819d63f1db861078e3cb51025634712068c54ef2794e8a8bf4"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "601673b6035e77d795d4f1f09f7a86064b45a2a3f197b912893e326d8dee5fdb",
            "observation_ids": [
                "45a2fff912dc3e36ddf5fa5ad0993492212cc538f19130ee50b2bf5266cb57af"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3032::6815:12a6",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "180db483b973a3d95ba0f441c66d3e66ebde4336b9f7a55953a7c79746eb4ccd",
            "observation_ids": [
                "4a56fa08f54258c292f83b3c71e7d5ea68435a144189ebd5bb7f217edcfab917"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "be11843b5f75867a76573afb80f207f7e5ce864fd841bb3f1dc049db70c6db65",
            "observation_ids": [
                "5314bf6fe1b9e2c4f81fe81b4f48aff3aacadf166bc87e7b9491bfff629db293"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "807735673bc55952f1edace58ef00a9249092202535cdc8077c2c01a8a2e7583",
            "observation_ids": [
                "62d07c27fd88e1c4e5e9ff418aa31c4f2449c7ea5d8af0da8de6bbefb21284ae"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "104.21.18.166",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "c0ce6bc3d8a83f2280fcfdcbaec9a1795da3f57e5db1e44c5dfb0dd15f66b3a3",
            "observation_ids": [
                "65460c3298211277c41cf40a522249a1b521d72fa4a9fbfda820824cee47e213"
            ],
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "mail.protonmail.ch",
                    "mailsec.protonmail.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "30d41cdcd4587277c7bdd8bc2ff44332d5b0d07bbbe3c9d4ebe4a08652957508",
            "observation_ids": [
                "7379d30e396b53cd6b432240b7f216d43e356f3fe851319869c384977256c934"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "9df779d617943404989ef568bf16965595d2169fb366987b5e1187bf3ac50979",
            "observation_ids": [
                "73e18ac556ef9cebd5dc19cad1eccc2927952716464b8529bbadda252106a554"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "thea.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "6ec3200db21f245623cfbb911d69707f72435d417c3eca1c354225efbdc3247e",
            "observation_ids": [
                "74b317134bb05e2b631f8f80ba18762a8f39c68ca39671638e5da62474336991"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "strict-origin-when-cross-origin"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "4a2551ad69ebd25a0b78b4450a9b016824481f5987de07ffdec66c01e2c6ff74",
            "observation_ids": [
                "7667709d5acd0aaeb928a7b9efb17dd871c832715fbb4fecd221d85b65ccf7b8"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3031::ac43:b6c0",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "11bfb3e74a62ef368ad26a89eb7ea3540e5d0a67f8f341ed996e3dbd58f751a2",
            "observation_ids": [
                "7ad34b6dc95a3dd4ad536df97358b3970426d5053a86de5f56f29a7fe93f6d84"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e3b33a865092e51e2a5b6d7a2f6d0bedf6ffd82b3ba5d610bf7199df76b28f5d",
            "observation_ids": [
                "84bae46b30b2c6ff4f28fee83febd9c68b2e645d9d512346a62024d4ef1fd8c7"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "56ef91218f9301d9daea6f4cc3a197d8176fc1acf12ee30cf118c05c75142310",
            "observation_ids": [
                "888e3b22ce835091be2cdc7e1eeefe8fdcaa73253c8c6db0a5ef65e959c844b1"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:_spf.protonmail.ch ~all",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e43d9458950959cbd9bf0cdec69c675b3e5267fada052531b1669926de849dbf",
            "observation_ids": [
                "8fddb7d2d3b22b811d765804c8c0ac7005368993d4f3fc1e7bc542c7557511db"
            ],
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "mail.protonmail.ch",
                    "mailsec.protonmail.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "4ac2335f6f0140d4ba2c2764678bf6d7aab2aea4bd32842fda118fcab90b4c53",
            "observation_ids": [
                "973030585e95ee113159492205fa962c124149682a5e5ee15e25981ded21d8f2"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "e529b11141a57da498701c2ae23a1b7335b2ee8846cdabb03e9e360c6ce57f09",
            "observation_ids": [
                "9a5d77c9478462279ba8106328aec7a2f6c4e8aed1b92f02261406462df3a00b"
            ],
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "excerpt": {
                "http_only": true,
