{
    "export_type": "scanapse_public_evidence",
    "schema_version": "2.0",
    "engine_version": "2.9.2.1",
    "pattern_version": "2026.09.4",
    "scan_id": "d41c4fb35e35288d087c21c2",
    "domain": "webpion.com",
    "scanned_at": "2026-09-06T01:57:48+00:00",
    "evidence_count": 41,
    "evidence": [
        {
            "id": "a0918d1e0b9fe99a95bf068f6d94912d82cccc28c2c302679b35c7f514714223",
            "evidence_type": "post_quantum_tls",
            "collector": "pq_tls_probe",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "006f8d40a9c39e1de71b50c1ce66ca732a59532335162cc7948f14cf59fabc7d"
            ],
            "excerpt": {
                "capability": {
                    "capable": false,
                    "groups": [],
                    "reason": "proc_open_unavailable"
                },
                "group": null,
                "reason": "client_capability_unavailable",
                "state": "untested"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "3bf12834d9f5b91cab01202a374e8085fb59dea016ea5cb0069b219e2ef28c74",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "0db156dd3991cb14f1a867a589f0fa1ddc6fd61cb8123feff1c23423138209b1",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0dcce1b8e84bb4439836abcdff86f0dfa3c0f0c75687ba82856f8f0a0402feec"
            ],
            "excerpt": [
                "default-src 'none'; script-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; script-src-attr 'none'; style-src 'self' 'nonce-YALGvzlMA0NIRkXEOHGRcwdE'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "c414b54b1e5345f96b5805f092dd1c9033f7f74e5fa074a0d112635db33c898e",
            "evidence_type": "canary_signal",
            "collector": "canary_passive",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0ec341aaa0bdb285dde0faa0068b80c4dc525b5b713eca592b4a4266a7a8ac0f"
            ],
            "excerpt": {
                "matches": [],
                "reason": "no_known_passive_signature_observed",
                "signature_version": "2026.09.1",
                "state": "not_observed"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "6d8bba61446461a70253feef5697af0f9bbdf674da4f3c0323635ba97bffbc38",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "318e87ad28136a08b8c01f098930124a5e809ebb8eab59e7e78d032724ca8ff5",
            "evidence_type": "dnssec_evidence",
            "collector": "dnssec_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "166d2562b76f5c2c8efe30038685d1f827267bab3c1235eb61d7000d8ea254c3"
            ],
            "excerpt": {
                "chain_consistency": {
                    "reason": "insufficient_record_evidence",
                    "state": "untested"
                },
                "dnskey": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "ds": {
                    "query_supported": false,
                    "records": [],
                    "state": "untested"
                },
                "validation": {
                    "reason": "no_validating_resolver",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082"
            ],
            "excerpt": "2001:1600::aaaa:0:0:80:5b",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "2ec2f8803eb2a029a41ca406e1ee8f3f70b02b259252148fb090fe18075afe08",
            "evidence_type": "dmarc_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808"
            ],
            "excerpt": "v=DMARC1; p=reject;",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "4ae531f63461053f6b156364ada8a45d09c26704367bde3b64478537c2500584",
            "evidence_type": "module_finding",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "1dd38c5f9958c2c3205599c00cde3c247cc5f23c8530efba659cbf6798d7eb14"
            ],
            "excerpt": {
                "evidence": "default-src 'none'; script-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; script-src-attr 'none'; style-src 'self' 'nonce-yalgvzlma0nirkxeohgrcwde'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                "severity": "high"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d"
            ],
            "excerpt": "ns11.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
            "evidence_type": "dns_nameserver",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c"
            ],
            "excerpt": "ns12.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc",
            "evidence_type": "tls_issuer",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b"
            ],
            "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744",
            "evidence_type": "spf_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c"
            ],
            "excerpt": "hardfail",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "cf44695149359b324776e272fc9d6c2805611e11fe11183cc361c8b8c454a548",
            "evidence_type": "openpgp_discovery",
            "collector": "openpgp_discovery",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "3f8b0addacfc7632c150b50d0028bd17ea1241a18008eacac6c6b962757e7ddd"
            ],
            "excerpt": {
                "dns_openpgpkey": {
                    "reason": "recipient_identity_required",
                    "state": "untested"
                },
                "fingerprint": null,
                "mechanisms": [],
                "reason": "security_txt_encryption_not_observed",
                "state": "not_observed",
