{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.9.1",
    "pattern_version": "2026.09.4",
    "scan_id": "5fbcfab76a38762e3a2298ba",
    "domain": "scanapse.com",
    "scanned_at": "2026-09-05T22:47:56+00:00",
    "evidence_count": 43,
    "evidence": [
        {
            "id": "1ee5515c70b8461cc39c172e731abd0bfb929e5af0897f5f220f9d161cea9ac3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "039fe2fe01997d64708428f193e84c982d446d4ac630c9a87440b60a2f94d19e"
            ],
            "excerpt": [
                "default-src 'none'; base-uri 'none'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'none'; object-src 'none'; script-src 'self' 'nonce-FFvmN5QMbOCAeexVRQ0zK0vi'; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; worker-src 'none'; upgrade-insecure-requests; block-all-mixed-content"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "c3e0ff64681e1d1cfc2371bb25f8bbc0a719c271e6c6e2fa009686120af21595",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "077ff4c2bb1ac8a0f824017a9f073bf7aaf53fdffad91e44a3c2a1a9417f2bb9"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "40e1e772246785260aa65e8e4ae228c36184e233b4ade4a55b00121342e0ab81",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0ee4ccdb66c9b485b451669f5eb54afffc4588b07446dd02e6e6343344d25872"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "91dc0d842986c92186a0ef76fdf0dd4e994d32b8d87f9e1c5272a81d7f2a6a1c",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "19d4597fb7a86b537f4197734f6b0b8690a3250c1b214687bee2ce46612a0468"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "efbdf55dc29b35213f82860a98f8eb310f9634c85e7a2ad307cdbd7ddc746e95",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "24ea6560a7f3d66c4d4737af98d537314fcdfee57665724d86a7919828284da1"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "8f6c3ba043069831b23e79ab25e0800985987ce4f5b6b225368093d96d7c6da4",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "280879a60cafebe844468135cdb85e9d034ded8ba9ec42daad227a54dd504d93"
            ],
            "excerpt": {
                "evidence": "max-age=63072000",
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "9a641c3bf9ccf1bf618c815294b65b6e348db3bea677cc5831110374f472f9f2",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "281acfe44c1d265d0d9879dd3ea8272a9aafaa6665663d601150aa282070a64b"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR1",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "92556c4f43fb1ff1c86bc06a995f7d6b8430e8bb25a50aefaa7824ff2248c174",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2a2fed80be9076402af5e26bb3a58873de3064306b839a08a717d56a11fd44b0"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "c07cc9bc85acb5ea3545f8b02b6ac69cd9c1e5b17847275e3e4878c7ffe90ada",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3df2d98d5dfa49eb8284c463f438291cb7e4ffc7c3159170ef774401066172f0"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "e9421e77731bd88112043c1e15255e02b5f2209b9819aee40e9312d6147ff393",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "40bcd9efd598964c63ace98617329a2f6ef8f9250991d25f13c816a8a71be902"
            ],
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "95e394990f5d3b9926a53e197ef73df4f3490d09161d6bfe5f50b042ed19ab71",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "495fd6896f17958b338bf9bb57d08b818b970970b10f59cebec96216edaa85a9"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "a893249d8dfe4f684f33c91b1ebbb94e8fe01119756d32bc2d4c15cb5a945f1e",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "49fd041859adee49249d1682f9a46efed1590c2819adc78fe9203b29a3bfac1d"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "e3ec6aff0e2d6a8cf10e600c63e359c12650f16c4af49f2126d0540c1821e9c4",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4bc0883b37fff46e12b9c329f043beb693765973a087d3a88046637662f2eef9"
            ],
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "1e582816be3447103be32a6440bd8102e6d46a996d9ac63eac5f4fc5483aebb7",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4d08e3f14e214ff89d49608e668460b5d43b71af67b8b1f5dc4aedfd7c61d039"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "0cb1c128298f9ef945c173f03a6cececd0edefcb26acd44b9f991bdfc0d1f431",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4d22e36be39ad1652e870d80a9575ea3e3b0e1c74731f2a91e8f0c1dc2a0404a"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "e6b9d153a87d3c9388fe7f7d0ec41b78896b82d687840df013d423ea286ae220",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "53bf3f5bdd48c90df1e720e26884a431f966a9c3b21dc871805312b14bbe86ab"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "bd403401454b96fcdc6d6ccb40323551aa395e0fa2eb0573c22635f0b5862755",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "54dd6c216bee77279f1ece40ac2a6d2c6bd3414c085b6d45c18b453285eb2216"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "e7a93bc6f9bb672cd997090181eb69628dbae6cb8de4243daccc1cf2245179ce",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "55f541b9c61955dcd75c32572899d0206e0d77490911752a0f44fd6c8db42b58"
            ],
            "excerpt": [
                "max-age=63072000"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "0487e93a392d356f7489de56f35bcb02d5129717bae317d7436c807fe430a679",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5b426d44732eb740443c06aa5f9c8bd011b7de2f9936885dd0d645c9e0425e90"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "2e69bd55e0ed6664147c7220c77d5d637e26e780a60b364461e85f116c237e60",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "5d0dfd1268fa3bc65c7c92221d3d15798e31051ab071acf7af03687a6906fb77"
            ],
