{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "3.0.0-rc.3",
    "pattern_version": "2026.09.4",
    "scan_id": "05ab0fde154b88de0db7fd22",
    "domain": "musterpage.ch",
    "scanned_at": "2026-10-09T20:55:23+00:00",
    "evidence_count": 56,
    "evidence": [
        {
            "id": "9085071f0625ef55406122fef00e8d13c5b9b80c1342a0ea0908f1ebb7291fe9",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "03155dc84d84f2e4a23797c3d264f59dbd0ad88ab9e966a29bd1b2f68648eb9c"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "maxcdn.bootstrapcdn.com"
                ],
                "id": "host-54b274da0b0d",
                "known": false,
                "name": "maxcdn.bootstrapcdn.com",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "a9fbcdb76ecec45d3f57feb05f86c853eca4cfaf832e154959c4a15657f3be14",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "05b4e46587285b3229defe01754bae00e6bccbaf8d34ba00977df313277585f8"
            ],
            "excerpt": {
                "name": "nginx",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "895804ad419c115ad6b36f13c528400487691b162b95d550b032415330689afd",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0771fab123c8c86adbce5713c7b2d49bcaeb8af5b66354a8a8ae6f7bb83e9699"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "c855c2bf1d618cdfce45050385b690a3ab0382317ce9c96877e97c89fead92e9",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "09059c037f282c4c3a89d4241bbb88755dfc565aeb514d89ff58e5dcfcf4dfc2"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "118fdcb7faf52531799f2853381cd97cd9611f7458c482ff4bccae0418e8ec64",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0dc40d8e9fd502d9992b485114f4303c05c6dc149e060a14c2c09b97ce4fe9d1"
            ],
            "excerpt": [
                "nginx"
            ],
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "38a5be63fb50e2d6fd5a57cb5c6f8bd51f6d37489c9f3a3e74fb4149e16169c8",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "12ff31a936ea8ed357d35c30ba12d8d4a8e246dcf6f0c41af8c9d7b3f816cb6e"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mail.musterpage.ch",
                        "priority": 10
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "c08e72f33ea4de46700cfb737b8a7fa9aece3e8234aeea66d81bf466f14500f3",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "13236e50535aaf79ce780747119233d66b399dbb8e32f65b7f3ac2956a21c472"
            ],
            "excerpt": "2001:67c:1984::232:180:1",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "1cbc77ab805cfcbe54b013b10c2f9c2fa42f9eb3dc06140a9d6e1a09fe0a08cf",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1473a283ad725ac464cd773714496949fc0dbe646ff2cb735a0b419191af5051"
            ],
            "excerpt": "194.124.232.180",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "2681b83d40c1259f10a1340e6ed02e381060179fb1c137dacf5e21f004e86409",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "18e11bce573ab729bc7bbcf3b2f2c6f6ca3a3e43c506dc2e4a540668f781ec56"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "ajax.googleapis.com"
                ],
                "id": "google",
                "known": true,
                "name": "Google",
                "observation_count": 1,
                "services": [
                    "analytics",
                    "captcha",
                    "fonts",
                    "maps",
                    "video"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "9c58fdb6c317136487be2736ace0f1c4e8cb793618bb49ec171b6449b2a27c39",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1d5d45c3ac4368801213941538d45e6a7a1e0335e5cbfe8a19b0d6f30b901a96"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "fc947d2520ed5570277c36595130973dadb455b8251e44c88751f532fd73d3f7",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "26507ddd0dac41c3178637dabfabd4f4196fc841e5f49868bfcc2176e844d164"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "cd3ad8b02e7b7cb96f8aa2a98f2f92b7ef7c18fd7b8bdf478c9df8bfbe4d51ce",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "277dc0f01f695096013a6872c6994a4d0eef23a07bad69141e64eff69bca625e"
            ],
            "excerpt": {
                "evidence": 1,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "7840cb2b0c6e381290f15b69ca7370b09b2ae62be7716e85e8fdb097e70077bd",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "30ff47b0668e74ed5b08bcbd95d4d9c8ccbd0661b6de7f4c18c7c4efe79d0a0d"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "cd46053273b3e0b7edccbdb490b9734f1297fa5206c620ff3e21ee532aafdd3b",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31957032957a01992a2cbe2559803744eb455c1fd17d6ec8ed826166de0d3173"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "critical"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "31565155c282b7c0eda35f35477db3a6fb3b6a452d4ce2fa190c43b06ddd294e",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31f9825b7cdde89eba4068d7c9c2bd50fecae469b686ae3bcbef8ccd49cf6036"
