{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "costco.ca",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-11-01T14:39:18.000000Z",
    "scan": {
        "id": 24096,
        "last_scanned_at": "2026-10-02T14:39:18.000000Z",
        "score": {
            "id": 37071,
            "domain_scan_id": 24096,
            "score_rule_set_id": 5,
            "safety_score": 72,
            "evidence_confidence": 75,
            "uncapped_score": 72,
            "cap_code": null,
            "created_at": "2026-10-02 14:39:18",
            "updated_at": "2026-10-02 14:39:18"
        },
        "http": {
            "id": 37077,
            "domain_scan_id": 24096,
            "final_url": "https://www.costco.ca/",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 2579804,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://www.costco.ca/\"]",
            "observed_at": "2026-10-02 14:39:02",
            "created_at": "2026-10-02 14:39:18",
            "updated_at": "2026-10-02 14:39:18"
        },
        "tls": {
            "id": 35117,
            "domain_scan_id": 24096,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Certainly, commonName=Certainly Intermediate R1",
            "valid_from": "2026-09-21 13:47:02",
            "valid_until": "2026-10-21 13:47:01",
            "san_names": "[\"costco.ca\", \"costcophotocentre.ca\", \"ess.costco.ca\", \"m.costco.ca\", \"www.costco.ca\", \"www.costcophotocentre.ca\"]",
            "observed_at": "2026-10-02 14:39:01",
            "created_at": "2026-10-02 14:39:18",
            "updated_at": "2026-10-02 14:39:18"
        },
        "dns": {
            "id": 38897,
            "domain_scan_id": 24096,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-02 14:39:00",
            "created_at": "2026-10-02 14:39:18",
            "updated_at": "2026-10-02 14:39:18"
        },
        "infrastructure_summary": {
            "ip_address": "151.101.3.52",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.costco.ca/",
            "dnssec_observed": null,
            "dns_record_count": 15,
            "nameserver_count": 6,
            "mail_exchanger_count": 2,
            "tls_valid": true,
            "tls_valid_until": "2026-10-21 13:47:01",
            "security_header_count": 2,
            "technology_count": 1,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 2579804,
            "duration_ms": 1000,
            "cookies_observed": 3,
            "script_resources": 64,
            "external_script_hosts": 0,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 85631,
                "domain_scan_id": 24096,
                "name": "content-security-policy",
                "value": "default-src 'self' https://*.queue-it.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcobusinessdelivery.com/ https://*.costcobusinesscentre.ca/ https://*.costcobusinesscenter.ca/ https://*.costco-static.com/ https://display.ugc.bazaarvoice.com/ https://api.bazaarvoice.com/; script-src 'self' https://*.dynatrace.com https://*.affirm.com https://h.costco.com/ https://js-cdn.dynatrace.com/ https://h.online-metrix.net/ https://*.cybersource.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/ https://www.gstatic.com/recaptcha/ https://www.cdn-path.com/ https://h.costco.com/ https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.queue-it.net/ https://*.costcobusinessdelivery.com https://*.costcobusinesscenter.ca/ https://cdn.intake-lr.com/ https://cdn.cookielaw.org/ https://*.criteo.com/ http://*.criteo.com/ https://assets.adobedtm.com/ https://s.go-mpulse.net/ https://transcend-cdn.com/ https://apps.bazaarvoice.com/ https://agents.cloud.google.com/ https://display.ugc.bazaarvoice.com/ https://mobilecontent.costco.com/ https://mobilecontent-qa.costco.com/ https://*.pxlecdn.com https://*.pixlee.com https://*.pixlee.co https://fonts.googleapis.com https://yt3.googleusercontent.com/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.affirm.com https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://cdn.fonts.net/ 'unsafe-inline' https://transcend-cdn.com/ https://consent.costco.com/ https://consent.costco.ca/ https://consent.costco.com https://display.ugc.bazaarvoice.com/ https://www.gstatic.com/; img-src 'self' https://dummyimage.com https://cdn.brandfolder.io/ https://*.affirm.com https://delivery-p178262-e1909084.adobeaemcloud.com https://retailmedia-static.criteo.com https://rmp-cdn.moloco.com/ https://*.costcobusinessdelivery.com https://*.tiles.virtualearth.net/ https://dev.virtualearth.net/ https://sdk.virtualearth.net/ https://*.costco.ca/ https://*.costco.com/ https://*.costcotravel.com/ https://*.costcotravel.ca/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://cdn.cookielaw.org/ https://cm.everesttech.net/ https://dpm.demdex.net/ https://display.ugc.bazaarvoice.com https://retailmedia-static.azureedge.net https://retailmedia-static.azureedge.net/ https://network-a.bazaarvoice.com https://network-stg-a.bazaarvoice.com https://retailmedia-static.criteo.com/ https://yt3.googleusercontent.com/ https://gstatic.com/ https://www.gstatic.com/ https://services.google.com/ blob: data:; media-src 'self' https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://cdn.bfldr.com/ https://*.contentstack.com/ https://*.costco-static.com/ https://*.criteo.net/ https://retailmedia-static.criteo.com/ https://*.criteo.net; font-src 'self' https://*.affirm.com https://cdn.bfldr.com/ https://*.costco-static.com/ https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self' about:; form-action 'self' https://*.cardinaltrusted.com https://*.cardinalcommerce.com https://www.cdn-path.com/ https://*.costcobusinessdelivery.com https://*.costco.ca/ https://*.costco.com/ https://r.intake-lr.com/ https://*.akstat.io https://*.opinionlab.com; frame-src https://*.affirm.com https://*.cardinaltrusted.com https://*.cardinalcommerce.com https://www.cdn-path.com/ https://h.costco.com/ https://h.online-metrix.net/ https://*.cybersource.com/ https://*.costcobusinessdelivery.com https://*.costcobusinesscentre.ca/ https://*.ct-costco.com https://costco.demdex.net/ https://costco.centah.com/ https://consent-sync.costco.com/ https://consent-sync.costco.ca/ https://*.criteo.com/ http://*.criteo.com https://*.pixlee.com https://*.pixlee.co https://*.costco.com/ https://*.costco.ca/ https://*.dynatrace.com https://login.centah.com/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://cmppapi.cervey.com/; connect-src 'self' https://*.affirm.com https://rest.api.costco.com/ https://*.moloco.com https://*.rmp-api.moloco.com https://gdx-prd.api.cc-costco.com https://h.costco.com/ https://cdn.bfldr.com/ https",
                "assessment": "present",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 85632,
                "domain_scan_id": 24096,
                "name": "strict-transport-security",
                "value": "max-age=31536000;includeSubDomains",
                "assessment": "present",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            }
