{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "scanapse.com",
    "measured_at": "2026-09-04T13:29:57+00:00",
    "engine_version": "2.5.3",
    "pattern_version": "2026.09.4",
    "summary": [
        "4 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "1 évolutions utiles sont retenues depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 4,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "6fbb16eb67f1a7105cba72dca5814beda6cc2733a41e421cddb772c31195c93b",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                },
                {
                    "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                },
                {
                    "id": "cf221b015e0bcc2f850a49ccd5ea97edbc1e0f8cb91b9daa11bb68a5972e3a3b",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4",
                        "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3",
                        "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "3353e9b5856905030bf0c3d048593b3b99d42536a0d9fd53528af28617017c5b",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                },
                {
                    "id": "3442893d9ce78297084148fd1e2570e85ec09e4363540136e6ea5fea66911a3f",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR1",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2"
                    ],
                    "rationale": "certificate_observed"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "2b81a35d69a1ce72cfe8147e755794cb341841a54703cc128e24dd56d23d4968",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "45beeefff4888c08810966f6c857d8c59880741ce80372efe9ed24b971e95cf6",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T12:30:34+00:00",
        "last_observed_at": "2026-09-04T13:29:57+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 0,
            "modified": 1,
            "stable": 36,
            "disappeared": 0
        },
        "changes": [
            {
                "status": "modified",
                "label": "Modifié",
                "title": "Http header",
                "before": [
                    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-EIqb4IQUgYKNhhcGplWxj6gj'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
                ],
                "after": [
                    "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
                ],
                "direction": "indeterminate"
            }
        ],
        "history_count": 5
    },
    "observations": [
        {
            "id": "0ee4ccdb66c9b485b451669f5eb54afffc4588b07446dd02e6e6343344d25872",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "19d4597fb7a86b537f4197734f6b0b8690a3250c1b214687bee2ce46612a0468",
            "type": "spf_policy",
            "subject": "scanapse.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "24ea6560a7f3d66c4d4737af98d537314fcdfee57665724d86a7919828284da1",
            "type": "mail_policy_flag",
            "subject": "scanapse.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "280879a60cafebe844468135cdb85e9d034ded8ba9ec42daad227a54dd504d93",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "headers:hsts_no_subdomains",
            "value": {
                "evidence": "max-age=63072000",
                "severity": "low"
            },
            "source": "finding_hsts_no_subdomains",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "281acfe44c1d265d0d9879dd3ea8272a9aafaa6665663d601150aa282070a64b",
            "type": "tls_issuer",
            "subject": "scanapse.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR1",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "2a2fed80be9076402af5e26bb3a58873de3064306b839a08a717d56a11fd44b0",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "3df2d98d5dfa49eb8284c463f438291cb7e4ffc7c3159170ef774401066172f0",
            "type": "technology",
            "subject": "scanapse.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "40bcd9efd598964c63ace98617329a2f6ef8f9250991d25f13c816a8a71be902",
            "type": "dmarc_record",
            "subject": "scanapse.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "495fd6896f17958b338bf9bb57d08b818b970970b10f59cebec96216edaa85a9",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "49fd041859adee49249d1682f9a46efed1590c2819adc78fe9203b29a3bfac1d",
            "type": "dmarc_policy",
            "subject": "scanapse.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "4bc0883b37fff46e12b9c329f043beb693765973a087d3a88046637662f2eef9",
            "type": "dns_nameserver",
            "subject": "scanapse.com",
            "predicate": "uses_nameserver",
            "value": "ns11.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "4d22e36be39ad1652e870d80a9575ea3e3b0e1c74731f2a91e8f0c1dc2a0404a",
            "type": "mail_policy_flag",
            "subject": "scanapse.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "53bf3f5bdd48c90df1e720e26884a431f966a9c3b21dc871805312b14bbe86ab",
            "type": "dependency_provider",
            "subject": "scanapse.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "54dd6c216bee77279f1ece40ac2a6d2c6bd3414c085b6d45c18b453285eb2216",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "55f541b9c61955dcd75c32572899d0206e0d77490911752a0f44fd6c8db42b58",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=63072000"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "591c1a3b88db17d597ca0f74d1742752eccb1fdafb4765b065fd964e4beccb64",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "5d0dfd1268fa3bc65c7c92221d3d15798e31051ab071acf7af03687a6906fb77",
            "type": "tls_valid_to",
            "subject": "scanapse.com",
            "predicate": "valid_to",
            "value": "2026-10-02T17:49:22+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "872d15073a36345581e3f7bb47a6de3886d338b38ebcb09b69c1100b64076d82",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "8e846d6d95b71c5fc0e1e75c95ae765016e85d58cd747433b423ba49a29181a0",
            "type": "mail_policy_flag",
