{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "citigroup.com",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-30T03:15:57.000000Z",
    "scan": {
        "id": 6627,
        "last_scanned_at": "2026-09-30T03:15:57.000000Z",
        "score": {
            "id": 6199,
            "domain_scan_id": 6627,
            "score_rule_set_id": 5,
            "safety_score": 73,
            "evidence_confidence": 75,
            "uncapped_score": 73,
            "cap_code": null,
            "created_at": "2026-09-30 03:15:57",
            "updated_at": "2026-09-30 03:15:57"
        },
        "http": {
            "id": 6199,
            "domain_scan_id": 6627,
            "final_url": "https://www.citigroup.com/global",
            "status_code": 200,
            "content_type": "text/html;charset=utf-8",
            "response_bytes": 1610671,
            "duration_ms": 2000,
            "redirect_chain": "[\"https://www.citigroup.com/\", \"https://www.citigroup.com/global/\", \"https://www.citigroup.com/global\"]",
            "observed_at": "2026-09-30 03:15:38",
            "created_at": "2026-09-30 03:15:56",
            "updated_at": "2026-09-30 03:15:56"
        },
        "tls": {
            "id": 6233,
            "domain_scan_id": 6627,
            "valid": 1,
            "protocol": "TLSv1.2",
            "issuer": "countryName=US, organizationName=DigiCert Inc, commonName=DigiCert EV RSA CA G2",
            "valid_from": "2026-04-10 00:00:00",
            "valid_until": "2026-10-08 23:59:59",
            "san_names": "[\"accitrade.com\", \"accitrade.com.mx\", \"banamex.com\", \"blog.citigroup.com\", \"careers.citigroup.com\", \"citi.co.id\", \"citi.com\", \"citibank.ae\", \"citibank.co.id\", \"citibank.co.kr\", \"citibank.co.th\", \"citibank.co.uk\", \"citibank.com\", \"citibank.com.cn\", \"citibank.com.hk\", \"citibank.com.sg\", \"citibank.com.vn\", \"citibank.cz\", \"citibank.hu\", \"citibank.pl\", \"citibank.sk\", \"citibankonline.pl\", \"citidirect.com\", \"citifx.com\", \"citifxpulse.com\", \"citigold.co.kr\", \"citigold.com.hk\", \"citigold.com.sg\", \"citigold.pl\", \"citigroup.com\", \"citigroup.jp\", \"citimanager.com\", \"citipay.citi.com\", \"citithankyoucard.com\", \"cititravel.com\", \"citivelocity.com\", \"europe.citigold.citibank.com\", \"findmyciti.com\", \"homeownersupport.com\", \"investments.citi.com\", \"ipb.citi.com\", \"ipb.citibank.co.uk\", \"ipb.citibank.com\", \"ipb.citibank.eu\", \"ipbus.citi.com\", \"ipbusclientappreciation.citi.com\", \"recognitionprogram.citi.com\", \"secure.citi.com\", \"universalcard.com\", \"workday.citi.com\", \"www.blog.citigroup.com\", \"www.cardbenefits.citi.com\", \"www.careers.citigroup.com\", \"www.citi.co.id\", \"www.citi.com\", \"www.citibank.ae\", \"www.citibank.co.id\", \"www.citibank.com.tw\", \"www.citibank.cz\", \"www.citibank.hu\", \"www.citibank.sk\", \"www.citigroup.jp\", \"www.citimanager.com\", \"www.citipay.citi.com\", \"www.citithankyoucard.com\", \"www.cititravel.com\", \"www.europe.citigold.citibank.com\", \"www.investments.citi.com\", \"www.ipb.citi.com\", \"www.ipb.citibank.co.uk\", \"www.ipb.citibank.com\", \"www.ipb.citibank.eu\", \"www.ipbus.citi.com\", \"www.ipbusclientappreciation.citi.com\", \"www.searscard.com\", \"www.universalcard.com\", \"www4.citi.com\"]",
            "observed_at": "2026-09-30 03:15:36",
            "created_at": "2026-09-30 03:15:56",
            "updated_at": "2026-09-30 03:15:56"
        },
        "dns": {
            "id": 6624,
            "domain_scan_id": 6627,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-30 03:15:35",
            "created_at": "2026-09-30 03:15:56",
            "updated_at": "2026-09-30 03:15:56"
        },
        "infrastructure_summary": {
            "ip_address": "104.94.222.171",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Akamai",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.citigroup.com/global",
            "dnssec_observed": null,
            "dns_record_count": 26,
            "nameserver_count": 2,
            "mail_exchanger_count": 2,
            "tls_valid": true,
            "tls_valid_until": "2026-10-08 23:59:59",
            "security_header_count": 4,
            "technology_count": 4,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 1610671,
            "duration_ms": 2000,
            "cookies_observed": 2,
            "script_resources": 12,
            "external_script_hosts": 1,
            "frame_resources": 0,
            "resource_checks": 4
        },
        "security_headers": [
            {
                "id": 17923,
                "domain_scan_id": 6627,
                "name": "content-security-policy",