        ],
        "signals": [
            {
                "id": 2308492,
                "domain_scan_id": 24096,
                "code": "local_security.script_resources",
                "value": "64",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308504,
                "domain_scan_id": 24096,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308511,
                "domain_scan_id": 24096,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308513,
                "domain_scan_id": 24096,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308518,
                "domain_scan_id": 24096,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308516,
                "domain_scan_id": 24096,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308515,
                "domain_scan_id": 24096,
                "code": "local_resources.discovered_scripts",
                "value": "64",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308517,
                "domain_scan_id": 24096,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308514,
                "domain_scan_id": 24096,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308489,
                "domain_scan_id": 24096,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308490,
                "domain_scan_id": 24096,
                "code": "local_security.bytes_analyzed",
                "value": "524288",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308493,
                "domain_scan_id": 24096,
                "code": "local_security.inline_scripts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308507,
                "domain_scan_id": 24096,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308491,
                "domain_scan_id": 24096,
                "code": "local_security.truncated",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308482,
                "domain_scan_id": 24096,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308481,
                "domain_scan_id": 24096,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308480,
                "domain_scan_id": 24096,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308478,
                "domain_scan_id": 24096,
                "code": "mail_security.spf.all",
                "value": "~all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308479,
                "domain_scan_id": 24096,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308477,
                "domain_scan_id": 24096,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308474,
                "domain_scan_id": 24096,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308476,
                "domain_scan_id": 24096,
                "code": "page.language",
                "value": "en-ca",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308475,
                "domain_scan_id": 24096,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308521,
                "domain_scan_id": 24096,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308494,
                "domain_scan_id": 24096,
                "code": "local_cookies.cookies_observed",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308487,
                "domain_scan_id": 24096,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308488,
                "domain_scan_id": 24096,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308486,
                "domain_scan_id": 24096,
                "code": "dns_consistency.mail_route_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308485,
                "domain_scan_id": 24096,
                "code": "dns_consistency.nameserver_count",
                "value": "6",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308483,
                "domain_scan_id": 24096,
                "code": "dns_consistency.record_count",
                "value": "15",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308520,
                "domain_scan_id": 24096,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308519,
                "domain_scan_id": 24096,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308512,
                "domain_scan_id": 24096,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308496,
                "domain_scan_id": 24096,
                "code": "local_cookies.cookies_missing_httponly",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308497,
                "domain_scan_id": 24096,
                "code": "local_cookies.cookies_missing_samesite",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308495,
                "domain_scan_id": 24096,
                "code": "local_cookies.cookies_missing_secure",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308484,
                "domain_scan_id": 24096,
                "code": "dns_consistency.address_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308510,
                "domain_scan_id": 24096,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308508,
                "domain_scan_id": 24096,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308509,
                "domain_scan_id": 24096,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308499,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308500,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_has_object_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308498,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308502,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308501,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308503,
                "domain_scan_id": 24096,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308506,
                "domain_scan_id": 24096,
                "code": "local_headers.hsts_include_subdomains",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            },
            {
                "id": 2308505,
                "domain_scan_id": 24096,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            }
        ],
        "technologies": [
            {
                "id": 110652,
                "domain_scan_id": 24096,
                "code": "nextjs",
                "name": "Next.js",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "nextjs-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-02 14:39:18",
                "updated_at": "2026-10-02 14:39:18"
            }
        ],
        "availability_history": [
            {
                "id": 24096,
                "status": "completed",
                "finished_at": "2026-10-02 14:39:18",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.costco.ca/",
                "duration_ms": 1000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 24096,
                "finished_at": "2026-10-02 14:39:18",
                "status_code": 200,
                "final_url": "https://www.costco.ca/",
                "safety_score": 72
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}