{
    "schema_version": "2.0",
    "engine_version": "2.6.0.1",
    "pattern_version": "2026.09.4",
    "scan_id": "a386543eeb696bbc36b9c8da",
    "domain": "webpion.com",
    "scanned_at": "2026-09-04T19:30:56+00:00",
    "duration_ms": 153.37,
    "entity": {
        "id": "5ddcac889405a2a37ffc12e8a5a6f8eec9ac2ac0760e0e4c27408f6fb3f8d3c8",
        "display_name": "webpion.com",
        "slug": "webpion-com",
        "entity_type": "domain_subject",
        "auto_created": true,
        "primary_asset": "webpion.com"
    },
    "scope": {
        "mode": "passive",
        "coverage": "full",
        "access_level": "full",
        "access_reason": "public_document_available",
        "requests": 2,
        "homepage_only": true,
        "javascript_executed": false,
        "ports_scanned": false,
        "private_networks_blocked": true,
        "protection_bypassed": false,
        "max_body_bytes": 1572864,
        "scan_budget_seconds": 24,
        "budget_exhausted": false,
        "transport": "curl_with_socket_fallback"
    },
    "trust_profile": {
        "methodology_version": "2.1.0",
        "knowledge_coverage": 84,
        "dimensions": {
            "security": {
                "quality": 91,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 3,
                "unknown_count": 0
            },
            "privacy": {
                "quality": 100,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "dependencies_control": {
                "quality": 100,
                "coverage": 100,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 2
            },
            "resilience": {
                "quality": 90,
                "coverage": 35,
                "band": "non_conclusive",
                "conclusive": false,
                "evidence_count": 1,
                "unknown_count": 1
            },
            "transparency": {
                "quality": 100,
                "coverage": 70,
                "band": "very_favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            },
            "mail": {
                "quality": 82,
                "coverage": 100,
                "band": "favorable",
                "conclusive": true,
                "evidence_count": 1,
                "unknown_count": 0
            }
        },
        "global": {
            "quality": 95,
            "coverage": 84,
            "secondary": true
        }
    },
    "signals": [
        {
            "id": "104a396a799b0851d32ef88b4f2465531ad8c079d6a725752f053e57ff8c7655",
            "key": "mail_dmarc_policy",
            "category": "mail",
            "importance": "medium",
            "direction": "favorable",
            "state": "observed",
            "title": {
                "fr": "Politique DMARC observée",
                "en": "Observed DMARC policy"
            },
            "explanation": {
                "fr": "La politique DMARC publiée est reject.",
                "en": "The published DMARC policy is reject."
            },
            "limitations": {
                "fr": "Ce signal ne prouve pas à lui seul l’alignement réel de tous les flux de messagerie.",
                "en": "This signal alone does not prove actual alignment for every mail flow."
            },
            "evidence_ids": [
                "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b"
            ],
            "change_status": "stable"
        },
        {
            "id": "39dd8f577fc2558a67d9b916c01c879c092d77723c5d960b56a1502d875d2480",
            "key": "data_location_unknown",
            "category": "dependencies_control",
            "importance": "medium",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Localisation effective des données non déterminable",
                "en": "Effective data location cannot be determined"
            },
            "explanation": {
                "fr": "Les observations publiques ne permettent pas d’établir où les données sont réellement traitées ou stockées.",
                "en": "Public observations cannot establish where data is actually processed or stored."
            },
            "limitations": {
                "fr": "Le siège d’un fournisseur, une IP ou un CDN ne constituent pas une preuve de localisation des données.",
                "en": "A provider headquarters, an IP address, or a CDN is not proof of data location."
            },
            "evidence_ids": [],
            "change_status": "stable"
        },
        {
            "id": "4c4a4283816614a9bbffa7b571a0f881632a86f46345a7f063060152fa70b9b9",
            "key": "origin_host_unknown",
            "category": "dependencies_control",
            "importance": "low",
            "direction": "indeterminate",
            "state": "unknown",
            "title": {
                "fr": "Hébergement d’origine non déterminable",
                "en": "Origin hosting cannot be determined"
            },
            "explanation": {
                "fr": "Un service de périphérie ou un reverse proxy peut masquer l’infrastructure d’origine.",
                "en": "An edge service or reverse proxy can hide origin infrastructure."
