{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "naturalresources.wales",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-11-01T11:33:20.000000Z",
    "scan": {
        "id": 22749,
        "last_scanned_at": "2026-10-02T11:33:20.000000Z",
        "score": {
            "id": 33944,
            "domain_scan_id": 22749,
            "score_rule_set_id": 5,
            "safety_score": 76,
            "evidence_confidence": 75,
            "uncapped_score": 76,
            "cap_code": null,
            "created_at": "2026-10-02 11:33:20",
            "updated_at": "2026-10-02 11:33:20"
        },
        "http": {
            "id": 33945,
            "domain_scan_id": 22749,
            "final_url": "https://naturalresources.wales/splash?orig=/&lang=cy",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 5500,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://naturalresources.wales/splash?orig=/&lang=cy\"]",
            "observed_at": "2026-10-02 11:33:10",
            "created_at": "2026-10-02 11:33:20",
            "updated_at": "2026-10-02 11:33:20"
        },
        "tls": {
            "id": 32210,
            "domain_scan_id": 22749,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, stateOrProvinceName=Arizona, localityName=Scottsdale, organizationName=GoDaddy.com, Inc., organizationalUnitName=http://certs.godaddy.com/repository/, commonName=Go Daddy Secure Certificate Authority - G2",
            "valid_from": "2025-11-14 05:01:38",
            "valid_until": "2026-12-15 14:29:14",
            "san_names": "[\"*.naturalresources.wales\", \"naturalresources.wales\"]",
            "observed_at": "2026-10-02 11:33:09",
            "created_at": "2026-10-02 11:33:20",
            "updated_at": "2026-10-02 11:33:20"
        },
        "dns": {
            "id": 35655,
            "domain_scan_id": 22749,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-02 11:33:07",
            "created_at": "2026-10-02 11:33:20",
            "updated_at": "2026-10-02 11:33:20"
        },
        "infrastructure_summary": {
            "ip_address": "40.113.81.82",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://naturalresources.wales/splash?orig=/&lang=cy",
            "dnssec_observed": null,
            "dns_record_count": 9,
            "nameserver_count": 4,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2026-12-15 14:29:14",
            "security_header_count": 6,
            "technology_count": 0,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 5500,
            "duration_ms": 1000,
            "cookies_observed": null,
            "script_resources": 2,
            "external_script_hosts": 0,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 79029,
                "domain_scan_id": 22749,
                "name": "content-security-policy",
                "value": "default-src 'self' *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.hotjar.com *.visualstudio.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aspnetcdn.com *.azure.com *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.datatables.net *.fontawesome.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.jquery.com *.jsdelivr.net *.mouseflow.com *.msecnd.net *.sharethis.com *.typekit.net *.youtube.com;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com/font-awesome/ *.cookiebot.com *.datatables.net *.fontawesome.com *.typography.com *.typekit.net;frame-src 'self' *.arcgis.com *.cookiebot.com *.cyfoethnaturiolcymru.gov.uk *.google.com *.googletagmanager.com *.hotjar.com *.powerbi.com *.youtube.com;font-src 'self' data: *.bootstrapcdn.com *.hotjar.com *.typekit.net *.fontawesome.com;img-src 'self' blob: data: *.azurefd.net *.azureedge.net *.cyfoethnaturiol.cymru *.google-analytics.com *.hotjar.com *.naturalresources.wales *.sharethis.com *.umbraco.com *.ytimg.com *.cookiebot.com *.datatables.net;connect-src 'self' ws: wss: *.azure.com *.cookiebot.com *.datatables.net *.doubleclick.net *.google-analytics.com *.hotjar.com *.hotjar.io *.sharethis.com *.visualstudio.com *.fontawesome.com;worker-src blob:;upgrade-insecure-requests",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 79030,
                "domain_scan_id": 22749,
                "name": "permissions-policy",
                "value": "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 79031,
                "domain_scan_id": 22749,
                "name": "referrer-policy",
                "value": "same-origin",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 79032,
                "domain_scan_id": 22749,
                "name": "strict-transport-security",
                "value": "max-age=31536000; includeSubDomains",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 79033,
                "domain_scan_id": 22749,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 79034,
                "domain_scan_id": 22749,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            }
        ],
        "signals": [
            {
                "id": 2137110,
                "domain_scan_id": 22749,
                "code": "local_security.bytes_analyzed",
                "value": "5500",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137128,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_microphone_restricted",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137130,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_payment_restricted",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137126,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_policy_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137131,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_usb_restricted",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137133,
                "domain_scan_id": 22749,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137138,
                "domain_scan_id": 22749,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137136,
                "domain_scan_id": 22749,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137135,
                "domain_scan_id": 22749,
                "code": "local_resources.discovered_scripts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137137,
                "domain_scan_id": 22749,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137134,
                "domain_scan_id": 22749,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137109,
                "domain_scan_id": 22749,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137129,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_geolocation_restricted",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137112,
                "domain_scan_id": 22749,
                "code": "local_security.script_resources",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137111,
                "domain_scan_id": 22749,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137102,
                "domain_scan_id": 22749,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137101,
                "domain_scan_id": 22749,
                "code": "mail_security.dmarc.policy",
                "value": "quarantine",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137100,
                "domain_scan_id": 22749,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137098,
                "domain_scan_id": 22749,
                "code": "mail_security.spf.all",
                "value": "-all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137099,
                "domain_scan_id": 22749,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137097,
                "domain_scan_id": 22749,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137096,
                "domain_scan_id": 22749,
                "code": "page.language",
                "value": "cy-gb",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137141,
                "domain_scan_id": 22749,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137114,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137107,
                "domain_scan_id": 22749,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137108,
                "domain_scan_id": 22749,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137106,
                "domain_scan_id": 22749,
                "code": "dns_consistency.mail_route_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137105,
                "domain_scan_id": 22749,
                "code": "dns_consistency.nameserver_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137103,
                "domain_scan_id": 22749,
                "code": "dns_consistency.record_count",
                "value": "9",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137140,
                "domain_scan_id": 22749,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137139,
                "domain_scan_id": 22749,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137132,
                "domain_scan_id": 22749,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137125,
                "domain_scan_id": 22749,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137123,
                "domain_scan_id": 22749,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137124,
                "domain_scan_id": 22749,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137104,
                "domain_scan_id": 22749,
                "code": "dns_consistency.address_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137115,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_has_object_src",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137113,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137117,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137116,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137118,
                "domain_scan_id": 22749,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137121,
                "domain_scan_id": 22749,
                "code": "local_headers.hsts_include_subdomains",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137120,
                "domain_scan_id": 22749,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137122,
                "domain_scan_id": 22749,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137119,
                "domain_scan_id": 22749,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            },
            {
                "id": 2137127,
                "domain_scan_id": 22749,
                "code": "local_headers.permissions_camera_restricted",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-02 11:33:20",
                "updated_at": "2026-10-02 11:33:20"
            }
        ],
        "technologies": [],
        "availability_history": [
            {
                "id": 22749,
                "status": "completed",
                "finished_at": "2026-10-02 11:33:20",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://naturalresources.wales/splash?orig=/&lang=cy",
                "duration_ms": 1000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 22749,
                "finished_at": "2026-10-02 11:33:20",
                "status_code": 200,
                "final_url": "https://naturalresources.wales/splash?orig=/&lang=cy",
                "safety_score": 76
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}