{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "notion.so",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-26T18:55:47.000000Z",
    "scan": {
        "id": 1417,
        "last_scanned_at": "2026-09-26T18:55:47.000000Z",
        "score": {
            "id": 1071,
            "domain_scan_id": 1417,
            "score_rule_set_id": 5,
            "safety_score": 66,
            "evidence_confidence": 65,
            "uncapped_score": 66,
            "cap_code": null,
            "created_at": "2026-09-26 18:55:47",
            "updated_at": "2026-09-28 17:28:08"
        },
        "http": {
            "id": 1069,
            "domain_scan_id": 1417,
            "final_url": "https://www.notion.com/",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 240419,
            "duration_ms": 0,
            "redirect_chain": "[\"https://www.notion.so/\", \"https://www.notion.com/\"]",
            "observed_at": "2026-09-26 18:55:41",
            "created_at": "2026-09-26 18:55:45",
            "updated_at": "2026-09-26 18:55:45"
        },
        "tls": {
            "id": 1281,
            "domain_scan_id": 1417,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Google Trust Services, commonName=WE1",
            "valid_from": "2026-08-13 22:59:48",
            "valid_until": "2026-11-11 23:59:35",
            "san_names": "[\"*.dev.notion.so\", \"*.notion.so\", \"*.stg.notion.so\", \"*.www.notion.so\", \"notion.so\"]",
            "observed_at": "2026-09-26 18:55:41",
            "created_at": "2026-09-26 18:55:45",
            "updated_at": "2026-09-26 18:55:45"
        },
        "dns": {
            "id": 1415,
            "domain_scan_id": 1417,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-26 18:55:41",
            "created_at": "2026-09-26 18:55:44",
            "updated_at": "2026-09-26 18:55:44"
        },
        "infrastructure_summary": {
            "ip_address": "208.103.161.1",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Cloudflare",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.notion.com/",
            "dnssec_observed": null,
            "dns_record_count": 18,
            "nameserver_count": 2,
            "mail_exchanger_count": 0,
            "tls_valid": true,
            "tls_valid_until": "2026-11-11 23:59:35",
            "security_header_count": 3,
            "technology_count": 2,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 240419,
            "duration_ms": 0,
            "cookies_observed": null,
            "script_resources": null,
            "external_script_hosts": null,
            "frame_resources": null,
            "resource_checks": null
        },
        "security_headers": [
            {
                "id": 2897,
                "domain_scan_id": 1417,
                "name": "content-security-policy",
                "value": "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gist.github.com https://apis.google.com https://cdn.amplitude.com https://api.amplitude.com https://dev-embed.notion.co https://embed.notion.co https://static.zdassets.com https://api.smooch.io\t https://solve-widget.forethought.ai https://decagon.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://embed.typeform.com https://admin.typeform.com https://ucv.bynder.com https://js.sentry-cdn.com https://js.chilipiper.com https://platform.twitter.com https://cdn.syndication.twimg.com https://accounts.google.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://app.cal.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.metadata.io https://platformapi.metadata.io https://api-gw.metadata.io https://cdn.cr-relay.com https://d2hrivdxn8ekm8.cloudfront.net https://d1lu3pmaz2ilpx.cloudfront.net https://dvqigh9b7wa32.cloudfront.net https://d330aiyvva2oww.cloudfront.net https://d34r8q7sht0t9k.cloudfront.net https://transcend-cdn.com https://wcs.naver.com https://wcs.naver.net https://ssl.pstatic.net https://cdn01.boxcdn.net https://api.tailorhq.ai https://app.tailorhq.ai https://cdn.tailorhq.ai https://cached-api.tailorhq.ai https://cdn.sprig.com https://assets.customer.io https://track.customer.io https://code.gist.build https://www.google.com https://www.gstatic.com https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://x.clearbitjs.com https://connect.facebook.net https://snap.licdn.com/ https://px.ads.linkedin.com/ https://munchkin.marketo.net https://info.notion.com https://bat.bing.com https://s.yimg.jp https://www.youtube-nocookie.com