            },
            "limitations": {
                "fr": "Une présence à la périphérie ne doit pas être assimilée à l’hébergement d’origine.",
                "en": "Edge presence must not be treated as origin hosting."
            },
            "evidence_ids": [],
            "change_status": "stable"
        },
        {
            "id": "ddf9c90948bf7c63273b4255402551f7881968754c60d1fc3fc555900541b1f7",
            "key": "visible_provider_dependencies",
            "category": "dependencies_control",
            "importance": "low",
            "direction": "neutral",
            "state": "corroborated",
            "title": {
                "fr": "Dépendances fournisseurs visibles",
                "en": "Visible provider dependencies"
            },
            "explanation": {
                "fr": "1 fournisseur(s) sont reliés au périmètre observable.",
                "en": "1 provider(s) are linked to the observable scope."
            },
            "limitations": {
                "fr": "La visibilité d’un fournisseur ne décrit ni le contrat, ni les sous-traitants, ni la localisation réelle des traitements.",
                "en": "Provider visibility does not describe contracts, subprocessors, or actual processing location."
            },
            "evidence_ids": [
                "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
            ],
            "change_status": "stable"
        }
    ],
    "changes": [],
    "knowledge": {
        "claims": [
            {
                "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
                "subject": "webpion.com",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6",
                "subject": "webpion.com",
                "predicate": "tls_issuer",
                "value": "C = US, O = Let's Encrypt, CN = YR2",
                "state": "observed",
                "rationale": "certificate_observed",
                "evidence_ids": [
                    "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217",
                "subject": "webpion.com",
                "predicate": "dmarc_policy",
                "value": "reject",
                "state": "observed",
                "rationale": "mail_policy_observed",
                "evidence_ids": [
                    "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72",
                "subject": "webpion.com",
                "predicate": "depends_on_provider",
                "value": "Infomaniak",
                "state": "corroborated",
                "rationale": "independent_provider_evidence_converges",
                "evidence_ids": [
                    "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                    "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                    "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
                "subject": "webpion.com",
                "predicate": "post_quantum_tls",
                "value": null,
                "state": "untested",
                "rationale": "pq_tls_client_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
                "subject": "webpion.com",
                "predicate": "canary_detection",
                "value": null,
                "state": "untested",
                "rationale": "canary_detection_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570",
                "subject": "webpion.com",
                "predicate": "spf_policy",
                "value": "hardfail",
                "state": "observed",
                "rationale": "mail_policy_observed",
                "evidence_ids": [
                    "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
                "subject": "webpion.com",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            }
        ],
        "relations": [
            {
                "id": "1ed1270afb9a813ff927271109f538a3859cb717b192be40f5be76aac07b7312",
                "subject": "webpion.com",
                "predicate": "uses_nameserver",
                "object": "ns12.infomaniak.ch",
                "state": "observed",
                "evidence_ids": [
                    "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "297fafe4664e84ea14aeb65354cc0a7c2475e1cbdaff524b4bb59efd44fb6b8d",
                "subject": "webpion.com",
                "predicate": "depends_on_provider",
                "object": "Infomaniak",
                "state": "corroborated",
                "evidence_ids": [
                    "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                    "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                    "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "39f004c59b40aebe47576be7cd1523989614914765b0e7216bdd016e0ddb812e",
                "subject": "webpion.com",
                "predicate": "resolves_to",
                "object": "185.125.27.197",
                "state": "observed",
