{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "bathandbodyworks.com",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-11-01T01:00:18.000000Z",
    "scan": {
        "id": 19390,
        "last_scanned_at": "2026-10-02T01:00:18.000000Z",
        "score": {
            "id": 26313,
            "domain_scan_id": 19390,
            "score_rule_set_id": 5,
            "safety_score": 76,
            "evidence_confidence": 75,
            "uncapped_score": 76,
            "cap_code": null,
            "created_at": "2026-10-02 01:00:18",
            "updated_at": "2026-10-02 01:00:18"
        },
        "http": {
            "id": 26313,
            "domain_scan_id": 19390,
            "final_url": "https://www.bathandbodyworks.com/",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 1567092,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://www.bathandbodyworks.com/\"]",
            "observed_at": "2026-10-01 18:02:50",
            "created_at": "2026-10-02 01:00:18",
            "updated_at": "2026-10-02 01:00:18"
        },
        "tls": {
            "id": 25144,
            "domain_scan_id": 19390,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Certainly, commonName=Certainly Intermediate R1",
            "valid_from": "2026-09-15 23:43:02",
            "valid_until": "2026-10-15 23:43:01",
            "san_names": "[\"bathandbodyworks.com\"]",
            "observed_at": "2026-10-01 18:02:49",
            "created_at": "2026-10-02 01:00:18",
            "updated_at": "2026-10-02 01:00:18"
        },
        "dns": {
            "id": 27745,
            "domain_scan_id": 19390,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-01 18:02:49",
            "created_at": "2026-10-02 01:00:18",
            "updated_at": "2026-10-02 01:00:18"
        },
        "infrastructure_summary": {
            "ip_address": "151.101.131.52",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Cloudflare",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.bathandbodyworks.com/",
            "dnssec_observed": null,
            "dns_record_count": 19,
            "nameserver_count": 4,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2026-10-15 23:43:01",
            "security_header_count": 6,
            "technology_count": 2,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 1567092,
            "duration_ms": 1000,
            "cookies_observed": 2,
            "script_resources": 0,
            "external_script_hosts": 0,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 63313,
                "domain_scan_id": 19390,
                "name": "content-security-policy",
                "value": "img-src 'self' *.commercecloud.salesforce.com *.bathandbodyworks.com *.bathandbodyworks.ca data: *.yottaa.net bat.bing.com *.google.com *.tealiumiq.com *.smaato.net *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.casalemedia.com *.3lift.com *.ads.audio.thisisdax.com *.analytics.yahoo.com *.bazaarvoice.com *.brightcove.com *.brightcovecdn.com *.brsrvr.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.mountain.com *.omtrdc.net *.onetrust.com *.openx.net *.paypal.com *.stats.paypal.com *.paypalobjects.com *.pinterest.com *.zineone.com *.datadoghq.com ads.stickyadstv.com agentcore.s3.amazonaws.com aivo-assets.s3.amazonaws.com ap.lijit.com assets-qelplatam.s3.amazonaws.com bathandbodyworkscc.zendesk.com bh.contextweb.com cdn.cookielaw.org cdn.jsdelivr.net cm.everesttech.net contextual.media.net crb.kargo.com cs.openwebmp.com dpm.demdex.net exchange-match.mediaplex.com https://www.googletagmanager.com/td ib.adnxs.com idsync.live.streamtheworld.com idsync.rlcdn.com match.adsrvr.org match.sharethrough.com mountain.com omtrdc.net partners.tremorhub.com pinterest.com ps.eyeota.net sync.1rx.io sync.bfmio.com sync.ipredictive.com sync.mathtag.com sync.targeting.unrulymedia.com tags.bluekai.com us.ck-ie.com v2assets.zopim.io https://sync.inmobi.com https://sync.crwdcntrl.net https://f.monetate.net https://csync.loopme.me https://www.googleadservices.com https://pixel.adsafeprotected.com https://www.facebook.com/ https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://azure-na-rest-preview.contentstack.com https://azure-na-rest-preview.contentstack.com/live-preview/tracker https://azure-na-rest-preview.contentstack.com/v3/content_types/preview_test/entries https://azure-na-api.contentstack.com/v3/user-session https://personalization-api.us-west-2.prod.tealiumapis.com https://x.klarnacdn.net *.207.net *.rlcdn.com *.smartadserver.com *.attn.tv *.attentivemobile.com *.fwmrm.net *.googletagmanager.com *.medallia.com *.kampyle.com https://pixel.tapad.com;style-src 'self' 'unsafe-inline' https://cdn.fonts.net display.ugc.bazaarvoice.com https://api.tnapplications.com/assets/b2876e62-7692-4035-aee0-c58e226977fd/flow-container.css;script-src 'self' 'unsafe-inline' blob: storage.googleapis.com localhost:3000 code.jquery.com tags.tiqcdn.com *.yottaa.net *.attn.tv bbwi-us.attn.tv events.attentivemobile.com www.googletagmanager.com *.doubleclick.net *.bathandbodyworks.com *.bathandbodyworks.ca bat.bing.com sc-static.net *.agentbot.net *.attentivemobile.com *.bazaarvoice.com *.brcdn.com *.brightcove.net *.brightcovecdn.com *.byspotify.com *.cdn-apple.com https://*.cdn-apple.com *.cookielaw.org *.curalate.com *.dotomi.com *.googleapis.com *.gstatic.com *.kampyle.com *.monetate.net *.mpsnare.iesnare.com *.onetrust.com *.ordergroove.com *.paypal.com *.braintreegateway.com *.braintree-api.com *.pepperjam.com *.pinterest.com *.privacymanager.io *.smaato.net *.tealiumiq.com *.zineone.com *.snapchat.com *.tiktok.com *.datadoghq.com 7316103.collect.igodigital.com api.tnapplications.com assets.adobedtm.com bathbodyworks-pixel.netlify.app cdn.cookielaw.org cdn.quantummetric.com cnstrc.com connect.facebook.net dev.zopim.com engine-global.monetate.net github.com https://*.px-cdn.net https://*.px-cloud.net https://*.yottaa.com https://*.yottaa.net https://s.pinimg.com https://www.google.com/recaptcha/ https://analytics.tiktok.com https://www.gstatic.com/recaptcha/ https://www.onelink-edge.com https://widget-mediator.zopim.com https://cdn.contentstack.io https://azure-na-images.contentstack.com https://azure-na-cdn.contentstack.com https://azure-na-rest-preview.contentstack.com https://azure-na-rest-preview.contentstack.com/live-preview/tracker https://azure-na-rest-preview.contentstack.com/v3/content_types/preview_test/entries https://azure-na-api.contentstack.com/v3/user-session objects.githubusercontent.com privacyportal-cdn.onetrust.com rdf.radial.com static.zdassets.com tst-rdf.radial.com https://dx.mountain.com https://px.mountain.com external.quantummetric.c",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 63314,
                "domain_scan_id": 19390,
                "name": "permissions-policy",
                "value": "encrypted-media=(self \"https://players.brightcove.net\")",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 63315,
                "domain_scan_id": 19390,
                "name": "referrer-policy",
                "value": "origin",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 63316,
                "domain_scan_id": 19390,
                "name": "strict-transport-security",
                "value": "max-age=31557600",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 63317,
                "domain_scan_id": 19390,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 63318,
                "domain_scan_id": 19390,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            }
