{
    "export_type": "scanapse_domain_dossier",
    "schema_version": "1.0",
    "domain": "webpion.com",
    "measured_at": "2026-09-04T13:27:40+00:00",
    "engine_version": "2.5.3",
    "pattern_version": "2026.09.4",
    "summary": [
        "4 observations publiques sont documentées dans ce dossier.",
        "1 dépendances publiques structurantes sont visibles.",
        "2 évolutions utiles sont retenues depuis la lecture précédente.",
        "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
    ],
    "knowledge_states": {
        "observed": 4,
        "deduced": 0,
        "to_confirm": 0,
        "not_observable": 2,
        "contradictory": 0,
        "untested": 2
    },
    "short_view": [
        {
            "key": "identity_governance",
            "label": "Identité et gouvernance",
            "items": [
                {
                    "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72",
                    "title": "Depends on provider",
                    "value": "Infomaniak",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                        "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                        "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
                    ],
                    "rationale": "independent_provider_evidence_converges"
                },
                {
                    "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
                    "title": "Canary detection",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "canary_detection_not_enabled"
                },
                {
                    "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
                    "title": "Origin host",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "public_edge_does_not_reveal_origin"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "infrastructure_transport",
            "label": "Infrastructure et transport",
            "items": [
                {
                    "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6",
                    "title": "Tls issuer",
                    "value": "C = US, O = Let's Encrypt, CN = YR2",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc"
                    ],
                    "rationale": "certificate_observed"
                },
                {
                    "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
                    "title": "Post quantum tls",
                    "value": null,
                    "state": "untested",
                    "state_label": "Non testé",
                    "evidence_ids": [],
                    "rationale": "pq_tls_client_not_enabled"
                }
            ],
            "states": {
                "observed": 1,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 1
            }
        },
        {
            "key": "mail_trust",
            "label": "Messagerie et confiance",
            "items": [
                {
                    "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217",
                    "title": "Dmarc policy",
                    "value": "reject",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b"
                    ],
                    "rationale": "mail_policy_observed"
                },
                {
                    "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570",
                    "title": "Spf policy",
                    "value": "hardfail",
                    "state": "observed",
                    "state_label": "Observé",
                    "evidence_ids": [
                        "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744"
                    ],
                    "rationale": "mail_policy_observed"
                }
            ],
            "states": {
                "observed": 2,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 0,
                "contradictory": 0,
                "untested": 0
            }
        },
        {
            "key": "dependencies_exposure",
            "label": "Dépendances et exposition",
            "items": [
                {
                    "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
                    "title": "Data location",
                    "value": null,
                    "state": "not_observable",
                    "state_label": "Non observable de l'extérieur",
                    "evidence_ids": [],
                    "rationale": "provider_metadata_does_not_prove_processing_location"
                }
            ],
            "states": {
                "observed": 0,
                "deduced": 0,
                "to_confirm": 0,
                "not_observable": 1,
                "contradictory": 0,
                "untested": 0
            }
        }
    ],
    "timeline": {
        "first_observed_at": "2026-09-04T13:23:38+00:00",
        "last_observed_at": "2026-09-04T13:27:40+00:00",
        "reference_state": "compared",
        "message": "Comparé à la lecture précédente conservée",
        "counts": {
            "appeared": 0,
            "modified": 2,
            "stable": 33,
            "disappeared": 0
        },
        "changes": [
            {
                "status": "modified",
                "label": "Modifié",
                "title": "Http header",
                "before": [
                    "default-src 'none'; script-src 'self' 'nonce-MG0vlDgJLlKkxaT1ydAFFUPh'; script-src-attr 'none'; style-src 'self' 'nonce-MG0vlDgJLlKkxaT1ydAFFUPh'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
                ],
                "after": [
                    "default-src 'none'; script-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; script-src-attr 'none'; style-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
                ],
                "direction": "indeterminate"
            },
            {
                "status": "modified",
                "label": "Modifié",
                "title": "Module finding",
                "before": {