                "evidence_ids": [
                    "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "671024d8185ae0e90d25cf795e45b861c390ff0892288b8924313b198f1c70c1",
                "subject": "webpion.com",
                "predicate": "uses_technology",
                "object": "Apache",
                "state": "observed",
                "evidence_ids": [
                    "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "6c80561ca7dce0648bbf17af4d8ca0ec7f87c32d89437cb051fe8c4821ef3331",
                "subject": "webpion.com",
                "predicate": "uses_mail_exchanger",
                "object": "mta-gw.infomaniak.ch",
                "state": "observed",
                "evidence_ids": [
                    "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "cac66792356959af1dfd23c1007802d3a348bfd472bc5dc175a0e939bddc26ce",
                "subject": "webpion.com",
                "predicate": "resolves_to",
                "object": "2001:1600::aaaa:0:0:80:5b",
                "state": "observed",
                "evidence_ids": [
                    "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "fefcf31f08bebdbd0e3f11f241f40ed250c8f762a9e45d297ae06629dbbd5204",
                "subject": "webpion.com",
                "predicate": "uses_nameserver",
                "object": "ns11.infomaniak.ch",
                "state": "observed",
                "evidence_ids": [
                    "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            }
        ],
        "unknowns": [
            {
                "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
                "subject": "webpion.com",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
                "subject": "webpion.com",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
                "subject": "webpion.com",
                "predicate": "post_quantum_tls",
                "value": null,
                "state": "untested",
                "rationale": "pq_tls_client_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
                "subject": "webpion.com",
                "predicate": "canary_detection",
                "value": null,
                "state": "untested",
                "rationale": "canary_detection_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            }
        ],
        "evidence": [
            {
                "id": "3bf12834d9f5b91cab01202a374e8085fb59dea016ea5cb0069b219e2ef28c74",
                "observation_ids": [
                    "0573804b3e5a8b22683cdac8b2f1ef363d54a665808d979d2039d74d224ca3d6"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "6d8bba61446461a70253feef5697af0f9bbdf674da4f3c0323635ba97bffbc38",
                "observation_ids": [
                    "0f99e3bf18d004f223993be3be74c01632fcfa37624bcd25befd9c5b59b08c67"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "info"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "c5f3a7ddf44b7fb5ede7bde44a624d12a784c7d68efe11bc22416d3ef2e51fd5",
                "observation_ids": [
                    "19270ff6421f9b849bbb382566623419057f92ee5860b804eab4f19d160c1082"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "2001:1600::aaaa:0:0:80:5b",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "2ec2f8803eb2a029a41ca406e1ee8f3f70b02b259252148fb090fe18075afe08",
                "observation_ids": [
                    "1d79f1f9d274a026ffce459b5f16baab307f01539fbcff37d433c102e5591808"
                ],
                "evidence_type": "dmarc_record",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "v=DMARC1; p=reject;",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                "observation_ids": [
                    "2c991ee14b003bfc6608a036f84c759463f65230c368f1e72c17512d8afd5b4d"
                ],
                "evidence_type": "dns_nameserver",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "ns11.infomaniak.ch",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                "observation_ids": [
                    "2ea05b67a8832e768a7b44555f4b8b487b47d9d709eb646f556f4f6b6ac27f5c"
                ],
                "evidence_type": "dns_nameserver",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "ns12.infomaniak.ch",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc",
                "observation_ids": [
                    "31e08dd1c366e7ab5f945e1316cc680c090ac8aadea592ac6c1402fcc8c5c54b"
                ],
                "evidence_type": "tls_issuer",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "C = US, O = Let's Encrypt, CN = YR2",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744",
                "observation_ids": [
                    "3e0e41b871f9b7fc5915b4449b6359e533ffc672c3ef3527a6e0133344827e5c"
                ],
                "evidence_type": "spf_policy",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": "hardfail",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "2e9f6fdc56f5c8d5f14b61eb56ebce95cdf4d69dd2146589e60f453aeceb3bb0",