                "value": "default-src 'self'; frame-ancestors 'self'; frame-src 'self' https://brand-studio.fortune.com https://kvgo.com https://*.kaltura.com https://citigroup.gcs-web.com https://www.citivelocity.com https://*.doubleclick.net https://*.citi.com https://www.youtube.com https://youtu.be https://vimeo.com https://player.vimeo.com https://content.knowledgevision.com; font-src 'self' https://*.kaltura.com https://content.citivelocity.com/; img-src 'self' data: https://*.kaltura.com https://*.doubleclick.net https://*.linkedin.com https://*.citibank.com https://*.citi.net https://www.citivelocity.com https://t.co https://analytics.twitter.com https://*.omtrdc.net https://www.facebook.com; media-src 'self' https://content.citivelocity.com https://*.citi.com https://*.kaltura.com https://www.citivelocity.com https://www.youtube.com https://youtu.be https://vimeo.com https://player.vimeo.com; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https://assets.adobedtm.com https://report.customerexperience.citidirect.com https://www.citivelocity.com https://*.kaltura.com https://px.ads.linkedin.com https://www.googletagmanager.com https://snap.licdn.com https://connect.facebook.net https://static.ads-twitter.com https://content.citivelocity.com; connect-src 'self' https://www.google.com https://px.ads.linkedin.com https://report.customerexperience.citidirect.com https://*.gbqofs.io  https://content.citivelocity.com https://www.citivelocity.com https://*.onetrust.com https://ad.doubleclick.net https://*.doubleclick.net https://ad.doubleclick.net/*; style-src 'self' 'unsafe-inline' https://content.citivelocity.com https://*.kaltura.com; base-uri 'self'",
                "assessment": "present",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 17924,
                "domain_scan_id": 6627,
                "name": "referrer-policy",
                "value": "strict-origin-when-cross-origin",
                "assessment": "present",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 17925,
                "domain_scan_id": 6627,
                "name": "strict-transport-security",
                "value": "max-age=63072000; includeSubdomains; preload",
                "assessment": "present",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 17926,
                "domain_scan_id": 6627,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            }
        ],
        "signals": [
            {
                "id": 400795,
                "domain_scan_id": 6627,
                "code": "local_resources.item1.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400805,
                "domain_scan_id": 6627,
                "code": "local_resources.item3.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400806,
                "domain_scan_id": 6627,
                "code": "local_resources.item3.host",
                "value": "www.citigroup.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400803,
                "domain_scan_id": 6627,
                "code": "local_resources.item2.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400804,
                "domain_scan_id": 6627,
                "code": "local_resources.item2.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400802,
                "domain_scan_id": 6627,
                "code": "local_resources.item2.sha256",
                "value": "4b4969fa4ef3594324da2c6d78ce8766fbbc2fd121fff395aedf997db0a99a06",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400800,
                "domain_scan_id": 6627,
                "code": "local_resources.item2.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400801,
                "domain_scan_id": 6627,
                "code": "local_resources.item2.host",
                "value": "www.citigroup.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400798,
                "domain_scan_id": 6627,
                "code": "local_resources.item1.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400799,
                "domain_scan_id": 6627,
                "code": "local_resources.item1.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400797,
                "domain_scan_id": 6627,
                "code": "local_resources.item1.sha256",
                "value": "11fd0043f06255887d60e1f6457ab73ed1a8fb54665551e8c2c566ba144ac64b",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400807,
                "domain_scan_id": 6627,
                "code": "local_resources.item3.sha256",
                "value": "21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400796,
                "domain_scan_id": 6627,
                "code": "local_resources.item1.host",
                "value": "www.citigroup.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400793,
                "domain_scan_id": 6627,
                "code": "local_resources.item0.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400794,
                "domain_scan_id": 6627,
                "code": "local_resources.item0.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400792,
                "domain_scan_id": 6627,
                "code": "local_resources.item0.sha256",
                "value": "2161b99fce457c3df815f00e3f9b818c219ae9b1ef75c0dae4e394e58c096df0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400790,
                "domain_scan_id": 6627,
                "code": "local_resources.item0.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400791,
                "domain_scan_id": 6627,
                "code": "local_resources.item0.host",
                "value": "content.citivelocity.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400786,
                "domain_scan_id": 6627,
                "code": "local_resources.discovered_scripts",
                "value": "12",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400787,
                "domain_scan_id": 6627,
                "code": "local_resources.checked",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400789,
                "domain_scan_id": 6627,
                "code": "local_resources.bytes_scanned",
                "value": "146365",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400781,
                "domain_scan_id": 6627,