                "wkd": {
                    "reason": "wkd_not_fetched_without_identity",
                    "state": "untested"
                }
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "2e9f6fdc56f5c8d5f14b61eb56ebce95cdf4d69dd2146589e60f453aeceb3bb0",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "d2aec703bf8dcce76e5a7677cb39a4f31c0dea17fc0606d92f6125a227c138fc",
            "evidence_type": "tls_valid_to",
            "collector": "tls",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4"
            ],
            "excerpt": "2026-11-27T21:40:45+00:00",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "e4ee4bce749cdabbc5c3ba7c5241246cb5bb769c0086c264685bc18f131980d1",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "375cb07cf515fa96bc82544f10bdd37394ee188c0e05c51825ed121a74268ae6",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288"
            ],
            "excerpt": [
                "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "87851603350dfa7478ae6756ad468b3b7509fd45434f4b7355158ad9b0013ef4",
            "evidence_type": "mail_transport_evidence",
            "collector": "mail_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7743262a052424e3c2de439fb7b850a0c9bfb3174003604080a0fa5924e50fc1"
            ],
            "excerpt": {
                "bimi": {
                    "records": [],
                    "state": "not_observed"
                },
                "dane_tlsa": {
                    "query_supported": false,
                    "reason": "tlsa_query_not_available",
                    "records": [],
                    "state": "untested"
                },
                "dkim": {
                    "reason": "no_selector_bruteforce",
                    "state": "untested"
                },
                "mta_sts": {
                    "policy": null,
                    "policy_state": "untested",
                    "records": [],
                    "state": "not_observed"
                },
                "tls_rpt": {
                    "records": [],
                    "state": "not_observed"
                }
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "66abf6ee82fac24f766f68fcab97ced2b4e438651cdca2b82ffb5c1c9f09655d",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3",
            "evidence_type": "dns_address",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357"
            ],
            "excerpt": "185.125.27.197",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "afbb1eb86dacd0e72b5d16912e4c7696465cbd6489036a8754bf387c164e265e",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "aaef4152b05d64093edd25bfd2d74d3ea1175973c81cd6e719e3e638ddee7850",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb"
            ],
            "excerpt": [
                "Apache"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "167f5d1ae37bd9e0b89fd2094dd86cfe029e69f9f1c9340a58e4390cc5552207",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6"
            ],
            "excerpt": {
                "evidence": null,
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903",
            "evidence_type": "mail_exchanger",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca"
            ],
            "excerpt": "mta-gw.infomaniak.ch",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631",
            "evidence_type": "dependency_provider",
            "collector": "dependencies",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819"
            ],
            "excerpt": {
                "critical": true,
                "hosts": [
                    "mta-gw.infomaniak.ch",
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "id": "infomaniak",
                "known": true,
                "name": "Infomaniak",
                "observation_count": 3,
                "services": [
                    "dns",
                    "hosting",
                    "mail"
                ],
                "tracker": false
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "a59cddd01fa574d07913ec35a6b699ae8e9b1fb38c92c6e91595921afd80d1cc",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c"
            ],
            "excerpt": [
                "DENY"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b",
            "evidence_type": "dmarc_policy",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f"
            ],
            "excerpt": "reject",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "614b86f2e6875ec42cad1389835ebbfa90f8cca81e4e6f9b61a257f32557faa3",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266"
            ],
            "excerpt": [
                "same-origin"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "e50e69c5cae91ab7b111f6023b7dd3681f2c1d1cddc27c650b3204b3528bcfd4",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad"
            ],
            "excerpt": [
                "no-referrer"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "48c15a422df5cff16491317244e91c5fb6fe33820ca3e632b7b8ed12350b6efb",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "541d6057648e0ce1729272a8ba31125db5673035d86900db7cf54a548f91611d",
            "evidence_type": "spf_record",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba"
            ],
            "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "c342938b1330c9220885712e4635602572c13658e9dd7e8cffe37f3a9aa06e3a",
