{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "roastmyurl.com",
    "measured_at": "2026-09-04T19:28:56+00:00",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "summary": [
        "5 observations publiques sont documentées dans ce dossier.",
        "2 dépendances publiques structurantes sont visibles.",
        "Aucune évolution utile n’est retenue depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 5,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "3aa4f36e278b7504b84779eb4f99795c0cc633f60add5244f639d69ffc7a2e38",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "946cf03639bafce0249c4fae46827e5b16bec22675df14e0505350c1b9970697",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                },
                {
                    "id": "ed6c4e305bc1b8fdace522212d6eea51acca260785c7d604dffd386d66c03e33",
                    "title": "Depends on provider",
                    "value": "Cloudflare",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410",
                        "1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67",
                        "414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "58e9ef69208691a127fbed8ca19902247b2057ee1c8258b61d4653541c88c824",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YE1",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "706449136d2030fd061b134c5f0bc41bb16cbba704930ceeabfd78e686db42c9"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "ee1014029deb2065e0e3a667eba51e20f676c62859940e777ddd55f965e354e6",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "3f0f0902357f3d38afd5646dd4ecbc589b78aa117ab6616c995170807581d3dc",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "9ba0fa5ed7f5f2530151c4eef2d1c6215cb1df064fee76f0da273152b0e2ea04",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "9c79e14191777d94a7c8a9e9243b06e14e04fd4b912c07391b8e5f44738e2415",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d"
                    ],
                    "rationale": "provider_observed_once"
                },
                {
                    "id": "dd2f72696000b8d744f234ec18da889e64d1177fd8c05f38989200c3db9b887e",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T19:28:56+00:00",
        "last_observed_at": "2026-09-04T19:28:56+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "meaningful_change_count": 0,
        "change_summary": {
            "appeared": 0,
            "modified": 0,
            "disappeared": 0,
            "stable": 0,
            "meaningful": 0,
            "volatile_filtered": 0,
            "unresolved": 0
        },
        "changes": [],
        "history_count": 1
    },
    "observations": [
        {
            "id": "0ad21fd3ee6f5ab8596d03a37078bcf59ada47e3f1424ef8d41f6174a247b89c",
            "type": "dmarc_record",
            "subject": "roastmyurl.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "0b9fc51f4304351868ef6181c2e5136ffb03e02e055f4b21c971e2d18705e120",
            "type": "dmarc_policy",
            "subject": "roastmyurl.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "117b0aca349d2b2434680828a67ff9231834d7902dd0fff43f2665e0247c7884",
            "type": "dns_address",
            "subject": "roastmyurl.com",
            "predicate": "resolves_to",
            "value": "104.21.3.154",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "175ceb6990fa78d3a105fe2f851c6a87be993b72d5398721e505989d55aea6fd",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "1dd2af55b233d6107eef4092bbca4dacf0010ae8f4c1f5d5628b8c2a7e6cddeb",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "referrer-policy",
            "value": [
                "no-referrer"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "2946a083cb982c99035d0e1dc40f0d26acfd77b7c5a2349a878953ac3c5e7802",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "2e30c0febd51f85c6686aea922bc3bd41a814c97f767f39c3d776923704ca412",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "307cc6f6b5bc0c3b2f404f163adc6239f53032b3797b6e4cf82254aa048fecf9",
            "type": "tls_valid_to",
            "subject": "roastmyurl.com",
            "predicate": "valid_to",
            "value": "2026-11-25T04:35:23+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "342f8b2493d6487800f8b707b22de70451cfc01b069b7aac5ccc9c7e749d43ec",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "sovereignty:outside_europe",
            "value": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "source": "finding_outside_europe",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "399e378b101419daf1f4d3418e5bad4ec79d2b10b194e4ff6b295e21e7e6e556",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "3e0b764ac7d0f181d4b8b0809e5f82495eeb5f581e8b488acd20fe5b1ae32b50",
            "type": "spf_policy",
            "subject": "roastmyurl.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "405e7384efddaa5466151a52d7eec387861465d8ce3aaaf6001e2c922d12c66b",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "credentialless"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "5077daf4d928f5410f931cb04cb052620bc729da241180fcf6d2def6a3bb81ed",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "52a36b5c8f7b0a4f900ef52be9f5042626651b624ab364db28d006d6b09f8954",
