{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "hsbc.com.hk",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-11-01T15:57:10.000000Z",
    "scan": {
        "id": 31833,
        "last_scanned_at": "2026-10-02T15:57:10.000000Z",
        "score": {
            "id": 38212,
            "domain_scan_id": 31833,
            "score_rule_set_id": 5,
            "safety_score": 66,
            "evidence_confidence": 70,
            "uncapped_score": 66,
            "cap_code": null,
            "created_at": "2026-10-02 15:57:10",
            "updated_at": "2026-10-02 15:57:10"
        },
        "http": {
            "id": 38222,
            "domain_scan_id": 31833,
            "final_url": "https://www.hsbc.com.hk/",
            "status_code": 200,
            "content_type": "text/html;charset=utf-8",
            "response_bytes": 244426,
            "duration_ms": 2000,
            "redirect_chain": "[\"https://www.hsbc.com.hk/\"]",
            "observed_at": "2026-10-02 15:56:33",
            "created_at": "2026-10-02 15:57:09",
            "updated_at": "2026-10-02 15:57:09"
        },
        "tls": {
            "id": 36158,
            "domain_scan_id": 31833,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=DigiCert Inc, commonName=DigiCert EV RSA CA G2",
            "valid_from": "2025-10-15 00:00:00",
            "valid_until": "2026-11-15 23:59:59",
            "san_names": "[\"ebanking.hsbc.co.nz\", \"expat.hsbc.com\", \"firstdirect.com\", \"hangseng.com\", \"hangseng.com.hk\", \"hangsengbank.com\", \"hangsengbank.com.hk\", \"hangsenginvestment.com\", \"hfcbank.co.uk\", \"homeandaway.hsbc.com\", \"hsbc.ae\", \"hsbc.am\", \"hsbc.bm\", \"hsbc.ca\", \"hsbc.cn\", \"hsbc.co.in\", \"hsbc.co.mu\", \"hsbc.co.nz\", \"hsbc.co.om\", \"hsbc.co.uk\", \"hsbc.com.ar\", \"hsbc.com.au\", \"hsbc.com.bd\", \"hsbc.com.bh\", \"hsbc.com.cn\", \"hsbc.com.eg\", \"hsbc.com.hk\", \"hsbc.com.mo\", \"hsbc.com.mt\", \"hsbc.com.mx\", \"hsbc.com.my\", \"hsbc.com.ph\", \"hsbc.com.qa\", \"hsbc.com.sg\", \"hsbc.com.tw\", \"hsbc.com.vn\", \"hsbc.fr\", \"hsbc.gr\", \"hsbc.lk\", \"hsbc.my\", \"hsbc.uk\", \"hsbcadvance.co.in\", \"hsbcadvance.com.cn\", \"hsbcadvance.com.my\", \"hsbcadvance.com.ph\", \"hsbcadvance.com.sg\", \"hsbcadvance.com.tw\", \"hsbcadvance.in\", \"hsbcadvance.my\", \"hsbcadvance.ph\", \"hsbcadvanceusa.com\", \"hsbcamanah.com.my\", \"hsbcamanah.my\", \"hsbccreditcard.com\", \"hsbcdirect.com\", \"hsbcinsurance.com.cn\", \"hsbclife.com.sg\", \"hsbcpremier.com.au\", \"hsbcpremier.com.my\", \"hsbcpremier.com.ph\", \"hsbcpremier.com.vn\", \"hsbcpremierusa.com\", \"insurance.hsbc.com.sg\", \"trahk.com.hk\", \"us.hsbc.com\", \"vn.hsbc.com\", \"www.assurancesvie.hsbc.fr\", \"www.ciiom.hsbc.com\", \"www.hfcbank.co.uk\", \"www.internationalservices.hsbc.com\", \"zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com\"]",
            "observed_at": "2026-10-02 15:56:31",
            "created_at": "2026-10-02 15:57:09",
            "updated_at": "2026-10-02 15:57:09"
        },
        "dns": {
            "id": 40090,
            "domain_scan_id": 31833,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-02 15:56:30",
            "created_at": "2026-10-02 15:57:09",
            "updated_at": "2026-10-02 15:57:09"
        },
        "infrastructure_summary": {
            "ip_address": "75.2.113.238",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Amazon CloudFront",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.hsbc.com.hk/",
            "dnssec_observed": null,
            "dns_record_count": 37,
            "nameserver_count": 6,
            "mail_exchanger_count": 2,
            "tls_valid": true,
            "tls_valid_until": "2026-11-15 23:59:59",
            "security_header_count": 4,
            "technology_count": 3,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 244426,
            "duration_ms": 2000,
            "cookies_observed": null,
            "script_resources": 4,
            "external_script_hosts": 2,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 88049,
                "domain_scan_id": 31833,
                "name": "content-security-policy",
                "value": "default-src 'self' *.hsbc.com.hk *.mastercard.com.au *.demdex.net *.lpsnmedia.net *.liveperson.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.tiqcdn.com *.tealiumiq.com *.liveperson.net *.googletagmanager.com *.hsbc.co.uk *.hsbc.com.hk *.doubleclick.net *.googleadservices.com *.lpsnmedia.net *.optimizely.com *.google.com *.gstatic.com *.appdynamics.com *.googleapis.com *.awswaf.com *.analytics.yahoo.com vjs.zencdn.net players.brightcove.net *.ads-twitter.com *.hsbc.ae rum.hlx.page *.hsbc.com.hk:* *.walkme.com bat.bing.com *.recaptcha.net *.gstatic.cn *.biocatch.com s.yimg.com tpc.googlesyndication.com connect.facebook.net tags.tiqcdn.com www.google.com.hk www.googletagmanager.com cdn.appdynamics.com www.google-analytics.com cdn-assets-prod.s3.amazonaws.com *.callsign.com *.brightcove.net *.g.doubleclick.net *.zencdn.net *.hsbc.com.cn *.sc.omtrdc.net *.google-analytics.com ssl.google-analytics.com googleads.g.doubleclick.net www.google.com *.v.liveperson.net *.googlesyndication.com c-hsbc.lytics.io; img-src data: * blob: android-webview-video-poster: android-webview: *.lpsnmedia.net *.liveperson.net; connect-src 'self' *.tiqcdn.com *.tealiumiq.com *.hsbc.com.hk *.eum-appdynamics.com *.optimizely.com wss://*.liveperson.net *.cloud.hsbc *.awswaf.com *.analytics.yahoo.com players.brightcove.net edge.api.brightcove.com *.googleapis.com *.hsbc.ae *.omtrdc.net *.demdex.net *.hsbc.co.om *.brightcovecdn.com *.hsbc.com.hk:* *.walkme.com bat.bing.com *.biocatch.com rbwm-api.us.hsbc.com rbwm-api.hsbc.co.uk rbwm-api.hsbc.com.hk ad.doubleclick.net www.facebook.com maps.googleapis.com *.siteintercept.qualtrics.com adservice.google.com manifest.prod.boltdns.net www.google.