{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "leave-russia.org",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-30T05:41:22.000000Z",
    "scan": {
        "id": 7631,
        "last_scanned_at": "2026-09-30T05:41:22.000000Z",
        "score": {
            "id": 7195,
            "domain_scan_id": 7631,
            "score_rule_set_id": 5,
            "safety_score": 73,
            "evidence_confidence": 75,
            "uncapped_score": 73,
            "cap_code": null,
            "created_at": "2026-09-30 05:41:22",
            "updated_at": "2026-09-30 05:41:22"
        },
        "http": {
            "id": 7194,
            "domain_scan_id": 7631,
            "final_url": "https://leave-russia.org/",
            "status_code": 200,
            "content_type": "text/html; charset=UTF-8",
            "response_bytes": 539793,
            "duration_ms": 0,
            "redirect_chain": "[]",
            "observed_at": "2026-09-30 05:41:11",
            "created_at": "2026-09-30 05:41:21",
            "updated_at": "2026-09-30 05:41:21"
        },
        "tls": {
            "id": 7169,
            "domain_scan_id": 7631,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Google Trust Services, commonName=WE1",
            "valid_from": "2026-08-05 10:37:20",
            "valid_until": "2026-11-03 11:35:48",
            "san_names": "[\"*.leave-russia.org\", \"leave-russia.org\"]",
            "observed_at": "2026-09-30 05:41:11",
            "created_at": "2026-09-30 05:41:21",
            "updated_at": "2026-09-30 05:41:21"
        },
        "dns": {
            "id": 7628,
            "domain_scan_id": 7631,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-30 05:41:11",
            "created_at": "2026-09-30 05:41:21",
            "updated_at": "2026-09-30 05:41:21"
        },
        "infrastructure_summary": {
            "ip_address": "104.21.73.14",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Cloudflare",
            "waf": null,
            "http_status": 200,
            "final_url": "https://leave-russia.org/",
            "dnssec_observed": null,
            "dns_record_count": 7,
            "nameserver_count": 2,
            "mail_exchanger_count": 0,
            "tls_valid": true,
            "tls_valid_until": "2026-11-03 11:35:48",
            "security_header_count": 2,
            "technology_count": 2,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 539793,
            "duration_ms": 0,
            "cookies_observed": null,
            "script_resources": 0,
            "external_script_hosts": 0,
            "frame_resources": 1,
            "resource_checks": 2
        },
        "security_headers": [
            {
                "id": 20357,
                "domain_scan_id": 7631,
                "name": "strict-transport-security",
                "value": "max-age=31536000; includeSubDomains",
                "assessment": "present",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 20358,
                "domain_scan_id": 7631,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            }
        ],
        "signals": [
            {
                "id": 479419,
                "domain_scan_id": 7631,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479418,
                "domain_scan_id": 7631,
                "code": "local_resources.checked",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479417,
                "domain_scan_id": 7631,
                "code": "local_resources.discovered_scripts",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479422,
                "domain_scan_id": 7631,
                "code": "local_resources.item0.host",
                "value": "leave-russia.org",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479421,
                "domain_scan_id": 7631,
                "code": "local_resources.item0.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479423,
                "domain_scan_id": 7631,
                "code": "local_resources.item0.sha256",
                "value": "564f2c821fdd40eba04ec603b657470e54a1f6a12a1ba8fce44f3ec7a962d3fa",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479425,
                "domain_scan_id": 7631,
                "code": "local_resources.item0.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479424,
                "domain_scan_id": 7631,
                "code": "local_resources.item0.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479427,
                "domain_scan_id": 7631,
                "code": "local_resources.item1.host",
                "value": "leave-russia.org",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479426,
                "domain_scan_id": 7631,
                "code": "local_resources.item1.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479428,
                "domain_scan_id": 7631,
                "code": "local_resources.item1.sha256",
                "value": "53f69689ec392bffdad1b311ff987d10185c9c558963dcf52c6987aa5bbcc5bb",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479430,
                "domain_scan_id": 7631,
                "code": "local_resources.item1.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479429,
                "domain_scan_id": 7631,
                "code": "local_resources.item1.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479420,
                "domain_scan_id": 7631,
                "code": "local_resources.bytes_scanned",
                "value": "11186",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479416,
                "domain_scan_id": 7631,
                "code": "local_resources.status",
                "value": "partial",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479393,
                "domain_scan_id": 7631,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479394,
                "domain_scan_id": 7631,
                "code": "local_security.bytes_analyzed",
                "value": "524288",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479397,
                "domain_scan_id": 7631,
                "code": "local_security.frame_resources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479396,
                "domain_scan_id": 7631,