                    "evidence": "default-src 'none'; script-src 'self' 'nonce-mg0vldgjllkkxat1ydaffuph'; script-src-attr 'none'; style-src 'self' 'nonce-mg0vldgjllkkxat1ydaffuph'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                    "severity": "high"
                },
                "after": {
                    "evidence": "default-src 'none'; script-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; script-src-attr 'none'; style-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                    "severity": "high"
                },
                "direction": "indeterminate"
            }
        ],
        "history_count": 2
    },
    "observations": [
        {
            "id": "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6",
            "type": "mail_policy_flag",
            "subject": "webpion.com",
            "predicate": "tls_reporting",
            "value": false,
            "source": "mail_tls_reporting",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "headers:coep_missing",
            "value": {
                "evidence": null,
                "severity": "info"
            },
            "source": "finding_coep_missing",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082",
            "type": "dns_address",
            "subject": "webpion.com",
            "predicate": "resolves_to",
            "value": "2001:1600::aaaa:0:0:80:5b",
            "source": "dns_aaaa",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808",
            "type": "dmarc_record",
            "subject": "webpion.com",
            "predicate": "publishes_dmarc",
            "value": "v=DMARC1; p=reject;",
            "source": "dns_dmarc",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d",
            "type": "dns_nameserver",
            "subject": "webpion.com",
            "predicate": "uses_nameserver",
            "value": "ns11.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c",
            "type": "dns_nameserver",
            "subject": "webpion.com",
            "predicate": "uses_nameserver",
            "value": "ns12.infomaniak.ch",
            "source": "dns_ns",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b",
            "type": "tls_issuer",
            "subject": "webpion.com",
            "predicate": "issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "source": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c",
            "type": "spf_policy",
            "subject": "webpion.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "source": "mail_spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "cross-origin-resource-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-resource-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4",
            "type": "tls_valid_to",
            "subject": "webpion.com",
            "predicate": "valid_to",
            "value": "2026-11-27T21:40:45+00:00",
            "source": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "dns:caa_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_caa_missing",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "permissions-policy",
            "value": [
                "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "source": "header_permissions-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "72061b676f07607eb7c0dc1d9b9b0f158970c5f92c09a24f7a5a81fb65c63822",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "content-security-policy",
            "value": [
                "default-src 'none'; script-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; script-src-attr 'none'; style-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
            ],
            "source": "header_content-security-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "mail_trust:mail_tls_rpt_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_tls_rpt_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357",
            "type": "dns_address",
            "subject": "webpion.com",
            "predicate": "resolves_to",
            "value": "185.125.27.197",
            "source": "dns_a",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618",
            "type": "mail_policy_flag",
            "subject": "webpion.com",
            "predicate": "mta_sts_declared",
            "value": false,
            "source": "mail_mta_sts_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "server",
            "value": [
                "Apache"
            ],
            "source": "header_server",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "mail_trust:mail_mta_sts_missing",
            "value": {
                "evidence": null,
                "severity": "low"
            },
            "source": "finding_mail_mta_sts_missing",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca",
            "type": "mail_exchanger",
            "subject": "webpion.com",
            "predicate": "uses_mail_exchanger",
            "value": "mta-gw.infomaniak.ch",
            "source": "dns_mx",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819",
            "type": "dependency_provider",
            "subject": "webpion.com",
            "predicate": "depends_on_provider",
            "value": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "source": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "98f686c846fbc9f7b036455809b585ac0cc951ea1c94e916e565eae7dd209c07",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "dns:dnssec_not_tested",
            "value": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "source": "finding_dnssec_not_tested",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "x-frame-options",
            "value": [
                "DENY"
            ],
            "source": "header_x-frame-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f",
            "type": "dmarc_policy",
            "subject": "webpion.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "source": "mail_dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "cross-origin-opener-policy",
            "value": [
                "same-origin"
            ],
            "source": "header_cross-origin-opener-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "referrer-policy",
            "value": [
                "no-referrer"
            ],