            "type": "technology",
            "subject": "roastmyurl.com",
            "predicate": "uses_technology",
            "value": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "5f75414bec1d8eb93ac7fa66cea1f5bb4a0bdbb3ff3f3e7fab150ab1618bbb84",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "6b3ada8cc9ad2518bfe522e0d4ec26658fbf0d50b429798edeb2019ff1359ca9",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "6ee7f6a03deee51ab697909a54c2141d0b20f4b917b06aee815e5640f9b62323",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "7a3dea5d0e2a9fff3f25dc225565aa863353936b187cb49cc04ddb7241b006ce",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "7ffb2c3b5d2b12d8beae6efc63fa0947aca6fba152ffb21e015ce9afc381693e",
            "type": "dependency_provider",
            "subject": "roastmyurl.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": false,
                "hosts": [
                    "mta-gw.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 1,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "89394e4536c593a3409c54c19622aef4fdd238b88dacd4fd0122beabe04e25fd",
            "type": "dependency_provider",
            "subject": "roastmyurl.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "8d685273b882c787dcb159777e58f27167d927dff71f0b52287303b042d7c19d",
            "type": "cookie",
            "subject": "roastmyurl.com",
            "predicate": "sets_cookie",
            "value": {
                "http_only": true,
                "name": "__Host-lang",
                "same_site": "lax",
                "secure": true
            },
            "source": "privacy_cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "91f7e181e7ef2b1734dd22597e56b453430d26952d8c0d084b217f59f6b1ca51",
            "type": "dns_nameserver",
            "subject": "roastmyurl.com",
            "predicate": "uses_nameserver",
            "value": "grannbo.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "9285a6b6aa249097b0caf6a5b42c43ca396e89542fa3503bcb1aeb56f690ac80",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "98da18d694749758d38b418c7731f46b27673d21f870eada94f332c5bdc32b48",
            "type": "dns_address",
            "subject": "roastmyurl.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3033::ac43:82e6",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "99eae92fd1d23af9e5419194bfd457b64ce830654606d50f98103d26345b7c85",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "server",
            "value": [
                "cloudflare"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "9c4514e23b8cb46195ee526652abd9e0bf79ff073ba521fdef763aefb9af0fba",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "9f5b2132d1633fac00abd712bee15782b1bd5dba17c08544131c338cf436b044",
            "type": "mail_exchanger",
            "subject": "roastmyurl.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "a5ee988a72a8da807c01f952504d562a8fd3e82819cf4ee58277bb7e2eaef416",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "resilience:provider_dominance",
            "value": {
                "evidence": {
                    "provider": "Cloudflare",
                    "share": 75
                },
                "severity": "medium"
            },
            "source": "finding_provider_dominance",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "aad3a33eb7ca28cbbbce70da3e3a01dc38bca0ad8a50ab49b5e654d44016aba0",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "aafd3f06fbeb619a1f4e7e45c742cff1b1fe7800801f8268480c69cc9a077de9",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "dependencies:dependency_concentration",
            "value": {
                "evidence": "75%",
                "severity": "medium"
            },
            "source": "finding_dependency_concentration",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "ac0fd5550531b8793f635ea23fdf4bdda663b3e0804893470f66fad88e9cdd80",
            "type": "mail_policy_flag",
            "subject": "roastmyurl.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "b38437ff024608a57c6f16b1d5f4a439ab34bc73679dea195758b1e1d2e4207d",
            "type": "spf_record",
            "subject": "roastmyurl.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "b3fd70d946caaaad592a19e2ffa190cc8185bba3564ae9176f6fa230711300ea",
            "type": "mail_policy_flag",
            "subject": "roastmyurl.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "b74537a690a64abb89c526db504381f688cd52a1aa7b35b6567f1de5c2851d9d",
            "type": "tls_issuer",
            "subject": "roastmyurl.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE1",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "b7c3e0543afd3b5f4377ae158c74362b4392ea03d6996a9e550d6937d2e05457",
            "type": "mail_policy_flag",
            "subject": "roastmyurl.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "b81d53fce3cabba0fad7d08c9b2052e52f33af6631db8eb01fb660e92071039b",
            "type": "module_finding",
