{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "mbta.com",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-30T14:41:52.000000Z",
    "scan": {
        "id": 10685,
        "last_scanned_at": "2026-09-30T14:41:52.000000Z",
        "score": {
            "id": 10829,
            "domain_scan_id": 10685,
            "score_rule_set_id": 5,
            "safety_score": 75,
            "evidence_confidence": 75,
            "uncapped_score": 75,
            "cap_code": null,
            "created_at": "2026-09-30 14:41:52",
            "updated_at": "2026-09-30 14:41:52"
        },
        "http": {
            "id": 10827,
            "domain_scan_id": 10685,
            "final_url": "https://www.mbta.com/",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 178136,
            "duration_ms": 2000,
            "redirect_chain": "[\"https://www.mbta.com/\"]",
            "observed_at": "2026-09-30 14:41:38",
            "created_at": "2026-09-30 14:41:52",
            "updated_at": "2026-09-30 14:41:52"
        },
        "tls": {
            "id": 10582,
            "domain_scan_id": 10685,
            "valid": 1,
            "protocol": "TLSv1.2",
            "issuer": "countryName=US, organizationName=Amazon, commonName=Amazon RSA 2048 M04",
            "valid_from": "2026-01-26 00:00:00",
            "valid_until": "2027-02-24 23:59:59",
            "san_names": "[\"*.mbta.com\", \"*.mbtace.com\", \"mbta.com\"]",
            "observed_at": "2026-09-30 14:41:36",
            "created_at": "2026-09-30 14:41:52",
            "updated_at": "2026-09-30 14:41:52"
        },
        "dns": {
            "id": 11330,
            "domain_scan_id": 10685,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-30 14:41:36",
            "created_at": "2026-09-30 14:41:52",
            "updated_at": "2026-09-30 14:41:52"
        },
        "infrastructure_summary": {
            "ip_address": "100.49.227.210",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.mbta.com/",
            "dnssec_observed": null,
            "dns_record_count": 17,
            "nameserver_count": 4,
            "mail_exchanger_count": 2,
            "tls_valid": true,
            "tls_valid_until": "2027-02-24 23:59:59",
            "security_header_count": 5,
            "technology_count": 4,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 178136,
            "duration_ms": 2000,
            "cookies_observed": 2,
            "script_resources": 4,
            "external_script_hosts": 1,
            "frame_resources": 1,
            "resource_checks": 5
        },
        "security_headers": [
            {
                "id": 29221,
                "domain_scan_id": 10685,
                "name": "content-security-policy",
                "value": "default-src 'self'; base-uri 'none'; connect-src 'self' https://cdn.mbta.com *.arcgis.com ad.doubleclick.net analytics.google.com analytics.tiktok.com analytics-ipv6.tiktokw.us bded8a3c6ae-1-1053047382554.us-central1.run.app cdn.mbta.com md-eecad2978f7a43f5b7838c919258e6de.ecs.us-east-2.on.aws px.ads.linkedin.com stats.g.doubleclick.net translate.googleapis.com translate-pa.googleapis.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com o89189.ingest.us.sentry.io ws://www.mbta.com wss://www.mbta.com; font-src 'self' cdn.mbta.com; frame-src 'self' *.arcgis.com *.soundcloud.com *.vimeo.com 14897135.fls.doubleclick.net cdn.knightlab.com data.mbta.com livestream.com vimeo.com www.instagram.com www.google.com www.googletagmanager.com www.youtube.com; img-src 'self' https://cdn.mbta.com *.arcgis.com *.google.com *.googleapis.com cdn.mbta.com data: i.ytimg.com fonts.gstatic.com googleads.g.doubleclick.net px.ads.linkedin.com www.facebook.com www.googletagmanager.com www.gstatic.com www.linkedin.com https://live-mbta.pantheonsite.io; script-src 'self' 'unsafe-eval' *.arcgis.com *.tableau.com cdn.mbta.com connect.facebook.net data.mbta.com edge.fullstory.com https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/api/fallback https://www.gstatic.com https://www.googletagmanager.com/gtm.js snap.licdn.com translate.google.com/translate_a/element.js translate-pa.googleapis.com translate.googleapis.com www.instagram.com www.google.com/sorry/index https://cdn.jsdelivr.net/ analytics.tiktok.com 'nonce-rFdQm1eRoWLefLJU040ADius5rApgEahxxshRPw5CYA'; style-src 'self' 'unsafe-inline' cdn.mbta.com www.gstatic.com; worker-src blob: ;;",
                "assessment": "present",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 29222,
                "domain_scan_id": 10685,
                "name": "referrer-policy",
                "value": "strict-origin-when-cross-origin",
                "assessment": "present",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 29223,
                "domain_scan_id": 10685,
                "name": "strict-transport-security",
                "value": "max-age=31536000",
                "assessment": "present",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 29224,
                "domain_scan_id": 10685,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 29225,
                "domain_scan_id": 10685,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            }
        ],
        "signals": [
            {
                "id": 768937,
                "domain_scan_id": 10685,
                "code": "local_resources.item2.host",
                "value": "cdn.mbta.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768946,
                "domain_scan_id": 10685,
                "code": "local_resources.item4.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768947,
                "domain_scan_id": 10685,
                "code": "local_resources.item4.host",
                "value": "www.mbta.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768944,
                "domain_scan_id": 10685,
                "code": "local_resources.item3.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768945,
                "domain_scan_id": 10685,
                "code": "local_resources.item3.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768943,
                "domain_scan_id": 10685,
                "code": "local_resources.item3.sha256",
                "value": "4f7e09e8309f77b0c370d4c5854507a911146f58bbed791834b0e9967b705fc1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768941,
                "domain_scan_id": 10685,
                "code": "local_resources.item3.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768942,
                "domain_scan_id": 10685,
                "code": "local_resources.item3.host",
                "value": "www.mbta.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768939,
                "domain_scan_id": 10685,
                "code": "local_resources.item2.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768940,
                "domain_scan_id": 10685,
                "code": "local_resources.item2.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768938,
                "domain_scan_id": 10685,