                "observation_ids": [
                    "41fb25e096ebaac4878a823086b1afa756efc04b6c5b8e20ff13f095b9c1af67"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "same-origin"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "d2aec703bf8dcce76e5a7677cb39a4f31c0dea17fc0606d92f6125a227c138fc",
                "observation_ids": [
                    "4f0362ef6bcedefca78b8d77df099c161959764ed64d36e9e3963ed02a84e7a4"
                ],
                "evidence_type": "tls_valid_to",
                "collector": "tls",
                "rule_version": "2026.09.4",
                "excerpt": "2026-11-27T21:40:45+00:00",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "e4ee4bce749cdabbc5c3ba7c5241246cb5bb769c0086c264685bc18f131980d1",
                "observation_ids": [
                    "611da77de4ffb1cc4fb15c426e5fa34ebb4568e7906e74099c8da4acdedd613c"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "375cb07cf515fa96bc82544f10bdd37394ee188c0e05c51825ed121a74268ae6",
                "observation_ids": [
                    "69c6f9f6e50a2d66d81d22242987eae778c6bad92a8cfb171b83041495385288"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), screen-wake-lock=(), serial=(), usb=(), xr-spatial-tracking=()"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "66abf6ee82fac24f766f68fcab97ced2b4e438651cdca2b82ffb5c1c9f09655d",
                "observation_ids": [
                    "79390e7353fd865ee4951a5658f31e29e41cf872fe3faac73422b5f91b7badbd"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "3551500de28f0e0d3079b9a5509fa80236d45455151afa374648ceaf3b5b2fa3",
                "observation_ids": [
                    "7ddf7581e19f6d10fdd0fdb96736902ec84769409d5e025e227ac1c1163e2357"
                ],
                "evidence_type": "dns_address",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "185.125.27.197",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "afbb1eb86dacd0e72b5d16912e4c7696465cbd6489036a8754bf387c164e265e",
                "observation_ids": [
                    "80addbb762bb18db4f72224b5cfc07a5e6c84a296f78a189817b2f5713684618"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "aaef4152b05d64093edd25bfd2d74d3ea1175973c81cd6e719e3e638ddee7850",
                "observation_ids": [
                    "890799ac1353ee770b83c551dd118bd9e466be8da9690fe6e33108e64ea206eb"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "Apache"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "167f5d1ae37bd9e0b89fd2094dd86cfe029e69f9f1c9340a58e4390cc5552207",
                "observation_ids": [
                    "8aa19e24ecdcecb78b23238d10cff0dea2c6282af23cfd41c4c268d7c1d358d6"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": null,
                    "severity": "low"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "dbf70259cc34b8b8dd8b2b53ac541487fc919d3c17c995951c92002bddd03903",
                "observation_ids": [
                    "8ab1ce330faec6f1b7ce9ae7e8ecb6c6a81db857ef86efd0a889d2a9ad4636ca"
                ],
                "evidence_type": "mail_exchanger",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "mta-gw.infomaniak.ch",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631",
                "observation_ids": [
                    "90c6bfd0e492961854ccb8a89b8b0bcafb5e3f47a381d2723faafc3b99807819"
                ],
                "evidence_type": "dependency_provider",
                "collector": "dependencies",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "critical": true,
                    "hosts": [
                        "mta-gw.infomaniak.ch",
                        "ns11.infomaniak.ch",
                        "ns12.infomaniak.ch"
                    ],
                    "id": "infomaniak",
                    "known": true,
                    "name": "Infomaniak",
                    "observation_count": 3,
                    "services": [
                        "dns",
                        "hosting",
                        "mail"
                    ],
                    "tracker": false
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "d19e5bb35a762cdb5837c902648345a45b368740a11228800beffffbea1bba63",
                "observation_ids": [
                    "98f686c846fbc9f7b036455809b585ac0cc951ea1c94e916e565eae7dd209c07"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": {
                        "reason": "No external validating resolver is used; DS validation is intentionally not inferred.",
                        "status": "not_tested"
                    },
                    "severity": "info"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "a59cddd01fa574d07913ec35a6b699ae8e9b1fb38c92c6e91595921afd80d1cc",
                "observation_ids": [
                    "a89f381e7cb6b1f20b76ea31c267b935275ac6f824460f7f94c7795ead21666c"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "DENY"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b",