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com www.google.com.hk connect.facebook.net lptag.liveperson.net accdn.lpsnmedia.net *.v.liveperson.net s.yimg.com cdn.appdynamics.com cdn-assets-prod.s3.amazonaws.com brightcove.hs.llnwd.net *.akamaihd.net *.callsign.com *.googletagmanager.com *.facebook.com *.brightcove.com *.boltdns.net *.hs.llnwd.net *.hsbc.com.cn t.co analytics.twitter.com *.api.brightcove.com analytics.google.com *.google-analytics.com *.google.com.hk *.g.doubleclick.net *.analytics.google.com *.doubleclick.net *.liveperson.net *.lpsnmedia.net wss://*.hsbc.com.hk; frame-src 'self' blob: *.lpsnmedia.net *.optimizely.com *.liveperson.net *.google.com *.doubleclick.net *.analytics.yahoo.com players.brightcove.net *.walkme.com *.googletagmanager.com *.recaptcha.net www.facebook.com tpc.googlesyndication.com connect.facebook.net gateway.zscalertwo.net gateway.zscloud.net sts-aad.auth.hsbc.com lpcdn.lpsnmedia.net 8694241.fls.doubleclick.net *.online-metrix.net *.hsbc.com.hk *.demdex.net *.id.opendns.com *.tiqcdn.com *.facebook.com bid.g.doubleclick.net cdntm.hsbc.com.hk; frame-ancestors 'self' *.liveperson.net www.hsbc.com.hk *.hsbc.com.hk; font-src 'self' data: *.hsbc.com.hk *.gstatic.com *.walkme.com fonts.gstatic.com cdn.jsdelivr.net at.alicdn.com *.avast.com *.alicdn.com; worker-src 'self' blob: *.walkme.com; style-src 'self' 'unsafe-inline' *.hsbc.com.hk *.googleapis.com players.brightcove.net *.walkme.com *.askus.hsbc.co.uk *.lpsnmedia.net *.liveperson.net c-hsbc.lytics.io; object-src 'self' blob:; child-src 'self' blob:; media-src 'self' blob: *.boltdns.net *.media.brightcove.com *.llnw.net *.llnwd.net *.akafms.net *.akamaihd.net *.cf.brightcove.com *.brightcovecdn.com lpcdn.lpsnmedia.net manifest.prod.boltdns.net ssl.gstatic.com players.brightcove.net *.hsbc.com.hk *.lpsnmedia.net; manifest-src 'self'; upgrade-insecure-requests ; report-uri /csp/report;",
                "assessment": "present",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 88050,
                "domain_scan_id": 31833,
                "name": "strict-transport-security",
                "value": "max-age=31536000; includeSubdomains",
                "assessment": "present",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 88051,
                "domain_scan_id": 31833,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 88052,
                "domain_scan_id": 31833,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            }
        ],
        "signals": [
            {
                "id": 2372425,
                "domain_scan_id": 31833,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372444,
                "domain_scan_id": 31833,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372449,
                "domain_scan_id": 31833,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372447,
                "domain_scan_id": 31833,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372446,
                "domain_scan_id": 31833,
                "code": "local_resources.discovered_scripts",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372448,
                "domain_scan_id": 31833,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372445,
                "domain_scan_id": 31833,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372423,
                "domain_scan_id": 31833,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372424,
                "domain_scan_id": 31833,
                "code": "local_security.bytes_analyzed",
                "value": "244426",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372428,
                "domain_scan_id": 31833,
                "code": "local_security.external_script_hosts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372427,
                "domain_scan_id": 31833,
                "code": "local_security.inline_scripts",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372426,
                "domain_scan_id": 31833,
                "code": "local_security.script_resources",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372442,
                "domain_scan_id": 31833,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372416,
                "domain_scan_id": 31833,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372415,
                "domain_scan_id": 31833,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372414,
