{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.5.3",
    "pattern_version": "2026.09.4",
    "scan_id": "e294c2897ef4f221591ab14b",
    "domain": "webpion.com",
    "scanned_at": "2026-09-04T13:27:40+00:00",
    "evidence_count": 34,
    "evidence": [
        {
            "id": "3bf12834d9f5b91cab01202a374e8085fb59dea016ea5cb0069b219e2ef28c74",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "6d8bba61446461a70253feef5697af0f9bbdf674da4f3c0323635ba97bffbc38",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2ec2f8803eb2a029a41ca406e1ee8f3f70b02b259252148fb090fe18075afe08",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808"
            ],
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d"
            ],
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c"
            ],
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "2e9f6fdc56f5c8d5f14b61eb56ebce95cdf4d69dd2146589e60f453aeceb3bb0",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d2aec703bf8dcce76e5a7677cb39a4f31c0dea17fc0606d92f6125a227c138fc",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4"
            ],
            "excerpt": "2026-11-27T21:40:45+00:00",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e4ee4bce749cdabbc5c3ba7c5241246cb5bb769c0086c264685bc18f131980d1",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "375cb07cf515fa96bc82544f10bdd37394ee188c0e05c51825ed121a74268ae6",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288"
            ],
            "excerpt": [
                "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "86b490f5e02aafcd1aa05f1b6f28fa617edeab94caf774b296aecc55f6dd7592",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "72061b676f07607eb7c0dc1d9b9b0f158970c5f92c09a24f7a5a81fb65c63822"
            ],
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; script-src-attr 'none'; style-src 'self' 'nonce-33SgrcmoexSdhkS7x-D0P4A4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "66abf6ee82fac24f766f68fcab97ced2b4e438651cdca2b82ffb5c1c9f09655d",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357"
            ],
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "afbb1eb86dacd0e72b5d16912e4c7696465cbd6489036a8754bf387c164e265e",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "aaef4152b05d64093edd25bfd2d74d3ea1175973c81cd6e719e3e638ddee7850",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "167f5d1ae37bd9e0b89fd2094dd86cfe029e69f9f1c9340a58e4390cc5552207",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d19e5bb35a762cdb5837c902648345a45b368740a11228800beffffbea1bba63",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "98f686c846fbc9f7b036455809b585ac0cc951ea1c94e916e565eae7dd209c07"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a59cddd01fa574d07913ec35a6b699ae8e9b1fb38c92c6e91595921afd80d1cc",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "614b86f2e6875ec42cad1389835ebbfa90f8cca81e4e6f9b61a257f32557faa3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e50e69c5cae91ab7b111f6023b7dd3681f2c1d1cddc27c650b3204b3528bcfd4",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad"
            ],
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "48c15a422df5cff16491317244e91c5fb6fe33820ca3e632b7b8ed12350b6efb",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "541d6057648e0ce1729272a8ba31125db5673035d86900db7cf54a548f91611d",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "e137d9d8dbed4013f4e1462eeb00c7cc111b7371b1207cffbe30eb5bc54c8fab",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a34f66d98f036c4015213e0bb8280a32f23631ee8be6a763442a59bb9096ed83",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "114a667186a1976cabc1fdd42d4f5e4b217a6860465bd0ee60319cd71a0b4f44",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53"
            ],
            "excerpt": [
                "max-age=31536000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "d13cc8dfd1b0b83a333017b4ef1e9288f161973814ca63470b958c9c33243538",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "8975f5da10b317f8db033a28c33115c4b69f4f6a19d5aa70b7abec5877b6ce73",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        },
        {
            "id": "7e7eb33c7850cada79eeafbfcea86c0483c2b0b124492f778f543bf95dcae8ea",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fff81bbb6f0df2dcd27e2c11fe00886dfc299dd601aebde2762ccc51608bc9dc"
            ],
            "excerpt": {
                "evidence": "default-src 'none'; script-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; script-src-attr 'none'; style-src 'self' 'nonce-33sgrcmoexsdhks7x-d0p4a4'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                "severity": "high"
            },
            "first_seen_at": "2026-09-04T13:27:40+00:00",
            "last_seen_at": "2026-09-04T13:27:40+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}