                "observation_ids": [
                    "b99a807792b3b466aff6e86fb745a6261b6bb4bc26f54412d5ff0e187b7e0b4f"
                ],
                "evidence_type": "dmarc_policy",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": "reject",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "614b86f2e6875ec42cad1389835ebbfa90f8cca81e4e6f9b61a257f32557faa3",
                "observation_ids": [
                    "bce93b2e1109f93c3e67980720fc2cc04125c4c0cbf0a3432ca3fd4a0d26a266"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "same-origin"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "405415d6d0ceaae2ec7c108a9ca47094634b9c41c0bd7cf077fee8f53543865d",
                "observation_ids": [
                    "cb0a50d7236f3ce39a9ad45a6082c096c7575d8e7377f56bcd6a232d7953335a"
                ],
                "evidence_type": "module_finding",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": "default-src 'none'; script-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; script-src-attr 'none'; style-src 'self' 'nonce-ntajht5vhholvh8jj_yad1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests",
                    "severity": "high"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "e50e69c5cae91ab7b111f6023b7dd3681f2c1d1cddc27c650b3204b3528bcfd4",
                "observation_ids": [
                    "d4040645ac97e0ea784087fb7a0ef0b471b7588cf51a6ee71afb052c738c97ad"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "no-referrer"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "48c15a422df5cff16491317244e91c5fb6fe33820ca3e632b7b8ed12350b6efb",
                "observation_ids": [
                    "d4c19e4bcebfec99d92bc0f79a407b7fe0390d9eef1ed9258de61f50a628f798"
                ],
                "evidence_type": "module_finding",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "ns11.infomaniak.ch",
                        "ns12.infomaniak.ch"
                    ],
                    "severity": "low"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "541d6057648e0ce1729272a8ba31125db5673035d86900db7cf54a548f91611d",
                "observation_ids": [
                    "d63b35b5471a266991cc821fbe393b55e448c949c259767c82ca715ebec374ba"
                ],
                "evidence_type": "spf_record",
                "collector": "dns",
                "rule_version": "2026.09.4",
                "excerpt": "v=spf1 include:spf.infomaniak.ch -all",
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "e137d9d8dbed4013f4e1462eeb00c7cc111b7371b1207cffbe30eb5bc54c8fab",
                "observation_ids": [
                    "d9198dc6b8a827a78da89f2259203fdd3832b7818732201bcac648a49e3b32bc"
                ],
                "evidence_type": "module_finding",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        {
                            "host": "mta-gw.infomaniak.ch",
                            "priority": 5
                        }
                    ],
                    "severity": "low"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "a34f66d98f036c4015213e0bb8280a32f23631ee8be6a763442a59bb9096ed83",
                "observation_ids": [
                    "d9e7af4bca454e10555af881b3da11031afb9d26ed6c97ac91d8ffa1cc3cb3f5"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "nosniff"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "eb7531d67b648a33a71423356ef6a502055892820130d528e7f3500f40127de5",
                "observation_ids": [
                    "df00372eef2834fc40b4d267add9d7b7859b6abc76b15d9b783eec6a3758c1ec"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "default-src 'none'; script-src 'self' 'nonce-NtAJHt5vhHolVh8JJ_YAd1b8'; script-src-attr 'none'; style-src 'self' 'nonce-NtAJHt5vhHolVh8JJ_YAd1b8'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' blob: data:; manifest-src 'self'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "a49fa82350b21cf35f8c9283aec8ad75fd7a9a16716ba8f32a239bd5c38b895e",
                "observation_ids": [
                    "e1d87a927cb21a6c6a9b9f7193822a8ff6cdc8e68f2cdca8a284d84816676103"
                ],
                "evidence_type": "technology",
                "collector": "technology",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "name": "Apache",
                    "version": "",
                    "version_exposed": false
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "114a667186a1976cabc1fdd42d4f5e4b217a6860465bd0ee60319cd71a0b4f44",
                "observation_ids": [
                    "ed09c63f105142eb8d78d8386eab046070c811fba24b515983e8021659f71c53"
                ],
                "evidence_type": "http_header",
                "collector": "headers",
                "rule_version": "2026.09.4",
                "excerpt": [
                    "max-age=31536000; includeSubDomains; preload"