            "subject": "roastmyurl.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "bce4b675aeb28c2ff8c82a13ceb88008cdf5ee1c1a6ec24e71596fcd4d784662",
            "type": "http_header",
            "subject": "roastmyurl.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "da6abe74fd510da71eabce5fc6afb2c875dc18e9acfb88f063f02eb2fa940b61",
            "type": "dns_nameserver",
            "subject": "roastmyurl.com",
            "predicate": "uses_nameserver",
            "value": "quentin.ns.cloudflare.com",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "e8ac7a3be7c5accf6d820480900c7291b64f03d1764ead8dec07852d6a3274d4",
            "type": "dns_address",
            "subject": "roastmyurl.com",
            "predicate": "resolves_to",
            "value": "172.67.130.230",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "f3e3047ffa3343fd638e97d1f287c1df8149e9c4dd7991427d296ab8d9acac23",
            "type": "dns_address",
            "subject": "roastmyurl.com",
            "predicate": "resolves_to",
            "value": "2606:4700:3036::6815:39a",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T19:28:56+00:00"
        }
    ],
    "claims": [
        {
            "id": "3aa4f36e278b7504b84779eb4f99795c0cc633f60add5244f639d69ffc7a2e38",
            "subject": "roastmyurl.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "3f0f0902357f3d38afd5646dd4ecbc589b78aa117ab6616c995170807581d3dc",
            "subject": "roastmyurl.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "58e9ef69208691a127fbed8ca19902247b2057ee1c8258b61d4653541c88c824",
            "subject": "roastmyurl.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YE1",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "706449136d2030fd061b134c5f0bc41bb16cbba704930ceeabfd78e686db42c9"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "946cf03639bafce0249c4fae46827e5b16bec22675df14e0505350c1b9970697",
            "subject": "roastmyurl.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "9ba0fa5ed7f5f2530151c4eef2d1c6215cb1df064fee76f0da273152b0e2ea04",
            "subject": "roastmyurl.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "9c79e14191777d94a7c8a9e9243b06e14e04fd4b912c07391b8e5f44738e2415",
            "subject": "roastmyurl.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "observed",
            "rationale": "provider_observed_once",
            "evidence_ids": [
                "f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "dd2f72696000b8d744f234ec18da889e64d1177fd8c05f38989200c3db9b887e",
            "subject": "roastmyurl.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "ed6c4e305bc1b8fdace522212d6eea51acca260785c7d604dffd386d66c03e33",
            "subject": "roastmyurl.com",
            "predicate": "depends_on_provider",
            "value": "Cloudflare",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410",
                "1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67",
                "414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        },
        {
            "id": "ee1014029deb2065e0e3a667eba51e20f676c62859940e777ddd55f965e354e6",
            "subject": "roastmyurl.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "46e7760a38f4db69f01873d8a2ae7ee0a372a3542bc6c3d63b20ede7dcf13ea3",
            "observation_ids": [
                "0ad21fd3ee6f5ab8596d03a37078bcf59ada47e3f1424ef8d41f6174a247b89c"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "871222f32f341afbc581dd70ba6125228c210e4fcdc22272408f308cba6c6af0",
            "observation_ids": [
                "0b9fc51f4304351868ef6181c2e5136ffb03e02e055f4b21c971e2d18705e120"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "5afa9626bd3bf61e89007d8a4070f422ac3f225cd774681610183b9b5d1f4faf",
            "observation_ids": [
                "117b0aca349d2b2434680828a67ff9231834d7902dd0fff43f2665e0247c7884"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "104.21.3.154",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "61ca079794e7a6a72c2c214dca932af3d6b569ceb15d60945039da4420cfb121",
            "observation_ids": [
                "175ceb6990fa78d3a105fe2f851c6a87be993b72d5398721e505989d55aea6fd"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "20a090624f0da1a7b5879f71f2677ec135bbb4a692685fdaf972b1cfe608b79d",
            "observation_ids": [
                "1dd2af55b233d6107eef4092bbca4dacf0010ae8f4c1f5d5628b8c2a7e6cddeb"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "d0f28a3f03335287522db6e20f3e36c6c40297ef9b364f9b76ba6c606594d738",
            "observation_ids": [
                "2946a083cb982c99035d0e1dc40f0d26acfd77b7c5a2349a878953ac3c5e7802"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "1fc425f987c70fb4bc250b1374701179ed42a62f49414830fe722eca8d0b3134",
            "observation_ids": [
                "2e30c0febd51f85c6686aea922bc3bd41a814c97f767f39c3d776923704ca412"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "ae543adb5e87ab5a278e6c4d547973932dd64323cc08a0bd0f4e63496007e7ff",
            "observation_ids": [