                "code": "local_resources.item2.sha256",
                "value": "04a188426b9f5e2584ef1022844e497108c8605e51f7c73fe1abbc6ef7e0e3ff",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768936,
                "domain_scan_id": 10685,
                "code": "local_resources.item2.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768948,
                "domain_scan_id": 10685,
                "code": "local_resources.item4.sha256",
                "value": "2c384404754d4c51fd01972e3a39007771f0be2c79fa96abfabaef8ddbf24b59",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768934,
                "domain_scan_id": 10685,
                "code": "local_resources.item1.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768935,
                "domain_scan_id": 10685,
                "code": "local_resources.item1.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768933,
                "domain_scan_id": 10685,
                "code": "local_resources.item1.sha256",
                "value": "6b7c3e48e03892c369e2a8efcddb7260689e065e2ca4a9f4767aa0ed8cfc69f9",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768931,
                "domain_scan_id": 10685,
                "code": "local_resources.item1.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768932,
                "domain_scan_id": 10685,
                "code": "local_resources.item1.host",
                "value": "translate.google.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768929,
                "domain_scan_id": 10685,
                "code": "local_resources.item0.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768930,
                "domain_scan_id": 10685,
                "code": "local_resources.item0.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768928,
                "domain_scan_id": 10685,
                "code": "local_resources.item0.sha256",
                "value": "82d37ffc79d6f0d0c6ba45a3090a409b00563904b82e37877562897bf5b6a229",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768926,
                "domain_scan_id": 10685,
                "code": "local_resources.item0.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768927,
                "domain_scan_id": 10685,
                "code": "local_resources.item0.host",
                "value": "cdn.mbta.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768889,
                "domain_scan_id": 10685,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768962,
                "domain_scan_id": 10685,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768873,
                "domain_scan_id": 10685,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768874,
                "domain_scan_id": 10685,
                "code": "page.language",
                "value": "en",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768872,
                "domain_scan_id": 10685,
                "code": "page.contact",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.contact\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768871,
                "domain_scan_id": 10685,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768875,
                "domain_scan_id": 10685,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768877,
                "domain_scan_id": 10685,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768876,
                "domain_scan_id": 10685,
                "code": "mail_security.spf.all",
                "value": "~all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768878,
                "domain_scan_id": 10685,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768879,
                "domain_scan_id": 10685,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768880,
                "domain_scan_id": 10685,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768922,
                "domain_scan_id": 10685,
                "code": "local_resources.discovered_scripts",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768890,
                "domain_scan_id": 10685,
                "code": "local_security.script_resources",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768891,
                "domain_scan_id": 10685,
                "code": "local_security.inline_scripts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768892,
                "domain_scan_id": 10685,
                "code": "local_security.frame_resources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768893,
                "domain_scan_id": 10685,
                "code": "local_security.external_script_hosts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768888,
                "domain_scan_id": 10685,
                "code": "local_security.bytes_analyzed",
                "value": "178136",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768887,
                "domain_scan_id": 10685,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768921,
                "domain_scan_id": 10685,
                "code": "local_resources.status",
                "value": "partial",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768924,
                "domain_scan_id": 10685,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768949,
                "domain_scan_id": 10685,
                "code": "local_resources.item4.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768950,
                "domain_scan_id": 10685,
                "code": "local_resources.item4.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768959,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.item0.advisory_count",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768896,
                "domain_scan_id": 10685,
                "code": "local_cookies.cookies_missing_httponly",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768912,
                "domain_scan_id": 10685,
                "code": "local_antivirus.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768914,
                "domain_scan_id": 10685,
                "code": "local_antivirus.engine_version",
                "value": "1.5.4",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768915,
                "domain_scan_id": 10685,
                "code": "local_antivirus.database_version",
                "value": "28139",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768916,
                "domain_scan_id": 10685,
                "code": "local_antivirus.database_date",
                "value": "2026-09-30T06:24:18+00:00",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768913,
                "domain_scan_id": 10685,
                "code": "local_antivirus.bytes_scanned",
                "value": "178136",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768951,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.status",
                "value": "no_known_advisories",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768953,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.limited",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768958,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.item0.version",