            ],
            "excerpt": "2027-01-07T13:33:01+00:00",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "2acfcdece1b69ee2df21e40699ee0ab4b0945a8aa6eaf33d6ae51605bcd0c413",
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3282f696739bba0e9291f85344c07f814e189fddd4422238c1da2a7d3bb97b6b"
            ],
            "excerpt": {
                "evidence": [
                    "mail.musterpage.ch",
                    "maxcdn.bootstrapcdn.com",
                    "resign.raq.ch",
                    "specter.mva-n.net",
                    "use.typekit.net"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "0b2b100c8ddd9e055b45df2ad29f3650025056e55681ca787c226d900c712163",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "34bbb6164c0dea57edd440955d9761bc6850583ca6b5b52d8f469860de9cf922"
            ],
            "excerpt": {
                "evidence": [
                    "Google",
                    "Vimeo"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "24da1cccbad9712a3729a12b9876cded079bf9417b993b4e0876f8d01078bfb5",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "38ea109e375b0b0bafe11c56f4e5cf663ea0bdab6c329e27576c1701dfbd079e"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mail.musterpage.ch"
                ],
                "id": "host-1e7c6c8f67b4",
                "known": false,
                "name": "mail.musterpage.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "95a08811c46e398d27f0d6e94e071281bbf20bd9fff46defe0d778dfa8a45950",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3f1bebd248e053fe97fc104228be163a39313b03995fb422eb6d4913501c216e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "8f8f498afb1079570413fe32d9c064368104914db912003b278fe8062245fb04",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "41c39c54a48425aa564d6e9920aec822a69229f846823888d69dd636bf20ab0c"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "794022a568b2546ed3d37940a07e46f24572fff49c59d08aa66921f677b979b5",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "46d2fbe675332a681a6180b90d6c6f24225fa48fcebb2481a5a047d54ea55aac"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "156d8c2f30117f90b3365861204807fd0ee56a4008ce24edda5468bbf79b92ba",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6418d7e60a63b4c1fb04d0afe448261bb115dc587752cfb46ef3ffc200a6d817"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "cb67b539c11a568e0fe8e062e5f0d92b8c6f3fdf0bfa8ffdca682862c7c446ed",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "64ce8d76aef3fad0c678e01b064640139dc5d5bc971346e6d9c3421559220da0"
            ],
            "excerpt": {
                "evidence": 3,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "451e744707d801262cbd7fe9f411f966a431e62893ab1dbea675dc4ed8bfe641",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "655759b16b116f2227acb639d347166cc325caaf5efb8f5189fe8e1f3530b00c"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "use.typekit.net"
                ],
                "id": "host-ec3e766bb1cf",
                "known": false,
                "name": "use.typekit.net",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "c13e21b2b7e9ebb690cb2ef168f97d666f6286734cd32382f5a5a5ac3d10473b",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "6da4a81812b884b38fffe60f30d2e2dfd4213d48720e59f7ae6c97bc9902a71f"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR1",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "8a1705599e76d2693918ac4c66ec25c9622a096b595c57c2740f15bc907c23eb",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "711d788f7965875c2cb5dabff441f86b310c86623fb13e8ccb5952a392d4c588"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "resign.raq.ch"
                ],
                "id": "host-ab3c92ea6550",
                "known": false,
                "name": "resign.raq.ch",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "03947608d76fb9fde2d4e464628387878106a5ea153738ed598032181837c054",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "74d928be7e234d8d9ce06af086b738102bc1ec885825d11128b4e29a5639364f"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "fb556aa9f04850b7564f3a76b469b7b3bc8a97da88b94cc31293ba959b8b83e6",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "76dc39667fc7f3e5c705ddf4dcb1fbd99c2df5d11e24803381b28fbb187d6ede"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR1",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-10-09T13:33:02+00:00",