                "code": "local_security.inline_scripts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479395,
                "domain_scan_id": 7631,
                "code": "local_security.truncated",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479386,
                "domain_scan_id": 7631,
                "code": "mail_security.dmarc.status",
                "value": "not_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479385,
                "domain_scan_id": 7631,
                "code": "mail_security.spf.status",
                "value": "not_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479382,
                "domain_scan_id": 7631,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479384,
                "domain_scan_id": 7631,
                "code": "page.language",
                "value": "en",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479383,
                "domain_scan_id": 7631,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479433,
                "domain_scan_id": 7631,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479405,
                "domain_scan_id": 7631,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479391,
                "domain_scan_id": 7631,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479392,
                "domain_scan_id": 7631,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479390,
                "domain_scan_id": 7631,
                "code": "dns_consistency.mail_route_count",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479389,
                "domain_scan_id": 7631,
                "code": "dns_consistency.nameserver_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479387,
                "domain_scan_id": 7631,
                "code": "dns_consistency.record_count",
                "value": "7",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479432,
                "domain_scan_id": 7631,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479431,
                "domain_scan_id": 7631,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479408,
                "domain_scan_id": 7631,
                "code": "local_antivirus.bytes_scanned",
                "value": "539793",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479411,
                "domain_scan_id": 7631,
                "code": "local_antivirus.database_date",
                "value": "2026-09-29T06:26:15+00:00",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479410,
                "domain_scan_id": 7631,
                "code": "local_antivirus.database_version",
                "value": "28138",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479409,
                "domain_scan_id": 7631,
                "code": "local_antivirus.engine_version",
                "value": "1.5.4",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479407,
                "domain_scan_id": 7631,
                "code": "local_antivirus.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479388,
                "domain_scan_id": 7631,
                "code": "dns_consistency.address_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479403,
                "domain_scan_id": 7631,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479404,
                "domain_scan_id": 7631,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479398,
                "domain_scan_id": 7631,
                "code": "local_headers.csp_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479401,
                "domain_scan_id": 7631,
                "code": "local_headers.hsts_include_subdomains",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479400,
                "domain_scan_id": 7631,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479402,
                "domain_scan_id": 7631,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479399,
                "domain_scan_id": 7631,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479406,
                "domain_scan_id": 7631,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479414,
                "domain_scan_id": 7631,
                "code": "local_reputation.entry_count",
                "value": "386017",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479413,
                "domain_scan_id": 7631,
                "code": "local_reputation.fetched_at",
                "value": "2026-09-30T00:00:09+00:00",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479415,
                "domain_scan_id": 7631,
                "code": "local_reputation.sha256",
                "value": "20f2b01cab8045631dedd1bf041a7167eb625d8a52879704f50d2cc2afc2681d",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 479412,
                "domain_scan_id": 7631,
                "code": "local_reputation.status",
                "value": "not_listed",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            }
        ],
        "technologies": [
            {
                "id": 17972,
                "domain_scan_id": 7631,
                "code": "cloudflare",
                "name": "Cloudflare",
                "version": null,
                "confidence": "0.9800",
                "source_rule": "cloudflare-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            },
            {
                "id": 17973,
                "domain_scan_id": 7631,
                "code": "google-tag-manager",
                "name": "Google Tag Manager",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "google-tag-manager-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 05:41:21",
                "updated_at": "2026-09-30 05:41:21"
            }
        ],
        "availability_history": [
            {
                "id": 7631,
                "status": "completed",
                "finished_at": "2026-09-30 05:41:22",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://leave-russia.org/",
                "duration_ms": 0
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 7631,
                "finished_at": "2026-09-30 05:41:22",
                "status_code": 200,
                "final_url": "https://leave-russia.org/",
                "safety_score": 73
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}