            "source": "header_referrer-policy",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "dns:dns_single_provider",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "source": "finding_dns_single_provider",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba",
            "type": "spf_record",
            "subject": "webpion.com",
            "predicate": "publishes_spf",
            "value": "v=spf1 include:spf.infomaniak.ch -all",
            "source": "dns_spf",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "mail_trust:mail_single_mx",
            "value": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "source": "finding_mail_single_mx",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "x-content-type-options",
            "value": [
                "nosniff"
            ],
            "source": "header_x-content-type-options",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103",
            "type": "technology",
            "subject": "webpion.com",
            "predicate": "uses_technology",
            "value": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "source": "technology_detected",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53",
            "type": "http_header",
            "subject": "webpion.com",
            "predicate": "strict-transport-security",
            "value": [
                "max-age=31536000; includeSubDomains; preload"
            ],
            "source": "header_strict-transport-security",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "resilience:dns_concentration",
            "value": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "source": "finding_dns_concentration",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78",
            "type": "mail_policy_flag",
            "subject": "webpion.com",
            "predicate": "bimi_declared",
            "value": false,
            "source": "mail_bimi_declared",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "fff81bbb6f0df2dcd27e2c11fe00886dfc299dd601aebde2762ccc51608bc9dc",
            "type": "module_finding",
            "subject": "webpion.com",
            "predicate": "headers:csp_unsafe_inline",
            "value": {
                "evidence": "default-src 'none'; script-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; script-src-attr 'none'; style-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                "severity": "high"
            },
            "source": "finding_csp_unsafe_inline",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observed_at": "2026-09-04T13:27:40+00:00"
        }
    ],
    "claims": [
        {
            "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
            "subject": "webpion.com",
            "predicate": "data_location",
            "value": null,
            "state": "unknown",
            "rationale": "provider_metadata_does_not_prove_processing_location",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6",
            "subject": "webpion.com",
            "predicate": "tls_issuer",
            "value": "C = US, O = Let's Encrypt, CN = YR2",
            "state": "observed",
            "rationale": "certificate_observed",
            "evidence_ids": [
                "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217",
            "subject": "webpion.com",
            "predicate": "dmarc_policy",
            "value": "reject",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72",
            "subject": "webpion.com",
            "predicate": "depends_on_provider",
            "value": "Infomaniak",
            "state": "corroborated",
            "rationale": "independent_provider_evidence_converges",
            "evidence_ids": [
                "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
            "subject": "webpion.com",
            "predicate": "post_quantum_tls",
            "value": null,
            "state": "untested",
            "rationale": "pq_tls_client_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
            "subject": "webpion.com",
            "predicate": "canary_detection",
            "value": null,
            "state": "untested",
            "rationale": "canary_detection_not_enabled",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570",
            "subject": "webpion.com",
            "predicate": "spf_policy",
            "value": "hardfail",
            "state": "observed",
            "rationale": "mail_policy_observed",
            "evidence_ids": [
                "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        },
        {
            "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
            "subject": "webpion.com",
            "predicate": "origin_host",
            "value": null,
            "state": "unknown",
            "rationale": "public_edge_does_not_reveal_origin",
            "evidence_ids": [],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00",
            "active": true
        }
    ],
    "evidence": [
        {
            "id": "3bf12834d9f5b91cab01202a374e8085fb59dea016ea5cb0069b219e2ef28c74",
            "observation_ids": [
                "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "6d8bba61446461a70253feef5697af0f9bbdf674da4f3c0323635ba97bffbc38",
            "observation_ids": [
                "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5",
            "observation_ids": [
                "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2ec2f8803eb2a029a41ca406e1ee8f3f70b02b259252148fb090fe18075afe08",
            "observation_ids": [
                "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808"
            ],
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
            "observation_ids": [
                "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
            "observation_ids": [
                "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c"
            ],
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc",
            "observation_ids": [
                "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b"
            ],
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744",
