{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "nn.nl",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-31T23:35:24.000000Z",
    "scan": {
        "id": 28651,
        "last_scanned_at": "2026-10-01T23:35:24.000000Z",
        "score": {
            "id": 23425,
            "domain_scan_id": 28651,
            "score_rule_set_id": 5,
            "safety_score": 74,
            "evidence_confidence": 70,
            "uncapped_score": 74,
            "cap_code": null,
            "created_at": "2026-10-01 23:35:24",
            "updated_at": "2026-10-01 23:35:24"
        },
        "http": {
            "id": 23423,
            "domain_scan_id": 28651,
            "final_url": "https://www.nn.nl/",
            "status_code": 200,
            "content_type": "text/html;charset=utf-8",
            "response_bytes": 46631,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://www.nn.nl/\"]",
            "observed_at": "2026-10-01 17:34:56",
            "created_at": "2026-10-01 23:35:23",
            "updated_at": "2026-10-01 23:35:23"
        },
        "tls": {
            "id": 22416,
            "domain_scan_id": 28651,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=DigiCert Inc, commonName=DigiCert Global G3 TLS ECC SHA384 2020 CA1",
            "valid_from": "2026-06-29 00:00:00",
            "valid_until": "2027-01-13 23:59:59",
            "san_names": "[\"*.nn.nl\", \"nn.nl\"]",
            "observed_at": "2026-10-01 17:34:55",
            "created_at": "2026-10-01 23:35:23",
            "updated_at": "2026-10-01 23:35:23"
        },
        "dns": {
            "id": 24747,
            "domain_scan_id": 28651,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-01 17:34:47",
            "created_at": "2026-10-01 23:35:23",
            "updated_at": "2026-10-01 23:35:23"
        },
        "infrastructure_summary": {
            "ip_address": "104.117.76.51",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.nn.nl/",
            "dnssec_observed": null,
            "dns_record_count": 51,
            "nameserver_count": 8,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2027-01-13 23:59:59",
            "security_header_count": 3,
            "technology_count": 1,
            "screenshot_available": false
        },
        "page_stats": {
            "response_bytes": 46631,
            "duration_ms": 1000,
            "cookies_observed": 4,
            "script_resources": 6,
            "external_script_hosts": 1,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 56901,
                "domain_scan_id": 28651,
                "name": "content-security-policy",
                "value": "default-src 'self'; img-src * 'self' data: https: *.mypurecloud.de *.euc1.pure.cloud ad.doubleclick.net ade.googlesyndication.com adservice.google.com www.googletagmanager.com; media-src 'self' https: *.mypurecloud.de *.euc1.pure.cloud *.glance.net *.glancecdn.net; style-src 'self' 'unsafe-inline' https: *.glance.net *.glancecdn.net; frame-ancestors 'self'; font-src 'self' data: https: *.glance.net *.glancecdn.net; connect-src 'self'  analytics.tiktok.com *.mypurecloud.de wss://*.mypurecloud.de *.launchdarkly.com nnb-ms-document-store-service-acc.s3.eu-west-1.amazonaws.com nnb-ms-document-store-service-prd.s3.eu-west-1.amazonaws.com status.signicat.com dataplane.rum.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com wss://*.glance.net wss://*.hotjar.com wss://*.nn-acc.nl wss://*.nn-group.com wss://auvious.video wss://streaming.mypurecloud.de *.2o7.net *.akstat.io *.glance.net *.glancecdn.net *.hotjar.com *.hotjar.io *.mypurecloud.de *.onetrust.com *.rsc.cdn77.org *.demdex.net *.doubleclick.net *.omtrdc.net *.insim.biz *.nn-group.com *.nn-acc.nl *.nn.nl 69o4c7fld0.execute-api.eu-west-1.amazonaws.com el7z2lljh7.execute-api.eu-west-1.amazonaws.com fevgku35a5.execute-api.eu-west-1.amazonaws.com havdit7pd8.execute-api.eu-west-1.amazonaws.com nn-nl-mortgages-upload-service-prd.s3.eu-west-1.amazonaws.com prd-mrdb-api-data-storage.s3.eu-west-1.amazonaws.com ycov3pi8aj.execute-api.eu-west-1.amazonaws.com api-appsee.service-now.com api.ciuvo.com api.ext-sandbox.fourthline.com api.fourthline.com api.linktexting.com api.nibud.nl api.presspage.com api.trongrid.io bat.bing.com c.go-mpulse.net cdn.cookielaw.org/ cdn.linkedin.oribi.io cdn.optimizely.com cke4.ckeditor.com cm.everesttech.net code.jquery.com dcs.adobedc.net edge.adobedc.net eventsingest-demo.cidemo.sas.com fasttrack.sb.blueconic.net fonts.googleapis.com maps.googleapis.com infragrid.v.network logx.optimizely.com md-scp.kampyle.com meetlookup.com metrics.articulate.com nn-group.bbvms.com nn-nn.digitalcx.com overbridgenet.com pagead2.googlesyndication.com plugins.blueconic.net px.ads.linkedin.com raw.githubusercontent.com region1.analytics.google.com resources.digital-cloud.medallia.eu analytics-fe.digital-cloud.medallia.eu rum.optimizely.com sandbox.api.fourthline.com sandbox.v.fourthline.com sentry.auvious.com sun.tronex.io translate.googleapis.com *.akamaihd.net udc-neb.kampyle.com v.fourthline.com www.facebook.com/tr/ www.google.com www.google.nl/pagead/ www.googleadservices.com www.gstatic.com; frame-src 'self' *.mypurecloud.de *.euc1.pure.cloud schermdelen.nl nn-group.bbvms.com *.demdex.net *.doubleclick.net *.glance.net accounts.google.com cdn.engageone.video cdncache-a.akamaihd.net cdnjs.cloudflare.com content.lp.nn.nl dev-life-outsys.insim.biz eu-west-1-mt-preprod2.engageone.video eu-west-1-mt-prod2.engageone.video fonts.engageone.video gateway.zscloud.net informatie.cz.nl lpcdn.lpsnmedia.net maps.google.nl open.spotify.com platform.twitter.com player.vimeo.com presspage-production-content.s3.amazonaws.com resources.digital-cloud.medallia.eu tpc.googlesyndication.com tst-life-outsys.insim.biz w.soundcloud.com wiarekentool.nntools.nl www.finly.nl www.quintrics.nl www.youtube-nocookie.com www.youtube.com www.googletagmanager.com; child-src *.mypurecloud.de *.euc1.pure.cloud; object-src 'self' *.mypurecloud.de *.euc1.pure.cloud *.newstat.net/ab/ *.glancecdn.net *.linkedin.com ad.doubleclick.net googleads.g.doubleclick.net 6005723.global.siteimproveanalytics.io chatbot.api.nn-group.com l845.nn.nl www.nn-acc.nl www.nn.nl content.presspage.com fonts.googleapis.com fonts.gstatic.com nn-group.bbvms.com nn.d3.sc.omtrdc.net script.hotjar.com static.hotjar.com translate.googleapis.com udc-neb.kampyle.com www.hypotheekbond.nl; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: *.mypurecloud.de *.euc1.pure.cloud *.demdex.net *.glance.net *.glancecdn.net *.googletagmanager.com *.liveperson.net *.pardot.com *.presspage.com *.nn.nl *.nn-acc.nl *.nn-group.com ads-api.twitter.com ads-twitter.com analytics.twitter.com platform.twitter.com platform.linkedin.com ",
                "assessment": "present",
                "created_at": "2026-10-01 23:35:23",
                "updated_at": "2026-10-01 23:35:23"
            },
            {
                "id": 56902,
                "domain_scan_id": 28651,
                "name": "referrer-policy",
                "value": "same-origin",
                "assessment": "present",
                "created_at": "2026-10-01 23:35:23",
                "updated_at": "2026-10-01 23:35:23"
            },
            {
                "id": 56903,
                "domain_scan_id": 28651,
                "name": "strict-transport-security",
                "value": "max-age=63072000",
                "assessment": "present",
                "created_at": "2026-10-01 23:35:23",
                "updated_at": "2026-10-01 23:35:23"
            }
        ],
        "signals": [
            {
                "id": 1543269,
                "domain_scan_id": 28651,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543301,
                "domain_scan_id": 28651,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543306,
                "domain_scan_id": 28651,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543304,
                "domain_scan_id": 28651,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543303,
                "domain_scan_id": 28651,
                "code": "local_resources.discovered_scripts",
                "value": "6",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543305,
                "domain_scan_id": 28651,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543302,
                "domain_scan_id": 28651,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543276,
                "domain_scan_id": 28651,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543277,
                "domain_scan_id": 28651,
                "code": "local_security.bytes_analyzed",
                "value": "46631",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543281,
                "domain_scan_id": 28651,
                "code": "local_security.external_script_hosts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543280,
                "domain_scan_id": 28651,
                "code": "local_security.inline_scripts",
                "value": "7",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543279,
                "domain_scan_id": 28651,
                "code": "local_security.script_resources",
                "value": "6",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543278,
                "domain_scan_id": 28651,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543299,
                "domain_scan_id": 28651,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543268,
                "domain_scan_id": 28651,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543267,
                "domain_scan_id": 28651,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543266,
                "domain_scan_id": 28651,
                "code": "mail_security.spf.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543262,
                "domain_scan_id": 28651,
                "code": "page.contact",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.contact\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543265,
                "domain_scan_id": 28651,
                "code": "page.language",
                "value": "nl",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543263,
                "domain_scan_id": 28651,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543264,
                "domain_scan_id": 28651,
                "code": "page.support",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.support\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543310,