            "evidence_type": "modern_transport_evidence",
            "collector": "modern_transport",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d84d0fd937caa48cf51ac673a4ad082df891bf4d252673eb7a528e326fcccb28"
            ],
            "excerpt": {
                "alpn": {
                    "state": "untested",
                    "value": ""
                },
                "certificate": {
                    "cipher": "",
                    "issuer": "C = US, O = Let's Encrypt, CN = YR2",
                    "protocol": "",
                    "san_count": 0,
                    "state": "observed",
                    "valid_from": "2026-08-29T21:40:46+00:00",
                    "valid_to": "2026-11-27T21:40:45+00:00"
                },
                "http2": {
                    "negotiated": "3",
                    "state": "untested"
                },
                "http3_advertised": {
                    "alt_svc": "",
                    "state": "not_observed"
                },
                "ipv4": {
                    "addresses": [
                        "185.125.27.197"
                    ],
                    "state": "observed"
                },
                "ipv6": {
                    "addresses": [
                        "2001:1600::aaaa:0:0:80:5b"
                    ],
                    "state": "observed"
                }
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "e137d9d8dbed4013f4e1462eeb00c7cc111b7371b1207cffbe30eb5bc54c8fab",
            "evidence_type": "module_finding",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc"
            ],
            "excerpt": {
                "evidence": [
                    {
                        "host": "mta-gw.infomaniak.ch",
                        "priority": 5
                    }
                ],
                "severity": "low"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "a34f66d98f036c4015213e0bb8280a32f23631ee8be6a763442a59bb9096ed83",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5"
            ],
            "excerpt": [
                "nosniff"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "d5c05bb364c59c937923311786632f862ca6cc6d5f7b07820d8cddd5d85e1f34",
            "evidence_type": "module_finding",
            "collector": "dns",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "dd2285acdda87b152e1abdd20020d1cbc699db039911d8530ca54ed154017ea9"
            ],
            "excerpt": {
                "evidence": {
                    "reason": "No external validating resolver is used; cryptographic validation is intentionally not inferred.",
                    "status": "not_tested"
                },
                "severity": "info"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e",
            "evidence_type": "technology",
            "collector": "technology",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103"
            ],
            "excerpt": {
                "name": "Apache",
                "version": "",
                "version_exposed": false
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "4795fb2bdb10955b0b3c6ea966aab7ff2c9245ce1eb64b4cd535d80532def555",
            "evidence_type": "csp_evidence",
            "collector": "csp_depth",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ec249615f7307e043d74152c0105793ece2676c68e80bcd7d47ea30c19ffbcb0"
            ],
            "excerpt": {
                "enforced": true,
                "frame_ancestors": true,
                "hash_present": false,
                "nonce_present": true,
                "object_src": true,
                "report_only": false,
                "reporting_endpoint": false,
                "state": "observed",
                "strict_dynamic": false,
                "trusted_types": false
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "114a667186a1976cabc1fdd42d4f5e4b217a6860465bd0ee60319cd71a0b4f44",
            "evidence_type": "http_header",
            "collector": "headers",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53"
            ],
            "excerpt": [
                "max-age=31536000; includeSubDomains; preload"
            ],
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "d13cc8dfd1b0b83a333017b4ef1e9288f161973814ca63470b958c9c33243538",
            "evidence_type": "module_finding",
            "collector": "resilience",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4"
            ],
            "excerpt": {
                "evidence": [
                    "ns11.infomaniak.ch",
                    "ns12.infomaniak.ch"
                ],
                "severity": "medium"
            },
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        },
        {
            "id": "8975f5da10b317f8db033a28c33115c4b69f4f6a19d5aa70b7abec5877b6ce73",
            "evidence_type": "mail_policy_flag",
            "collector": "mail_trust",
            "rule_version": "2026.09.4",
            "observation_ids": [
                "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78"
            ],
            "excerpt": false,
            "first_seen_at": "2026-09-06T01:57:48+00:00",
            "last_seen_at": "2026-09-06T01:57:48+00:00"
        }
    ],
    "methodology": {
        "model": "evidence_first",
        "version": "2.3.1",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}