                "value": "16.14.0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768961,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.item0.sha256",
                "value": "04a188426b9f5e2584ef1022844e497108c8605e51f7c73fe1abbc6ef7e0e3ff",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768957,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.item0.component",
                "value": "react-dom",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768897,
                "domain_scan_id": 10685,
                "code": "local_cookies.cookies_missing_samesite",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768960,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.item0.advisories",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768954,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.engine_version",
                "value": "5.7.0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768956,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.database_sha256",
                "value": "1f1f8f8d54e4b9f04bd718857f14217d20c2ff3f03992927382b97a133a6b932",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768955,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.database_date",
                "value": "2026-09-30T02:40:06.930Z",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768952,
                "domain_scan_id": 10685,
                "code": "javascript_advisories.checked",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768881,
                "domain_scan_id": 10685,
                "code": "dns_consistency.record_count",
                "value": "17",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768883,
                "domain_scan_id": 10685,
                "code": "dns_consistency.nameserver_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768884,
                "domain_scan_id": 10685,
                "code": "dns_consistency.mail_route_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768886,
                "domain_scan_id": 10685,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768885,
                "domain_scan_id": 10685,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768903,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768923,
                "domain_scan_id": 10685,
                "code": "local_resources.checked",
                "value": "5",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768925,
                "domain_scan_id": 10685,
                "code": "local_resources.bytes_scanned",
                "value": "534768",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768917,
                "domain_scan_id": 10685,
                "code": "local_reputation.status",
                "value": "not_listed",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768920,
                "domain_scan_id": 10685,
                "code": "local_reputation.sha256",
                "value": "dda2ff3e9b338805ced7ad217ac712a083581216639ab2200aa1a9f344fde4aa",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768918,
                "domain_scan_id": 10685,
                "code": "local_reputation.fetched_at",
                "value": "2026-09-30T12:00:07+00:00",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768919,
                "domain_scan_id": 10685,
                "code": "local_reputation.entry_count",
                "value": "386027",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768911,
                "domain_scan_id": 10685,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768904,
                "domain_scan_id": 10685,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768907,
                "domain_scan_id": 10685,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768905,
                "domain_scan_id": 10685,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768906,
                "domain_scan_id": 10685,
                "code": "local_headers.hsts_include_subdomains",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768882,
                "domain_scan_id": 10685,
                "code": "dns_consistency.address_count",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768901,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768902,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768898,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768900,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_has_object_src",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768899,
                "domain_scan_id": 10685,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768909,
                "domain_scan_id": 10685,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768908,
                "domain_scan_id": 10685,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768910,
                "domain_scan_id": 10685,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768894,
                "domain_scan_id": 10685,
                "code": "local_cookies.cookies_observed",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 768895,
                "domain_scan_id": 10685,
                "code": "local_cookies.cookies_missing_secure",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            }
        ],
        "technologies": [
            {
                "id": 28735,
                "domain_scan_id": 10685,
                "code": "bootstrap",
                "name": "Bootstrap",
                "version": null,
                "confidence": "0.8000",
                "source_rule": "bootstrap-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 28733,
                "domain_scan_id": 10685,
                "code": "google-analytics",
                "name": "Google Analytics",
                "version": null,
                "confidence": "0.9400",
                "source_rule": "google-analytics-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 28734,
                "domain_scan_id": 10685,
                "code": "google-tag-manager",
                "name": "Google Tag Manager",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "google-tag-manager-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            },
            {
                "id": 28736,
                "domain_scan_id": 10685,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 14:41:52",
                "updated_at": "2026-09-30 14:41:52"
            }
        ],
        "availability_history": [
            {
                "id": 10685,
                "status": "completed",
                "finished_at": "2026-09-30 14:41:52",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.mbta.com/",
                "duration_ms": 2000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 10685,
                "finished_at": "2026-09-30 14:41:52",
                "status_code": 200,
                "final_url": "https://www.mbta.com/",
                "safety_score": 75
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}