                "name": "kop_lang",
                "same_site": "strict",
                "secure": true
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "586cc29afd1d2f565bda2ee06546b6ada9eb19e69a15d024ef484abd8094cac4",
            "observation_ids": [
                "a4dfb5f1e56ede6310d5221839f026cb442fab9bc8562f468c03aef223894ccc"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mailsec.protonmail.ch",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "9846a919ebe56476ee6a67844a56486f2d3de8cc3a25b7cb3d812fbea497de5a",
            "observation_ids": [
                "bc3e9c26724c08a7280d88371e163cee489184e5d58c646ab217ced74f56e392"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "3d89728a0b9250859c5e9226996521679ddee416c80075e43c2f5392a276a166",
            "observation_ids": [
                "beb2be6aded1248d95cead6b502a950e79ed3b1ec23105bec8e8a4a4eb8929fb"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YE2",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "90210d8dc4e84b0eef6614179f1493f3ba80d0293e87a2975267c0d40dbc1152",
            "observation_ids": [
                "c40acf1b1b2a81da77ff2ae215fb0c61783b0178af7ba2dd84262f8b8a57a15c"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "2eee442974fd20f86510dfe3b97b543650318e967e3998e0c3d5e3dbb78f4799",
            "observation_ids": [
                "c82ed014f4a15c9a3082b877cfb9963b11c383d4adaf0fdfa543820582a3f486"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "101442bcbb655db69755c542ecd1d9f2a5615c5f5648ca6062af8e0c3bc9a27f",
            "observation_ids": [
                "c8bc92a8d560b04b9be4be8009fc1ecdf5eb08869269ea805f3457633e9187cd"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "cd16e7c5c8949377bd252fd8c88995166259b718fece3834353b91c7fb02df40",
            "observation_ids": [
                "d376ffa507c24143874dfe818ed66ddbfa5c6a74f283bc77164ec4fdacdd01f7"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mailsec.protonmail.ch"
                ],
                "id": "host-795bfed2e90f",
                "known": false,
                "name": "mailsec.protonmail.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "8995de9ec6179be245ad10a991140c34a8022cb0e4692266d5b384411a9b531d",
            "observation_ids": [
                "dacdfe0977167e70f3a96c694c9844d23366765862a70a672c3b1576d4cd6603"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "softfail",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "47ad219f7e6763d2f460d0a4ab10401ee3e295a2ad4b6dc30484daeb52e0ec4f",
            "observation_ids": [
                "dadeca8c6bc1ea9d7618bfe70b9fbc96764c4dd7d79185d7ae4f07b9712b264b"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mail.protonmail.ch",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "0c5dc11a182892af697bdf0ed6ed8d615ac52c424a30c78638b9a5de1d28d832",
            "observation_ids": [
                "e27f49918cc375af20096928e62c0faa63f78c4b6139633bafa642d7c4b580de"
            ],
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "864c5a1c7cd3c379c20194695a937b5d758013649a650b9099bfa2e7c018ad26",
            "observation_ids": [
                "e7852629fc87307c18a1ded64dea314b571b80196b10b81399cb187e8c31664c"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "david.ns.cloudflare.com",
                    "thea.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "9cc6396ee04b23b878b70e6b17fb77db3382d14015a14224d4b80e7f0e89736f",
            "observation_ids": [
                "ef92d3136c728887e25dd8dd66cb63b313548943d4ad4ccfd80875197896b524"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "david.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        },
        {
            "id": "909644e7437c6dc1c5ef5990ee8b9c53f15183d9f033d70b18d7aa41fc1b063b",
            "observation_ids": [
                "fbd1c2f2c5068b7d789a75ec52ae80341dc128e143443f38b4474787281cbcdb"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; script-src 'nonce-miFD3pcpAp7z6uLYfNQVbg==' 'strict-dynamic'; style-src 'self' 'nonce-miFD3pcpAp7z6uLYfNQVbg=='; img-src 'self' data:; font-src 'self'; connect-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; manifest-src 'self'"
            ],
            "first_seen_at": "2026-09-04T12:36:40+00:00",
            "last_seen_at": "2026-09-04T12:36:40+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "98c3505838315a7794882ace43c0f70eaf1043d69cbce3bad445aff378277467"
}