                    "valid_to": "2027-01-07T13:33:01+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "194.124.232.180"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:67c:1984::232:180:1"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "5be6624d9c5a2f4e1a450e3db3c77b29e4af341483fd105900f3aa93da382c1f",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7e0a1be58a193de7e5eb107a979537186e58615a51fcf4fea3c929c300333152"
            ],
            "excerpt": false,
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "7a1d4ee117c5c386ead7dc874b309f934fccfb0cb18d0450da742b4d259354a5",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "823798f64b7bd860fe66d975af98b337fb771c2d176ac860f1d5735c911a397a"
            ],
            "excerpt": false,
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "1d01e92dbbec8331571993e78169740fe8f811d73933faca8b893e9597dc9693",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "86dde5280e96d080bbeece455f11675a8523c2ff8e69bab22dc7cc62f1a99841"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "2d12678a8e62eaa68e39df1c55689f94019b061556258b67c504a0d532aa1681",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8f50897073a59063b04efba70fe4829be14e318c0c5fd248747170bbf81c44a5"
            ],
            "excerpt": "mail.musterpage.ch",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "61116653af8d8767b1ad826090ae47a340ec9f5f6248eb018197b199a94351e1",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9844914430f35cfc273786412610e879cfcafaab6a03a62d1f6eb8916fde949d"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "c9d1e3eaa5fed2d4c2bc3218218e007829f246348133668b17b0e898f9a6636e",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9b4d22dd9867b70e5a9794e882d397b4c6501f57603c940e9f451c297ab93d65"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "f25a4e757ca783af00f14b871e19cdcca2b91e9377062debf1e92ee40baa2e30",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9f8366a53c33f3d45485519d70b45055848d6722cb50253f6b99632bde4f952a"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "specter.mva-n.net"
                ],
                "id": "host-143fdcca65ce",
                "known": false,
                "name": "specter.mva-n.net",
                "observation_count": 1,
                "services": [
                    "unknown"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "4b6beeb350e1b3f14ca9f16d02b205743b13bce799513c4045ceacbf9c1620ac",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a7ba7c1710aeac5028a81280d3db5bc3112ff7bf007e49ca3c2982ec87055ba3"
            ],
            "excerpt": {
                "enforced": false,
                "frame_ancestors": false,
                "hash_present": false,
                "nonce_present": false,
                "object_src": false,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "not_observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "bcf06a34311cc3c0d3531d86203814e3126eba837d9a8d05f71070a82c30b22e",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a838495a0c91e649cbde01dfcc609122b55a8653bfc457e9394f72cfaaec1912"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "52ea24387f52c8f604b943f97bd914e83f6df0e6d1c81a99391503c211102bf6",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ab05633a6c8972b2fbf3e39a05447ad0d36fe26ae7bce1face68a383a573177e"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "d43586b835495314bab7fea2912129d3cde1a9c8801caaaeb50c1f23f5ef8111",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ac4a14445e35020cba118e11313df13ef12855c6f6746c1355195cafd3996c39"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "ac1976cb5af02bf22e10807532916a448e452f5627c84813dadefce851169a61",
            "evidence_type": "module_finding",
            "collector": "supply_chain",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b8f74be3f9bb9605cb8284b39ae92ee8d9c76afc39801081cee22cf89d81ea22"
            ],
            "excerpt": {
                "evidence": [
                    "ajax.googleapis.com",
                    "use.typekit.net"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "f6075fb727bbbf2b232bc236cb0a33941099672d5a67fa091bddb2e7b39f1d06",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ba9a126559f27da8cccf24f3a75f9632b3b2a2e07d4cb1f558df3ed6a18b9710"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "high"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "57cacec0914b04dd7eb0074a31fd084b0cb7dcbe0d0d269c0f112009feda22b7",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bba717bcffef1917b4291dcfe4087cc67c9dc8bb3482ac00375a85d7ca323691"
            ],
            "excerpt": "specter.mva-n.net",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "c6c6a25c49850b74019cf59c4b46093c9d65d3182ef9ffe98ffc5e0c9ca79402",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bcbbd37bc502ce350f7a722b369a979709d3e6c5074fe0c181c714f5c391fe1b"