                "domain_scan_id": 31833,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372413,
                "domain_scan_id": 31833,
                "code": "mail_security.spf.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372408,
                "domain_scan_id": 31833,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372409,
                "domain_scan_id": 31833,
                "code": "page.contact",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.contact\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372412,
                "domain_scan_id": 31833,
                "code": "page.language",
                "value": "en-hk",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372410,
                "domain_scan_id": 31833,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372411,
                "domain_scan_id": 31833,
                "code": "page.support",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.support\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372452,
                "domain_scan_id": 31833,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372440,
                "domain_scan_id": 31833,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372421,
                "domain_scan_id": 31833,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372422,
                "domain_scan_id": 31833,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372420,
                "domain_scan_id": 31833,
                "code": "dns_consistency.mail_route_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372419,
                "domain_scan_id": 31833,
                "code": "dns_consistency.nameserver_count",
                "value": "6",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372417,
                "domain_scan_id": 31833,
                "code": "dns_consistency.record_count",
                "value": "37",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372451,
                "domain_scan_id": 31833,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372450,
                "domain_scan_id": 31833,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372443,
                "domain_scan_id": 31833,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372441,
                "domain_scan_id": 31833,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372439,
                "domain_scan_id": 31833,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372418,
                "domain_scan_id": 31833,
                "code": "dns_consistency.address_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372430,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372431,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_has_object_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372429,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372433,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372432,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372434,
                "domain_scan_id": 31833,
                "code": "local_headers.csp_wildcard_sources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372437,
                "domain_scan_id": 31833,
                "code": "local_headers.hsts_include_subdomains",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372436,
                "domain_scan_id": 31833,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372438,
                "domain_scan_id": 31833,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 2372435,
                "domain_scan_id": 31833,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            }
        ],
        "technologies": [
            {
                "id": 114316,
                "domain_scan_id": 31833,
                "code": "apache",
                "name": "Apache HTTP Server",
                "version": null,
                "confidence": "0.9300",
                "source_rule": "apache-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 114317,
                "domain_scan_id": 31833,
                "code": "bootstrap",
                "name": "Bootstrap",
                "version": null,
                "confidence": "0.8000",
                "source_rule": "bootstrap-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            },
            {
                "id": 114318,
                "domain_scan_id": 31833,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-02 15:57:09",
                "updated_at": "2026-10-02 15:57:09"
            }
        ],
        "availability_history": [
            {
                "id": 31833,
                "status": "completed",
                "finished_at": "2026-10-02 15:57:10",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.hsbc.com.hk/",
                "duration_ms": 2000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 31833,
                "finished_at": "2026-10-02 15:57:10",
                "status_code": 200,
                "final_url": "https://www.hsbc.com.hk/",
                "safety_score": 66
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}