                ],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "d13cc8dfd1b0b83a333017b4ef1e9288f161973814ca63470b958c9c33243538",
                "observation_ids": [
                    "fc91cca130c7d7e7f99d2d220198b434c7d36a5934c4bc825c597e907e9fb6c4"
                ],
                "evidence_type": "module_finding",
                "collector": "resilience",
                "rule_version": "2026.09.4",
                "excerpt": {
                    "evidence": [
                        "ns11.infomaniak.ch",
                        "ns12.infomaniak.ch"
                    ],
                    "severity": "medium"
                },
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            },
            {
                "id": "8975f5da10b317f8db033a28c33115c4b69f4f6a19d5aa70b7abec5877b6ce73",
                "observation_ids": [
                    "fccf8c36aef1fb4c8bc0963aa5a0d6a048ebbdbf984c07dfc4fc1ee7ac9fdc78"
                ],
                "evidence_type": "mail_policy_flag",
                "collector": "mail_trust",
                "rule_version": "2026.09.4",
                "excerpt": false,
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00"
            }
        ]
    },
    "dossier": {
        "executive_summary": [
            "4 observations publiques sont documentées dans ce dossier.",
            "1 dépendances publiques structurantes sont visibles.",
            "Aucune évolution utile n’est retenue depuis la lecture précédente.",
            "2 points restent à confirmer ou ne sont pas observables de l’extérieur."
        ],
        "knowledge_states": {
            "observed": 4,
            "deduced": 0,
            "to_confirm": 0,
            "not_observable": 2,
            "contradictory": 0,
            "untested": 2
        },
        "short_view": [
            {
                "key": "identity_governance",
                "label": "Identité et gouvernance",
                "items": [
                    {
                        "id": "7a61793cec67b9ff5777705f0faae5423d7298f11cca8ad49e1f575447a6dd72",
                        "title": "Depends on provider",
                        "value": "Infomaniak",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                            "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                            "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
                        ],
                        "rationale": "independent_provider_evidence_converges"
                    },
                    {
                        "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
                        "title": "Canary detection",
                        "value": null,
                        "state": "untested",
                        "state_label": "Non testé",
                        "evidence_ids": [],
                        "rationale": "canary_detection_not_enabled"
                    },
                    {
                        "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
                        "title": "Origin host",
                        "value": null,
                        "state": "not_observable",
                        "state_label": "Non observable de l'extérieur",
                        "evidence_ids": [],
                        "rationale": "public_edge_does_not_reveal_origin"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 1
                }
            },
            {
                "key": "infrastructure_transport",
                "label": "Infrastructure et transport",
                "items": [
                    {
                        "id": "2f1da29a0cc6d9efb1e8a99a45c4029783979e034afb12abfeab784e6aa4fdf6",
                        "title": "Tls issuer",
                        "value": "C = US, O = Let's Encrypt, CN = YR2",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "1e3428f4b98c7587d53b9e34abb8e4d4800ead2db7b0798a54d5684eea2010cc"
                        ],
                        "rationale": "certificate_observed"
                    },
                    {
                        "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
                        "title": "Post quantum tls",
                        "value": null,
                        "state": "untested",
                        "state_label": "Non testé",
                        "evidence_ids": [],
                        "rationale": "pq_tls_client_not_enabled"
                    }
                ],
                "states": {
                    "observed": 1,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 1
                }
            },
            {
                "key": "mail_trust",
                "label": "Messagerie et confiance",
                "items": [
                    {
                        "id": "565be047a5a1bf7703d1368bd2ae0405aaffd5f1993121c7a53a04056aeee217",
                        "title": "Dmarc policy",