            "observation_ids": [
                "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c"
            ],
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2e9f6fdc56f5c8d5f14b61eb56ebce95cdf4d69dd2146589e60f453aeceb3bb0",
            "observation_ids": [
                "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d2aec703bf8dcce76e5a7677cb39a4f31c0dea17fc0606d92f6125a227c138fc",
            "observation_ids": [
                "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4"
            ],
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "excerpt": "2026-11-27T21:40:45+00:00",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e4ee4bce749cdabbc5c3ba7c5241246cb5bb769c0086c264685bc18f131980d1",
            "observation_ids": [
                "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "375cb07cf515fa96bc82544f10bdd37394ee188c0e05c51825ed121a74268ae6",
            "observation_ids": [
                "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "86b490f5e02aafcd1aa05f1b6f28fa617edeab94caf774b296aecc55f6dd7592",
            "observation_ids": [
                "72061b676f07607eb7c0dc1d9b9b0f158970c5f92c09a24f7a5a81fb65c63822"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; script-src-attr 'none'; style-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "66abf6ee82fac24f766f68fcab97ced2b4e438651cdca2b82ffb5c1c9f09655d",
            "observation_ids": [
                "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3",
            "observation_ids": [
                "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357"
            ],
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "afbb1eb86dacd0e72b5d16912e4c7696465cbd6489036a8754bf387c164e265e",
            "observation_ids": [
                "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "aaef4152b05d64093edd25bfd2d74d3ea1175973c81cd6e719e3e638ddee7850",
            "observation_ids": [
                "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "167f5d1ae37bd9e0b89fd2094dd86cfe029e69f9f1c9340a58e4390cc5552207",
            "observation_ids": [
                "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903",
            "observation_ids": [
                "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca"
            ],
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631",
            "observation_ids": [
                "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819"
            ],
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d19e5bb35a762cdb5837c902648345a45b368740a11228800beffffbea1bba63",
            "observation_ids": [
                "98f686c846fbc9f7b036455809b585ac0cc951ea1c94e916e565eae7dd209c07"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a59cddd01fa574d07913ec35a6b699ae8e9b1fb38c92c6e91595921afd80d1cc",
            "observation_ids": [
                "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b",
            "observation_ids": [
                "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f"
            ],
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "614b86f2e6875ec42cad1389835ebbfa90f8cca81e4e6f9b61a257f32557faa3",
            "observation_ids": [
                "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e50e69c5cae91ab7b111f6023b7dd3681f2c1d1cddc27c650b3204b3528bcfd4",
            "observation_ids": [
                "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "48c15a422df5cff16491317244e91c5fb6fe33820ca3e632b7b8ed12350b6efb",
            "observation_ids": [
                "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798"
            ],
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "541d6057648e0ce1729272a8ba31125db5673035d86900db7cf54a548f91611d",
            "observation_ids": [
                "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba"
            ],
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e137d9d8dbed4013f4e1462eeb00c7cc111b7371b1207cffbe30eb5bc54c8fab",
            "observation_ids": [
                "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc"
            ],
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a34f66d98f036c4015213e0bb8280a32f23631ee8be6a763442a59bb9096ed83",
            "observation_ids": [
                "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e",
            "observation_ids": [
                "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103"
            ],
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "114a667186a1976cabc1fdd42d4f5e4b217a6860465bd0ee60319cd71a0b4f44",
            "observation_ids": [
                "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53"
            ],
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": [
                "max-age=31536000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d13cc8dfd1b0b83a333017b4ef1e9288f161973814ca63470b958c9c33243538",
            "observation_ids": [
                "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4"
            ],
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "8975f5da10b317f8db033a28c33115c4b69f4f6a19d5aa70b7abec5877b6ce73",
            "observation_ids": [
                "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78"
            ],
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "7e7eb33c7850cada79eeafbfcea86c0483c2b0b124492f778f543bf95dcae8ea",
            "observation_ids": [
                "fff81bbb6f0df2dcd27e2c11fe00886dfc299dd601aebde2762ccc51608bc9dc"
            ],
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "excerpt": {
                "evidence": "default-src 'none'; script-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; script-src-attr 'none'; style-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        }
    ],
    "limitations": [
        "public_edge_does_not_reveal_origin",
        "provider_metadata_does_not_prove_processing_location",
        "pq_tls_client_not_enabled",
        "canary_detection_not_enabled"
    ],
    "evidence_qualification": "preuve technique horodatée et vérifiable",
    "sha256": "e079896477a67f5458fe9c8183c4da00ecdf8d40dc7f4f97092d0b3e2f3d64df"
}