            ],
            "excerpt": {
                "evidence": 500,
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "ec47b19d8526ed15078e9440191f392799aad6fcd1c203e8d54a2ae5541ac2f0",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c2bf652673a28469f4c9f7c801367c19f3a2c62e93d379c33bae9fdcaa20219d"
            ],
            "excerpt": false,
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "289bb67fab75f5a04ec19e31784e7f30747418558ccb1dd61c98f9f05243cef2",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cd09426ad526b435eb2cff0caa6584202c09332362a9c56567b77a7fcc937192"
            ],
            "excerpt": "v=spf1 mx a:resign.raq.ch include:spf.mva-n.net -all",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "4d442980ceb7f66419ca26056a39764841542ea24d0f121a6b8105569049740d",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "cfa482f3b4549fbb238f67bead9f232ab46d50e978c8d66e8618d6a2e3cf0392"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "d43c99612c9baddb890546efea4aab9a1af941ccda146dd0e313fe14ad020bd0",
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d6ee51f707dc73ab7d3ff4effd1abf8efd84c03e2783d103bb851f30571db0df"
            ],
            "excerpt": {
                "evidence": [
                    "mail.musterpage.ch",
                    "maxcdn.bootstrapcdn.com",
                    "resign.raq.ch",
                    "specter.mva-n.net",
                    "use.typekit.net"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "3b4cf30c365aa19ee0fcd8d5f53cc8249bd96866dd7ab0b2905ab0a3a5253c5c",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d92135f34d5a3fbfe8f2569e129e350e17ad4486fd3a42006bff2577f2c25b05"
            ],
            "excerpt": "resign.raq.ch",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "17e2e7878a8daf512ae932fbcd1ebfe84af67284effb06fa70e0380bb4fc0848",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e064384a1d0920942028433a3a020505a2e9fda8aec7a7833dbfc8fd3bbaa2be"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "b1a12fe2bad02a6f21163d967c0194597599c50a829188063806d0624651d858",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e08743274109ea18b515f339132a5907c204007f50057eeb510009294bb3669d"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "376fecdbb4b78caf7e8000e421831b2236005f371592d8ec3f8df0b8c728fb35",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e8965bb012611f2787ec6a18e331d2040c5f0268cb8405adb681892d805db628"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "3f616d0a030c7d44eeeaecac6a57a4140c46a6c14dbcd3d66de7c800d0e71e50",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ebcb0028c11d5272ea0969be8857c2dffaf335c79a19441164a381f16b10d76e"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "6363dec8c69ac8ee755018384a0ea2479e48ff61122bbf98c7eabd28c8210dff",
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eec320b1b04a2e53153e84556962fcc2cc8e4cde049edf15b86f1d846eef3e66"
            ],
            "excerpt": {
                "evidence": [
                    "Google",
                    "Vimeo",
                    "mail.musterpage.ch",
                    "maxcdn.bootstrapcdn.com",
                    "resign.raq.ch",
                    "specter.mva-n.net",
                    "use.typekit.net"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "fa5bc3d99114222771645b3e0ddd704555110eae5e9bacdd7572b90a23c02149",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f855e9e72809a546895631269ef2482e114a4256e19a2e40ac3c771799e64681"
            ],
            "excerpt": {
                "name": "Bootstrap",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "f949301138decc97021d0e94929d2c4a87fb90847a84f86bd7e7f8ea60523d4e",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "f91b89dc55408e7eff022deb79f1639cc974183b11de3dd32e3c3863c8edad6b"
            ],
            "excerpt": {
                "critical": false,
                "hosts": [
                    "player.vimeo.com"
                ],
                "id": "vimeo",
                "known": true,
                "name": "Vimeo",
                "observation_count": 1,
                "services": [
                    "video"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        },
        {
            "id": "09ba593d7c9c3f9ea9cc1788563e5751cb33c22392ca570dde98dcf032494032",
            "evidence_type": "module_finding",
            "collector": "transparency",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fe0e67a7e1d631ab3d0f845ef9ee381499debf7954d6b80c452db0d41d132b85"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-10-09T20:55:23+00:00",
            "last_seen_at": "2026-10-09T20:55:23+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}