            "subject": "scanapse.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "8eee2d25b6fd1ec18b10ec77713e3b012f76b0661b6b00842134a7e3131ca419",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "9060e4229db8478167ea7bad7b206a2af443732b4c4bc42946ace8b090c933f3",
            "type": "dns_nameserver",
            "subject": "scanapse.com",
            "predicate": "uses_nameserver",
            "value": "ns12.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "938e190bf446f47993ed67d2780877848c63a54a01fe4f8ec5808cb8c7afdf1e",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "a5f93036ff6b24b6ff007a4230d1d508d50472b81aff0a8de13bfa50ac7b3e9b",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "a67a3f84e5485b5a28f4793e3b39f6b4ef421a9d6a029b76fc4e47a09b64bece",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "a70bdfdd72e7132308174ac99349f455c977b7b9e291950b5e0fd3f7a95ef890",
            "type": "cookie",
            "subject": "scanapse.com",
            "predicate": "sets_cookie",
            "value": {
                "http_only": true,
                "name": "scanapse_csrf",
                "same_site": "strict",
                "secure": true
            },
            "source": "privacy_cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "af66d6e32c8288a35cef6b7ade2b71caccc6d2309ee40c74bdfeb5de71fc03b1",
            "type": "dns_address",
            "subject": "scanapse.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5a",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "b15b63234e8757f338875f023b749e5764c85d0c97ab52d9398eb4f12de40fcf",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "referrer-policy",
            "value": [
                "no-referrer"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "b53917480bf915194206fc410a94dca83d1207f4ff0de76716b59b8317386eb8",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "b557caea5099613102d539b11e9749cfae16ea6f9586f6dd3690b2ad98062e65",
            "type": "technology",
            "subject": "scanapse.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Scanapse",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "bce1678339a29383ac14ebdf1692d556e51d1452575000b15fdd33bddfd49ec0",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "c8345bbbe7849f6927abef1d3f10a70f652aa1b9ca9cfce9f5ba4a3d1d79f171",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "c8666e10c160e953ec50d963b4d14f28897630f3279cacfcb70a034974624318",
            "type": "mail_exchanger",
            "subject": "scanapse.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "ce9553141a0922dd59a969693dcf3a55c80640ad8455825c1ae017a8d7e400ff",
            "type": "module_finding",
            "subject": "scanapse.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "e33a14dd09f2d1e3eaae3a91efed5f71016d343a879b5ac1b240b8808a4fc1df",
            "type": "dns_address",
            "subject": "scanapse.com",
            "predicate": "resolves_to",
            "value": "185.125.27.195",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "ff0d9a8e26a0daa81cc574726c9f5452aa7370c0efe03d075e00fd91f1cce6e6",
            "type": "spf_record",
            "subject": "scanapse.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "fff111fe287ae02956798e30e188a31f0def112736a91a95253a2cacfe906b6f",
            "type": "http_header",
            "subject": "scanapse.com",
            "predicate": "cross-origin-embedder-policy",
            "value": [
                "require-corp"
            ],
            "source": "header_cross-origin-embedder-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:29:57+00:00"
        }
    ],
    "claims": [
        {
            "id": "2b81a35d69a1ce72cfe8147e755794cb341841a54703cc128e24dd56d23d4968",
            "subject": "scanapse.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "3353e9b5856905030bf0c3d048593b3b99d42536a0d9fd53528af28617017c5b",
            "subject": "scanapse.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "3442893d9ce78297084148fd1e2570e85ec09e4363540136e6ea5fea66911a3f",
            "subject": "scanapse.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR1",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "45beeefff4888c08810966f6c857d8c59880741ce80372efe9ed24b971e95cf6",
            "subject": "scanapse.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "6fbb16eb67f1a7105cba72dca5814beda6cc2733a41e421cddb772c31195c93b",
            "subject": "scanapse.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "716a10c7261dca4ec0f76344040e767a501c6dfa68189117622d944251577c51",
            "subject": "scanapse.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "cbc2ec79fc4f1308f26941f98c19ed166ceb1f90999048a461a614f02c05014c",
            "subject": "scanapse.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        },
        {
            "id": "cf221b015e0bcc2f850a49ccd5ea97edbc1e0f8cb91b9daa11bb68a5972e3a3b",
            "subject": "scanapse.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4",
                "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3",
                "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81",
            "observation_ids": [
                "0ee4ccdb66c9b485b451669f5eb54afffc4588b07446dd02e6e6343344d25872"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c",
            "observation_ids": [
                "19d4597fb7a86b537f4197734f6b0b8690a3250c1b214687bee2ce46612a0468"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95",
            "observation_ids": [
                "24ea6560a7f3d66c4d4737af98d537314fcdfee57665724d86a7919828284da1"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4",
            "observation_ids": [
                "280879a60cafebe844468135cdb85e9d034ded8ba9ec42daad227a54dd504d93"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": "max-age=63072000",
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2",
            "observation_ids": [
                "281acfe44c1d265d0d9879dd3ea8272a9aafaa6665663d601150aa282070a64b"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR1",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174",
            "observation_ids": [
                "2a2fed80be9076402af5e26bb3a58873de3064306b839a08a717d56a11fd44b0"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada",