                "307cc6f6b5bc0c3b2f404f163adc6239f53032b3797b6e4cf82254aa048fecf9"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-25T04:35:23+00:00",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "6106c3830b4ddce24cfdb956d34e7e59c69acf3ee24c6d896b9327f048196460",
            "observation_ids": [
                "342f8b2493d6487800f8b707b22de70451cfc01b069b7aac5ccc9c7e749d43ec"
            ],
            "evidence_type": "module_finding",
            "collector": "sovereignty",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "Cloudflare"
                ],
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "03fe514b6d2d28ba1725d22c00e4fe3a89a8a7c3f734454bdf6aae3cc67bba51",
            "observation_ids": [
                "399e378b101419daf1f4d3418e5bad4ec79d2b10b194e4ff6b295e21e7e6e556"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "268b713930c8f4c32fc0b3ba02993127d73c9a6928de020cb55141f407a1766f",
            "observation_ids": [
                "3e0b764ac7d0f181d4b8b0809e5f82495eeb5f581e8b488acd20fe5b1ae32b50"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "4b538bc3d7fedfbdfa36a863a896899fce1925e64b4ee62e406059ffde8ed7ce",
            "observation_ids": [
                "405e7384efddaa5466151a52d7eec387861465d8ce3aaaf6001e2c922d12c66b"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "credentialless"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "ec594b5e7bebc7548adc3735cbac9e0f0da326718ef99b72296284f4cfc05cb6",
            "observation_ids": [
                "5077daf4d928f5410f931cb04cb052620bc729da241180fcf6d2def6a3bb81ed"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; script-src 'strict-dynamic' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; style-src 'self' 'nonce-9oN2b3eviK2z4jYPPmJR1g=='; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self'; manifest-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self' https://formspree.io;"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "86d930d47c10d7884a2cb1ab7c15a1a7ae0ff93d2cb91fd69d77bded392fe33e",
            "observation_ids": [
                "52a36b5c8f7b0a4f900ef52be9f5042626651b624ab364db28d006d6b09f8954"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "cloudflare",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "15ed39769b739023fb0a6b27d2be902138e62456a7363bf5f9a105bd73fe74c9",
            "observation_ids": [
                "5f75414bec1d8eb93ac7fa66cea1f5bb4a0bdbb3ff3f3e7fab150ab1618bbb84"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(self), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), hid=(), idle-detection=(), serial=(), unload=()"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "6b76c0d6060a7cd82404fad455310b7279d7ac5fad7b78c183000edd21736728",
            "observation_ids": [
                "6b3ada8cc9ad2518bfe522e0d4ec26658fbf0d50b429798edeb2019ff1359ca9"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "a1107d704dcb123a3c37bb27d854fc6a7b960ec73889dcfd7af9378644c80f53",
            "observation_ids": [
                "6ee7f6a03deee51ab697909a54c2141d0b20f4b917b06aee815e5640f9b62323"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "f5108e6c371e99ac6b2d411160ccf5e73720ccd05e432c4ee2250acb6bcac7c6",
            "observation_ids": [
                "7a3dea5d0e2a9fff3f25dc225565aa863353936b187cb49cc04ddb7241b006ce"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "f39c5ac278ced4240005fdeb2f71ebbac8ce7d1cd76a92621eed682cbf0d269d",
            "observation_ids": [
                "7ffb2c3b5d2b12d8beae6efc63fa0947aca6fba152ffb21e015ce9afc381693e"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": false,
                "hosts": [
                    "mta-gw.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 1,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "d26afe42a6278c6d4260f811d7766cb059c781d9277482669e9b223982eab410",
            "observation_ids": [
                "89394e4536c593a3409c54c19622aef4fdd238b88dacd4fd0122beabe04e25fd"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "cloudflare.com",
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "id": "cloudflare",
                "known": true,
                "name": "Cloudflare",
                "observation_count": 3,
                "services": [
                    "cdn",
                    "security"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "39e9afe9edc84cb0d44aac09dbfb1fa60792d99db2215cad315c07b2de3b35ad",
            "observation_ids": [
                "8d685273b882c787dcb159777e58f27167d927dff71f0b52287303b042d7c19d"
            ],
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "excerpt": {
                "http_only": true,
                "name": "__Host-lang",
                "same_site": "lax",
                "secure": true
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "1bec61ef7051548ab09d963b29e6aa2b733ea5fa904cee201d055771e1bdae67",
            "observation_ids": [
                "91f7e181e7ef2b1734dd22597e56b453430d26952d8c0d084b217f59f6b1ca51"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "grannbo.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "d33a76a0f6e24f9b9bcb96195c3beb31d95795a2ecf319803da25aa4e662f809",
            "observation_ids": [