                "code": "local_reputation.status",
                "value": "not_listed",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400754,
                "domain_scan_id": 6627,
                "code": "local_security.truncated",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400821,
                "domain_scan_id": 6627,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400738,
                "domain_scan_id": 6627,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400739,
                "domain_scan_id": 6627,
                "code": "page.language",
                "value": "en",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400737,
                "domain_scan_id": 6627,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400740,
                "domain_scan_id": 6627,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400742,
                "domain_scan_id": 6627,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400741,
                "domain_scan_id": 6627,
                "code": "mail_security.spf.all",
                "value": "not_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400743,
                "domain_scan_id": 6627,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400744,
                "domain_scan_id": 6627,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400745,
                "domain_scan_id": 6627,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400784,
                "domain_scan_id": 6627,
                "code": "local_reputation.sha256",
                "value": "20f2b01cab8045631dedd1bf041a7167eb625d8a52879704f50d2cc2afc2681d",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400755,
                "domain_scan_id": 6627,
                "code": "local_security.script_resources",
                "value": "12",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400756,
                "domain_scan_id": 6627,
                "code": "local_security.inline_scripts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400757,
                "domain_scan_id": 6627,
                "code": "local_security.external_script_hosts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400753,
                "domain_scan_id": 6627,
                "code": "local_security.bytes_analyzed",
                "value": "524288",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400752,
                "domain_scan_id": 6627,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400785,
                "domain_scan_id": 6627,
                "code": "local_resources.status",
                "value": "partial",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400788,
                "domain_scan_id": 6627,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400808,
                "domain_scan_id": 6627,
                "code": "local_resources.item3.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400809,
                "domain_scan_id": 6627,
                "code": "local_resources.item3.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400819,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.item0.advisories",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400778,
                "domain_scan_id": 6627,
                "code": "local_antivirus.engine_version",
                "value": "1.5.4",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400779,
                "domain_scan_id": 6627,
                "code": "local_antivirus.database_version",
                "value": "28138",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400780,
                "domain_scan_id": 6627,
                "code": "local_antivirus.database_date",
                "value": "2026-09-29T06:26:15+00:00",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400777,
                "domain_scan_id": 6627,
                "code": "local_antivirus.bytes_scanned",
                "value": "1610671",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400810,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.status",
                "value": "no_known_advisories",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400812,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.limited",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400817,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.item0.version",
                "value": "18.2.0-next-9e3b772b8-20220608",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400820,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.item0.sha256",
                "value": "21758ed084cd0e37e735722ee4f3957ea960628a29dfa6c3ce1a1d47a2d6e4f7",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400816,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.item0.component",
                "value": "react-dom",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400818,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.item0.advisory_count",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400776,
                "domain_scan_id": 6627,
                "code": "local_antivirus.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400813,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.engine_version",
                "value": "5.7.0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400815,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.database_sha256",