                "domain_scan_id": 28651,
                "code": "security_txt.contact_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543311,
                "domain_scan_id": 28651,
                "code": "security_txt.expires_valid",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543313,
                "domain_scan_id": 28651,
                "code": "security_txt.has_canonical",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543312,
                "domain_scan_id": 28651,
                "code": "security_txt.has_policy",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543309,
                "domain_scan_id": 28651,
                "code": "security_txt.status",
                "value": "present",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543298,
                "domain_scan_id": 28651,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543274,
                "domain_scan_id": 28651,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543275,
                "domain_scan_id": 28651,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543273,
                "domain_scan_id": 28651,
                "code": "dns_consistency.mail_route_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543272,
                "domain_scan_id": 28651,
                "code": "dns_consistency.nameserver_count",
                "value": "8",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543270,
                "domain_scan_id": 28651,
                "code": "dns_consistency.record_count",
                "value": "51",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543308,
                "domain_scan_id": 28651,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543307,
                "domain_scan_id": 28651,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543300,
                "domain_scan_id": 28651,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543284,
                "domain_scan_id": 28651,
                "code": "local_cookies.cookies_missing_httponly",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543285,
                "domain_scan_id": 28651,
                "code": "local_cookies.cookies_missing_samesite",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543283,
                "domain_scan_id": 28651,
                "code": "local_cookies.cookies_missing_secure",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543282,
                "domain_scan_id": 28651,
                "code": "local_cookies.cookies_observed",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "local-cookies-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543271,
                "domain_scan_id": 28651,
                "code": "dns_consistency.address_count",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543296,
                "domain_scan_id": 28651,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543297,
                "domain_scan_id": 28651,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543287,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_has_default_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543288,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_has_object_src",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543286,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543290,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_unsafe_eval",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543289,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_unsafe_inline",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543291,
                "domain_scan_id": 28651,
                "code": "local_headers.csp_wildcard_sources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543294,
                "domain_scan_id": 28651,
                "code": "local_headers.hsts_include_subdomains",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543293,
                "domain_scan_id": 28651,
                "code": "local_headers.hsts_max_age",
                "value": "63072000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543295,
                "domain_scan_id": 28651,
                "code": "local_headers.hsts_preload",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            },
            {
                "id": 1543292,
                "domain_scan_id": 28651,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            }
        ],
        "technologies": [
            {
                "id": 67462,
                "domain_scan_id": 28651,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-01 23:35:24",
                "updated_at": "2026-10-01 23:35:24"
            }
        ],
        "availability_history": [
            {
                "id": 28651,
                "status": "completed",
                "finished_at": "2026-10-01 23:35:24",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.nn.nl/",
                "duration_ms": 1000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 28651,
                "finished_at": "2026-10-01 23:35:24",
                "status_code": 200,
                "final_url": "https://www.nn.nl/",
                "safety_score": 74
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}