                "9285a6b6aa249097b0caf6a5b42c43ca396e89542fa3503bcb1aeb56f690ac80"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "grannbo.ns.cloudflare.com",
                    "quentin.ns.cloudflare.com"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "18afb1b3c7f91817d4f022b3c551f41e68e2320c384e6f587c02fbe692ecd410",
            "observation_ids": [
                "98da18d694749758d38b418c7731f46b27673d21f870eada94f332c5bdc32b48"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3033::ac43:82e6",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "c2c3f802c892ed19403d194bf85dfb9ecf3ff5886ca178f71dfebce80b295bd4",
            "observation_ids": [
                "99eae92fd1d23af9e5419194bfd457b64ce830654606d50f98103d26345b7c85"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "cloudflare"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "927eab3f457ae12090df02f4a280e9aae912e27c7c15f57a470559d2631fd85d",
            "observation_ids": [
                "9c4514e23b8cb46195ee526652abd9e0bf79ff073ba521fdef763aefb9af0fba"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "071a44c16c501463202c06a95706e3e92eff597f9dab51b47f8d99bca138ea55",
            "observation_ids": [
                "9f5b2132d1633fac00abd712bee15782b1bd5dba17c08544131c338cf436b044"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "71ac8be680166513d07012c0ceddc011d01ebb5846949494dce08f2f1e45c4a7",
            "observation_ids": [
                "a5ee988a72a8da807c01f952504d562a8fd3e82819cf4ee58277bb7e2eaef416"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "provider": "Cloudflare",
                    "share": 75
                },
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "1ac1cac60c3cc1ef5cef6666bd29d591fb062c580e5a9529309818824ed2e39a",
            "observation_ids": [
                "aad3a33eb7ca28cbbbce70da3e3a01dc38bca0ad8a50ab49b5e654d44016aba0"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "ed39242653123ccd8bb2d1383b5933469d9710fde464e26d1566d20ad3b613be",
            "observation_ids": [
                "aafd3f06fbeb619a1f4e7e45c742cff1b1fe7800801f8268480c69cc9a077de9"
            ],
            "evidence_type": "module_finding",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": "75%",
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "f1cf34ef794c96293ab72d2a313f1fef11df843381bfad16357f48222a1856c2",
            "observation_ids": [
                "ac0fd5550531b8793f635ea23fdf4bdda663b3e0804893470f66fad88e9cdd80"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "34b701c7d6085ccfcc6399ea2aedf3b7df4ad1b6a36d184da10aadb05bb10a15",
            "observation_ids": [
                "b38437ff024608a57c6f16b1d5f4a439ab34bc73679dea195758b1e1d2e4207d"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "611d2a0748d1bfeb45912da1c298781a3e7fcd842cf5de1d10cfcd65196c03a6",
            "observation_ids": [
                "b3fd70d946caaaad592a19e2ffa190cc8185bba3564ae9176f6fa230711300ea"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "706449136d2030fd061b134c5f0bc41bb16cbba704930ceeabfd78e686db42c9",
            "observation_ids": [
                "b74537a690a64abb89c526db504381f688cd52a1aa7b35b6567f1de5c2851d9d"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YE1",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "fc5ebb40b22244dfe6776c95feee0e971cd57ee6cf040a177cdb3c09fd15f5a8",
            "observation_ids": [
                "b7c3e0543afd3b5f4377ae158c74362b4392ea03d6996a9e550d6937d2e05457"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "27f2cd93056c00ec0920b0ffd43913197d194b5b4949c2c24a93f8aaabd8a75d",
            "observation_ids": [
                "b81d53fce3cabba0fad7d08c9b2052e52f33af6631db8eb01fb660e92071039b"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "e9c6d90ca55fd8918131c04853e1eae86b4b026f16f1b6eec4dc0f9c77458c7b",
            "observation_ids": [
                "bce4b675aeb28c2ff8c82a13ceb88008cdf5ee1c1a6ec24e71596fcd4d784662"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "414018bca07bea8c4265f1ff34f7e95a8559be9af7dd3abb629e8a1c1513efc3",
            "observation_ids": [
                "da6abe74fd510da71eabce5fc6afb2c875dc18e9acfb88f063f02eb2fa940b61"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "quentin.ns.cloudflare.com",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "4da9d077b113249e96201e118011e79e7c6e6a7c854b0380095ee3947b43bd1a",
            "observation_ids": [
                "e8ac7a3be7c5accf6d820480900c7291b64f03d1764ead8dec07852d6a3274d4"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "172.67.130.230",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        },
        {
            "id": "5237c81ebdea1d178f9d9181fe314823a36f29a756ef410c2dc943605147600e",
            "observation_ids": [
                "f3e3047ffa3343fd638e97d1f287c1df8149e9c4dd7991427d296ab8d9acac23"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2606:4700:3036::6815:39a",
            "first_seen_at": "2026-09-04T19:28:56+00:00",
            "last_seen_at": "2026-09-04T19:28:56+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "e8e06e87407726423b3bbbab7467db9ee1c47b817657f6125ee54d68189f4321"
}