                        "value": "reject",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "c93371b477c71ebe7de82a958fdb4993d200cccb82d1a9b8c2b75d8c8b71da9b"
                        ],
                        "rationale": "mail_policy_observed"
                    },
                    {
                        "id": "dac22c0101125baba00abc3d9419b8747d0eb95ca8bbaaf89a61ce6c88e78570",
                        "title": "Spf policy",
                        "value": "hardfail",
                        "state": "observed",
                        "state_label": "Observé",
                        "evidence_ids": [
                            "6ce4d7186dbf26c9eb9a04f92789d1b715276ba0a34777d193f396c2f0edb744"
                        ],
                        "rationale": "mail_policy_observed"
                    }
                ],
                "states": {
                    "observed": 2,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 0,
                    "contradictory": 0,
                    "untested": 0
                }
            },
            {
                "key": "dependencies_exposure",
                "label": "Dépendances et exposition",
                "items": [
                    {
                        "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
                        "title": "Data location",
                        "value": null,
                        "state": "not_observable",
                        "state_label": "Non observable de l'extérieur",
                        "evidence_ids": [],
                        "rationale": "provider_metadata_does_not_prove_processing_location"
                    }
                ],
                "states": {
                    "observed": 0,
                    "deduced": 0,
                    "to_confirm": 0,
                    "not_observable": 1,
                    "contradictory": 0,
                    "untested": 0
                }
            }
        ],
        "structuring_dependencies": [
            {
                "label": "Infomaniak",
                "state": "observed",
                "evidence_ids": [
                    "b6e680444df523946c73cffecd438c34e7b5819298e197bf4055fc4f6f300bd4",
                    "f1e9cc92b93115635c46a51302c67f620ea13de4514d6e824f253a326772010d",
                    "59146a487c9683d55f7622a5acb5996676cb92e3d680672d1c78e3723c7e6631"
                ]
            }
        ],
        "open_questions": [
            {
                "id": "fcf9527d13f680b53c6ff0bcc18a68902c7427629b1445969d6177513a07bfc3",
                "subject": "webpion.com",
                "predicate": "origin_host",
                "value": null,
                "state": "unknown",
                "rationale": "public_edge_does_not_reveal_origin",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "170088b86f272df7bad11b5c807b6a40eb49367e37a1b2ac57664d94a054239a",
                "subject": "webpion.com",
                "predicate": "data_location",
                "value": null,
                "state": "unknown",
                "rationale": "provider_metadata_does_not_prove_processing_location",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "a15e2263cc60b52fb0f93db544403eae7e358001073f15ae98830f73f0cdd91c",
                "subject": "webpion.com",
                "predicate": "post_quantum_tls",
                "value": null,
                "state": "untested",
                "rationale": "pq_tls_client_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            },
            {
                "id": "ad3977e5555ec8282229090a1f41aa982291448a7f2d729e41e6bb628e72c45b",
                "subject": "webpion.com",
                "predicate": "canary_detection",
                "value": null,
                "state": "untested",
                "rationale": "canary_detection_not_enabled",
                "evidence_ids": [],
                "first_seen_at": "2026-09-04T19:30:56+00:00",
                "last_seen_at": "2026-09-04T19:30:56+00:00",
                "active": true
            }
        ],
        "evidence_count": 34,
        "meaningful_change_count": 0
    },
    "timeline": {
        "first_observed_at": "2026-09-04T19:30:56+00:00",
        "last_observed_at": "2026-09-06T01:57:48+00:00",
        "reference_state": "initial",
        "message": "Point de référence initial créé aujourd'hui",
        "counts": {
            "appeared": 0,
            "modified": 0,
            "stable": 0,
            "disappeared": 0
        },
        "changes": [],
        "history_count": 2
    },
    "methodology": {
        "version": "2.3.1",
        "model": "evidence_first",
        "principles": [
            "absence_of_evidence_is_not_evidence_of_absence",
            "unknown_remains_unknown",
            "provider_metadata_is_not_data_location",
            "edge_provider_is_not_origin_host",
            "single_snapshot_does_not_prove_resilience"
        ]
    }
}