        ],
        "signals": [
            {
                "id": 1683490,
                "domain_scan_id": 19390,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683511,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_camera_restricted",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683513,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_geolocation_restricted",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683512,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_microphone_restricted",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683514,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_payment_restricted",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683510,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_policy_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683515,
                "domain_scan_id": 19390,
                "code": "local_headers.permissions_usb_restricted",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683517,
                "domain_scan_id": 19390,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683522,
                "domain_scan_id": 19390,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683520,
                "domain_scan_id": 19390,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683519,
                "domain_scan_id": 19390,
                "code": "local_resources.discovered_scripts",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683521,
                "domain_scan_id": 19390,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683518,
                "domain_scan_id": 19390,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683503,
                "domain_scan_id": 19390,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683491,
                "domain_scan_id": 19390,
                "code": "local_security.bytes_analyzed",
                "value": "524288",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683492,
                "domain_scan_id": 19390,
                "code": "local_security.truncated",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683483,
                "domain_scan_id": 19390,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683482,
                "domain_scan_id": 19390,
                "code": "mail_security.dmarc.policy",
                "value": "quarantine",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683481,
                "domain_scan_id": 19390,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683479,
                "domain_scan_id": 19390,
                "code": "mail_security.spf.all",
                "value": "~all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683480,
                "domain_scan_id": 19390,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683478,
                "domain_scan_id": 19390,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683477,
                "domain_scan_id": 19390,
                "code": "page.language",
                "value": "en-US",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683476,
                "domain_scan_id": 19390,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683525,
                "domain_scan_id": 19390,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683509,
                "domain_scan_id": 19390,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683488,
                "domain_scan_id": 19390,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683489,
                "domain_scan_id": 19390,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683487,
                "domain_scan_id": 19390,
                "code": "dns_consistency.mail_route_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683486,
                "domain_scan_id": 19390,
                "code": "dns_consistency.nameserver_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683484,
                "domain_scan_id": 19390,
                "code": "dns_consistency.record_count",
                "value": "19",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683524,
                "domain_scan_id": 19390,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683523,
                "domain_scan_id": 19390,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683516,
                "domain_scan_id": 19390,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683495,
                "domain_scan_id": 19390,
                "code": "local_cookies.cookies_missing_httponly",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683496,
                "domain_scan_id": 19390,
                "code": "local_cookies.cookies_missing_samesite",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683494,
                "domain_scan_id": 19390,
                "code": "local_cookies.cookies_missing_secure",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683493,
                "domain_scan_id": 19390,
                "code": "local_cookies.cookies_observed",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683485,
                "domain_scan_id": 19390,
                "code": "dns_consistency.address_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683507,
                "domain_scan_id": 19390,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683508,
                "domain_scan_id": 19390,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683498,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683499,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_has_object_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683497,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683501,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683500,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683502,
                "domain_scan_id": 19390,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683505,
                "domain_scan_id": 19390,
                "code": "local_headers.hsts_include_subdomains",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683504,
                "domain_scan_id": 19390,
                "code": "local_headers.hsts_max_age",
                "value": "31557600",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 1683506,
                "domain_scan_id": 19390,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            }
        ],
        "technologies": [
            {
                "id": 76541,
                "domain_scan_id": 19390,
                "code": "cloudflare",
                "name": "Cloudflare",
                "version": null,
                "confidence": "0.9800",
                "source_rule": "cloudflare-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            },
            {
                "id": 76542,
                "domain_scan_id": 19390,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-02 01:00:18",
                "updated_at": "2026-10-02 01:00:18"
            }
        ],
        "availability_history": [
            {
                "id": 19390,
                "status": "completed",
                "finished_at": "2026-10-02 01:00:18",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.bathandbodyworks.com/",
                "duration_ms": 1000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 19390,
                "finished_at": "2026-10-02 01:00:18",
                "status_code": 200,
                "final_url": "https://www.bathandbodyworks.com/",
                "safety_score": 76
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}