            "observation_ids": [
                "3df2d98d5dfa49eb8284c463f438291cb7e4ffc7c3159170ef774401066172f0"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393",
            "observation_ids": [
                "40bcd9efd598964c63ace98617329a2f6ef8f9250991d25f13c816a8a71be902"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71",
            "observation_ids": [
                "495fd6896f17958b338bf9bb57d08b818b970970b10f59cebec96216edaa85a9"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e",
            "observation_ids": [
                "49fd041859adee49249d1682f9a46efed1590c2819adc78fe9203b29a3bfac1d"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4",
            "observation_ids": [
                "4bc0883b37fff46e12b9c329f043beb693765973a087d3a88046637662f2eef9"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431",
            "observation_ids": [
                "4d22e36be39ad1652e870d80a9575ea3e3b0e1c74731f2a91e8f0c1dc2a0404a"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220",
            "observation_ids": [
                "53bf3f5bdd48c90df1e720e26884a431f966a9c3b21dc871805312b14bbe86ab"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755",
            "observation_ids": [
                "54dd6c216bee77279f1ece40ac2a6d2c6bd3414c085b6d45c18b453285eb2216"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce",
            "observation_ids": [
                "55f541b9c61955dcd75c32572899d0206e0d77490911752a0f44fd6c8db42b58"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=63072000"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "06611624d9ce385f0345df2c167331ab09f2bbbafb1fde80bc5ef325ddc08e10",
            "observation_ids": [
                "591c1a3b88db17d597ca0f74d1742752eccb1fdafb4765b065fd964e4beccb64"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-r-jYTy4guNX8yMNBozq7DoX0'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60",
            "observation_ids": [
                "5d0dfd1268fa3bc65c7c92221d3d15798e31051ab071acf7af03687a6906fb77"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-10-02T17:49:22+00:00",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f",
            "observation_ids": [
                "872d15073a36345581e3f7bb47a6de3886d338b38ebcb09b69c1100b64076d82"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55",
            "observation_ids": [
                "8e846d6d95b71c5fc0e1e75c95ae765016e85d58cd747433b423ba49a29181a0"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52",
            "observation_ids": [
                "8eee2d25b6fd1ec18b10ec77713e3b012f76b0661b6b00842134a7e3131ca419"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3",
            "observation_ids": [
                "9060e4229db8478167ea7bad7b206a2af443732b4c4bc42946ace8b090c933f3"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be",
            "observation_ids": [
                "938e190bf446f47993ed67d2780877848c63a54a01fe4f8ec5808cb8c7afdf1e"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09",
            "observation_ids": [
                "a5f93036ff6b24b6ff007a4230d1d508d50472b81aff0a8de13bfa50ac7b3e9b"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b",
            "observation_ids": [
                "a67a3f84e5485b5a28f4793e3b39f6b4ef421a9d6a029b76fc4e47a09b64bece"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85",
            "observation_ids": [
                "a70bdfdd72e7132308174ac99349f455c977b7b9e291950b5e0fd3f7a95ef890"
            ],
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "excerpt": {
                "http_only": true,
                "name": "scanapse_csrf",
                "same_site": "strict",
                "secure": true
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f",
            "observation_ids": [
                "af66d6e32c8288a35cef6b7ade2b71caccc6d2309ee40c74bdfeb5de71fc03b1"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5a",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b",
            "observation_ids": [
                "b15b63234e8757f338875f023b749e5764c85d0c97ab52d9398eb4f12de40fcf"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "00d1517300812a25e6584d36e2edc4bb830f189d1487e7cb7790e48ce31bc0c2",
            "observation_ids": [
                "b53917480bf915194206fc410a94dca83d1207f4ff0de76716b59b8317386eb8"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd",
            "observation_ids": [
                "b557caea5099613102d539b11e9749cfae16ea6f9586f6dd3690b2ad98062e65"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Scanapse",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc",
            "observation_ids": [
                "bce1678339a29383ac14ebdf1692d556e51d1452575000b15fdd33bddfd49ec0"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3",
            "observation_ids": [
                "c8345bbbe7849f6927abef1d3f10a70f652aa1b9ca9cfce9f5ba4a3d1d79f171"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802",
            "observation_ids": [
                "c8666e10c160e953ec50d963b4d14f28897630f3279cacfcb70a034974624318"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3",
            "observation_ids": [
                "ce9553141a0922dd59a969693dcf3a55c80640ad8455825c1ae017a8d7e400ff"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f",
            "observation_ids": [
                "e33a14dd09f2d1e3eaae3a91efed5f71016d343a879b5ac1b240b8808a4fc1df"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.195",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2",
            "observation_ids": [
                "ff0d9a8e26a0daa81cc574726c9f5452aa7370c0efe03d075e00fd91f1cce6e6"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        },
        {
            "id": "0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217",
            "observation_ids": [
                "fff111fe287ae02956798e30e188a31f0def112736a91a95253a2cacfe906b6f"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-04T13:29:57+00:00",
            "last_seen_at": "2026-09-04T13:29:57+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "ea5fcce0650d32f777eb9764bc92e454b2f4a7255778b9d41615dfdf56bae812"
}