{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "coles.com.au",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-26T18:51:41.000000Z",
    "scan": {
        "id": 1373,
        "last_scanned_at": "2026-09-26T18:51:41.000000Z",
        "score": {
            "id": 1034,
            "domain_scan_id": 1373,
            "score_rule_set_id": 5,
            "safety_score": 49,
            "evidence_confidence": 65,
            "uncapped_score": 49,
            "cap_code": null,
            "created_at": "2026-09-26 18:51:41",
            "updated_at": "2026-09-28 17:28:07"
        },
        "http": {
            "id": 1032,
            "domain_scan_id": 1373,
            "final_url": "https://www.coles.com.au/",
            "status_code": 200,
            "content_type": "text/html",
            "response_bytes": 212,
            "duration_ms": 2000,
            "redirect_chain": "[\"https://www.coles.com.au/\"]",
            "observed_at": "2026-09-26 18:51:39",
            "created_at": "2026-09-26 18:51:40",
            "updated_at": "2026-09-26 18:51:40"
        },
        "tls": null,
        "dns": {
            "id": 1371,
            "domain_scan_id": 1373,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-26 18:51:36",
            "created_at": "2026-09-26 18:51:40",
            "updated_at": "2026-09-26 18:51:40"
        },
        "infrastructure_summary": {
            "ip_address": "203.5.135.164",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.coles.com.au/",
            "dnssec_observed": null,
            "dns_record_count": 58,
            "nameserver_count": 6,
            "mail_exchanger_count": 2,
            "tls_valid": null,
            "tls_valid_until": null,
            "security_header_count": 3,
            "technology_count": 0,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 212,
            "duration_ms": 2000,
            "cookies_observed": null,
            "script_resources": null,
            "external_script_hosts": null,
            "frame_resources": null,
            "resource_checks": null
        },
        "security_headers": [
            {
                "id": 2808,
                "domain_scan_id": 1373,
                "name": "content-security-policy",
                "value": "default-src 'self' data: blob: *.coles.com.au *.grafana.net assets.hosted.topsort *.cookielaw.org *.onetrust.com *.adsrvr.org *.facebook.net www.youtube.com i.ytimg.com analytics.google.com www.google-analytics.com api.paydock.com *.everesttech.net www.google.com.sg static.enzymic.co *.mastercard.com edge.adobedc.net events.launchdarkly.com ahsapi.flybuys.com.au authentication.cardinalcommerce.com www.googletagmanager.com clientstream.launchdarkly.com edge.fullstory.com www.google.es *.braintreegateway.com *.paypal.com secure7.arcot.com colesonline.sjv.io/ *.demdex.net *.doubleclick.net *.apple.com www.google.com six.cdn-net.com assets.adobedtm.com app.launchdarkly.com *.bazaarvoice.com payments.braintree-api.com nebula-cdn.kampyle.com www.cdn-net.com region1.analytics.google.com *.googleapis.com mycardsecure.com www.google.co.in *.cloudinary.com www.google.co.nz adservice.google.com analytics-fe.digital-cloud-syd1.medallia.com.au *.googleadservices.com *.gstatic.com rs.fullstory.com *.sentry.io rum.hlx.page www.google.co.uk youtube.com www.rsa3dsauth.co.uk *.omtrdc.net *.cloudfront.net pre-au.flavedo.io coles.flavedo.io register.flybuys.com.au embed.salefinder.co.nz *.facebook.com integration.coles.citrusad.com www.google.com.au www.google.co.id widget.paydock.com prod.accdab.net *.twitter.com topsortassets.com coles.com.au integration.pre-au.citrusad.com api-sandbox.paydock.com payments.sandbox.braintree-api.com salefinder.com.au *.salefinder.com.au *.as1.gpayments.net acs-challenge.testlab.3dsecure.cloud widget-sandbox.paydock.com *.mention-me.com mention-me.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.hcaptcha.com cdn.fraudlabspro.com *.onetrust.com *.cookielaw.org *.coles.com.au *.demdex.net *.everesttech.net www.google.com www.youtube.com *.googleapis.com *.googleadservices.com www.googletagmanager.com staticcdn.enzymic.co *.gstatic.com *.doubleclick.net *.bazaarvoice.com *.adsrvr.org nebula-cdn.kampyle.com *.omtrdc.net *.twitter.com edge.fullstory.com *.paypal.com embed.salefinder.com.au *.facebook.net assets.adobedtm.com *.mastercard.com www.cdn-net.com staging.cdn-net.com six.cdn-net.com prod.accdab.net test.accdab.net webservice.salefinder.com.au rum.hlx.page *.mention-me.com mention-me.com bugcrowd.com *.bugcrowdusercontent.com; style-src 'self' 'unsafe-inline' *.coles.com.au *.facebook.net static.enzymic.co *.mastercard.com www.googletagmanager.com *.braintreegateway.com *.paypal.com *.apple.com six.cdn-net.com assets.adobedtm.com *.bazaarvoice.com nebula-cdn.kampyle.com www.cdn-net.com *.googleapis.com *.gstatic.com *.cloudfront.net *.salefinder.com.au pre-au.flavedo.io coles.flavedo.io embed.salefinder.co.nz *.facebook.com integration.coles.citrusad.com widget.paydock.com prod.accdab.net *.twitter.com topsortassets.com coles.com.au; connect-src 'self' google.com *.airwallex.com *.hcaptcha.com *.cmltd.net.au *.ingest.us.sentry.io *.coles.com.au coles.com.au *.grafana.net *.mypurecloud.com.au wss://webmessaging.mypurecloud.com.au static.enzymic.co *.cookielaw.org *.onetrust.com *.adsrvr.org analytics.google.com www.google-analytics.com region1.google-analytics.com region1.analytics.google.com api.paydock.com widget.paydock.com api-sandbox.paydock.com widget-sandbox.paydock.com *.as1.gpayments.net *.everesttech.net *.mastercard.com edge.adobedc.net events.launchdarkly.com clientstream.launchdarkly.com app.launchdarkly.com ahsapi.flybuys.com.au register.flybuys.com.au authentication.cardinalcommerce.com www.googletagmanager.com edge.fullstory.com rs.fullstory.com *.braintreegateway.com *.paypal.com payments.braintree-api.com payments.sandbox.braintree-api.com *.demdex.net *.doubleclick.net adservice.google.com *.googleadservices.com *.googleapis.com *.apple.com *.bazaarvoice.com nebula-cdn.kampyle.com mycardsecure.com www.rsa3dsauth.co.uk *.securesuite.co.uk *.omtrdc.net *.cloudfront.net *.sentry.io rum.hlx.page analytics-fe.digital-cloud-syd1.medallia.com.au pre-au.flavedo.io coles.flavedo.io integration.coles.citrusad.com integration.pre-au.citrusad.com *.facebook.net *.facebook.com *.tw",
                "assessment": "present",
                "created_at": "2026-09-26 18:51:40",
                "updated_at": "2026-09-26 18:51:40"
            },
            {
                "id": 2809,
                "domain_scan_id": 1373,
                "name": "strict-transport-security",
                "value": "max-age=31536000; includeSubDomains",
                "assessment": "present",
                "created_at": "2026-09-26 18:51:40",
                "updated_at": "2026-09-26 18:51:40"
            },
            {
                "id": 2810,
                "domain_scan_id": 1373,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-09-26 18:51:40",
                "updated_at": "2026-09-26 18:51:40"
            }
        ],
        "signals": [
            {
                "id": 3035,
                "domain_scan_id": 1373,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:51:41",
                "updated_at": "2026-09-26 18:51:41"
            },
            {
                "id": 3036,
                "domain_scan_id": 1373,
                "code": "local_security.bytes_analyzed",
                "value": "212",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:51:41",
                "updated_at": "2026-09-26 18:51:41"
            },
            {
                "id": 3037,
                "domain_scan_id": 1373,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:51:41",
                "updated_at": "2026-09-26 18:51:41"
            }
        ],
        "technologies": [],
        "availability_history": [
            {
                "id": 1373,
                "status": "completed",
                "finished_at": "2026-09-26 18:51:41",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.coles.com.au/",
                "duration_ms": 2000
            },
            {
                "id": 955,
                "status": "completed",
                "finished_at": "2026-09-25 09:36:51",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 460,
                "status": "completed",
                "finished_at": "2026-09-24 12:44:12",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 260,
                "status": "completed",
                "finished_at": "2026-09-24 12:15:41",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            }
        ],
        "comparison": {
            "previous": {
                "id": 955,
                "finished_at": "2026-09-25 09:36:51",
                "status_code": null,
                "final_url": null,
                "safety_score": null
            },
            "current": {
                "id": 1373,
                "finished_at": "2026-09-26 18:51:41",
                "status_code": 200,
                "final_url": "https://www.coles.com.au/",
                "safety_score": 49
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}