                "value": "1f1f8f8d54e4b9f04bd718857f14217d20c2ff3f03992927382b97a133a6b932",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400814,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.database_date",
                "value": "2026-09-30T02:40:06.930Z",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400811,
                "domain_scan_id": 6627,
                "code": "javascript_advisories.checked",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400746,
                "domain_scan_id": 6627,
                "code": "dns_consistency.record_count",
                "value": "26",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400748,
                "domain_scan_id": 6627,
                "code": "dns_consistency.nameserver_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400749,
                "domain_scan_id": 6627,
                "code": "dns_consistency.mail_route_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400751,
                "domain_scan_id": 6627,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400750,
                "domain_scan_id": 6627,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400762,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400782,
                "domain_scan_id": 6627,
                "code": "local_reputation.fetched_at",
                "value": "2026-09-30T00:00:09+00:00",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400783,
                "domain_scan_id": 6627,
                "code": "local_reputation.entry_count",
                "value": "386017",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400775,
                "domain_scan_id": 6627,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400768,
                "domain_scan_id": 6627,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400771,
                "domain_scan_id": 6627,
                "code": "local_headers.hsts_preload",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400769,
                "domain_scan_id": 6627,
                "code": "local_headers.hsts_max_age",
                "value": "63072000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400770,
                "domain_scan_id": 6627,
                "code": "local_headers.hsts_include_subdomains",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400767,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400765,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400766,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400747,
                "domain_scan_id": 6627,
                "code": "dns_consistency.address_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400764,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_has_object_src",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400763,
                "domain_scan_id": 6627,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400773,
                "domain_scan_id": 6627,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400772,
                "domain_scan_id": 6627,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400774,
                "domain_scan_id": 6627,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400758,
                "domain_scan_id": 6627,
                "code": "local_cookies.cookies_observed",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400759,
                "domain_scan_id": 6627,
                "code": "local_cookies.cookies_missing_secure",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400761,
                "domain_scan_id": 6627,
                "code": "local_cookies.cookies_missing_samesite",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 400760,
                "domain_scan_id": 6627,
                "code": "local_cookies.cookies_missing_httponly",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            }
        ],
        "technologies": [
            {
                "id": 15100,
                "domain_scan_id": 6627,
                "code": "apache",
                "name": "Apache HTTP Server",
                "version": null,
                "confidence": "0.9300",
                "source_rule": "apache-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 15101,
                "domain_scan_id": 6627,
                "code": "bootstrap",
                "name": "Bootstrap",
                "version": null,
                "confidence": "0.8000",
                "source_rule": "bootstrap-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 15099,
                "domain_scan_id": 6627,
                "code": "nextjs",
                "name": "Next.js",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "nextjs-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            },
            {
                "id": 15102,
                "domain_scan_id": 6627,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 03:15:56",
                "updated_at": "2026-09-30 03:15:56"
            }
        ],
        "availability_history": [
            {
                "id": 6627,
                "status": "completed",
                "finished_at": "2026-09-30 03:15:57",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.citigroup.com/global",
                "duration_ms": 2000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 6627,
                "finished_at": "2026-09-30 03:15:57",
                "status_code": 200,
                "final_url": "https://www.citigroup.com/global",
                "safety_score": 73
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}