            "excerpt": "2026-10-02T17:49:22+00:00",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "6b4ce3abe2aae3c5ea8f279b31256a189fd53cbd8de6212f0c84e7a07f044525",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7ba25466e7b847cf8dc20053e3c3741486ee71c12760a827253cd260b2d9802b"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "62db24a78514a31710235b329d49fdd15abf245409f61d0afc03c0604336e5cc",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7c8d0f6aa517e96267db7f2b1b73385b72a86426b5a9bb21ab50a474999fb8a2"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "495a36555c58f0c252f52d5e17220e89158deb23be5514f6f17ee290de4820f2",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8690f1e89bac02dd7e9816260738192a3d69b4b97295b0133fd59960ba35ee92"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "fa41597cc0a4f62a45752fcb1ef10fba24e1e2905124a8debbba1d5fbe54046f",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "872d15073a36345581e3f7bb47a6de3886d338b38ebcb09b69c1100b64076d82"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "1103842573f8a9470d2eea6873ee35ef3b61b3b743a88110d9ef93eae78fac55",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8e846d6d95b71c5fc0e1e75c95ae765016e85d58cd747433b423ba49a29181a0"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "40b56fe3bd50620d24673cc8ebf3b1326e3681ffb780c30da12ac82d38cecc52",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8eee2d25b6fd1ec18b10ec77713e3b012f76b0661b6b00842134a7e3131ca419"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "b08fbd19a50126cf9c95d5e2b0527b4d9eb65067c335901f1c96ace2535b1bc3",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "9060e4229db8478167ea7bad7b206a2af443732b4c4bc42946ace8b090c933f3"
            ],
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "08a532c8c1ca3a98ad8c5a0d4cd4f5ce84b7514b10489fd8b49ed4bdea00e9be",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "938e190bf446f47993ed67d2780877848c63a54a01fe4f8ec5808cb8c7afdf1e"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "82ec654d5f4b5ca7e87666f3c5e61cab7b01a8e017f94d06a68847a92afa9e09",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a5f93036ff6b24b6ff007a4230d1d508d50472b81aff0a8de13bfa50ac7b3e9b"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "a2fc4cc1b858e28a954d7456bc431af163644d06a36bafbbdf7dba43c4062e7b",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a67a3f84e5485b5a28f4793e3b39f6b4ef421a9d6a029b76fc4e47a09b64bece"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "8b8b145600d8786b26181f174e174a3ba9d1da2ffaa6523555b80b68c7094a85",
            "evidence_type": "cookie",
            "collector": "privacy",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a70bdfdd72e7132308174ac99349f455c977b7b9e291950b5e0fd3f7a95ef890"
            ],
            "excerpt": {
                "http_only": true,
                "name": "scanapse_csrf",
                "same_site": "strict",
                "secure": true
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "1e39a04d5a3aee5ca4e4916c69c4445b82725ed89a100a8db64cc5655905bf0f",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "af66d6e32c8288a35cef6b7ade2b71caccc6d2309ee40c74bdfeb5de71fc03b1"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5a",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "dea90928c3b67e932ea2fdec5a546139ddf896d2a60aa5bf049c1e4ca357011b",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b15b63234e8757f338875f023b749e5764c85d0c97ab52d9398eb4f12de40fcf"
            ],
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "127dc5baed27ae8f1c790adfe3854c2e839edfa0212a7fb49be1ee2275c8d9dd",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b557caea5099613102d539b11e9749cfae16ea6f9586f6dd3690b2ad98062e65"
            ],
            "excerpt": {
                "name": "Scanapse",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "f1dc78e48edb80b7c63de7643f8641874264765110367a6bfcb2910c2b893abc",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bce1678339a29383ac14ebdf1692d556e51d1452575000b15fdd33bddfd49ec0"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "fee19678db61552f5fc097e187c927c2055497aac744878c382cd619b5cf8ab3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c8345bbbe7849f6927abef1d3f10a70f652aa1b9ca9cfce9f5ba4a3d1d79f171"
            ],
            "excerpt": [
                "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "23d09204c1928598be4a27c9eda9915fec227cd1c631598723c2d2f553f86802",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "c8666e10c160e953ec50d963b4d14f28897630f3279cacfcb70a034974624318"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "0190807f910062b1d8cf0b14b55e63fb7cee13621c1bfdf56a7a427452f24eb3",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ce9553141a0922dd59a969693dcf3a55c80640ad8455825c1ae017a8d7e400ff"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "e9191e8fd191bbca9ad3e9fd756e1098dcf421db851762ab9f2b7506e6380472",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d4949a5af1090e13fb1018fdeed1ae425ea0e4f6f4f4b745da5b9bbddf197b7d"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "924ed9c22a9f2c0858cac40930c260cff9c91597a17240f35a205feaa7d92e6f",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e33a14dd09f2d1e3eaae3a91efed5f71016d343a879b5ac1b240b8808a4fc1df"
            ],
            "excerpt": "185.125.27.195",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "0683231285ac76cf23afcd482e8ec11326ed6c5b9e24757610b7872be31e9ffe",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "eba49fc7cb14959e276d363f06cb6fd985b518c242cebd4548874834ce74b33b"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR1",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-07-04T17:49:23+00:00",
                    "valid_to": "2026-10-02T17:49:22+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.195"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5a"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "264dbb2c5adda8c52861956c87cf825464f252fb5ba7f10300a26b3a95ad46d2",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ff0d9a8e26a0daa81cc574726c9f5452aa7370c0efe03d075e00fd91f1cce6e6"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        },
        {
            "id": "0b6bc0f3645bd32fb0ad0c84c510fb5a39e4a977d20050613d20fd8c64d10217",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fff111fe287ae02956798e30e188a31f0def112736a91a95253a2cacfe906b6f"
            ],
            "excerpt": [
                "require-corp"
            ],
            "first_seen_at": "2026-09-05T22:47:56+00:00",
            "last_seen_at": "2026-09-05T22:47:56+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}