https://www.youtube.com/iframe_api https://js.partnerstack.com https://partnerlinks.io https://analytics.tiktok.com/ https://vitals.vercel-insights.com https://va.vercel-scripts.com https://vercel.live https://www.redditstatic.com https://static.ads-twitter.com https://insights.metadata.io https://bzrcdn.openai.com https://acdn.adnxs.com/dmp/up/pixie.js https://dx.mountain.com https://a.usbrowserspeed.com https://static.hotjar.com https://script.hotjar.com https://cloud.memsource.com https://editor.memsource.com https://*.vector.co https://d-code.liadm.com/ https://*.usbrowserspeed.com;connect-src 'self' data: blob: https://img.notionusercontent.com https://artifact.notionusercontent.com https://notion.so/eap https://cdn.amplitude.com https://api.amplitude.com https://app.notion.com notion://app.notion.com https://app.prod.notion.com https://app.canary.notion.com https://api.embed.ly https://dev-embed.notion.co https://embed.notion.co https://ekr.zdassets.com https://ekr.zendesk.com\t https://makenotion.zendesk.com\t https://api.smooch.io\t wss://api.smooch.io\t https://api.forethought.ai https://http-inputs-notion.splunkcloud.com https://*.sentry.io https://checkout.stripe.com https://js.stripe.com https://m.stripe.com https://library.notion.com https://d8ejoa1fys2rk.cloudfront.net https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://tracking.chilipiper.com https://api.chilipiper.com https://api.unsplash.com https://api.giphy.com/ https://giphy-analytics.giphy.com/ https://media0.giphy.com/ https://media1.giphy.com/ https://media2.giphy.com/ https://media3.giphy.com/ https://media4.giphy.com/ https://media5.giphy.com/ https://media6.giphy.com/ https://media7.giphy.com/ https://media8.giphy.com/ https://media9.giphy.com/ https://media10.giphy.com/ https://boards-api.greenhouse.io https://accounts.google.com https://oauth2.googleapis.com https://vimeo.com https://player.vimeo.com https://youtube.com https://www.youtube.com https://www.googletagmanager.com https://analytics.google.com https://ad.doubleclick.net/ccm/s/collect https://www.googleadservices.com https://googleads.g.doubleclick.net https://region1.google-analytics.com http",
                "assessment": "present",
                "created_at": "2026-09-26 18:55:45",
                "updated_at": "2026-09-26 18:55:45"
            },
            {
                "id": 2898,
                "domain_scan_id": 1417,
                "name": "referrer-policy",
                "value": "strict-origin-when-cross-origin",
                "assessment": "present",
                "created_at": "2026-09-26 18:55:45",
                "updated_at": "2026-09-26 18:55:45"
            },
            {
                "id": 2899,
                "domain_scan_id": 1417,
                "name": "strict-transport-security",
                "value": "max-age=31536000; includeSubDomains; preload",
                "assessment": "present",
                "created_at": "2026-09-26 18:55:45",
                "updated_at": "2026-09-26 18:55:45"
            }
        ],
        "signals": [
            {
                "id": 3234,
                "domain_scan_id": 1417,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3235,
                "domain_scan_id": 1417,
                "code": "local_security.bytes_analyzed",
                "value": "240419",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3236,
                "domain_scan_id": 1417,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3230,
                "domain_scan_id": 1417,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3233,
                "domain_scan_id": 1417,
                "code": "page.language",
                "value": "en-us",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3231,
                "domain_scan_id": 1417,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            },
            {
                "id": 3232,
                "domain_scan_id": 1417,
                "code": "page.support",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.support\"]",
                "created_at": "2026-09-26 18:55:46",
                "updated_at": "2026-09-26 18:55:46"
            }
        ],
        "technologies": [
            {
                "id": 927,
                "domain_scan_id": 1417,
                "code": "cloudflare",
                "name": "Cloudflare",
                "version": null,
                "confidence": "0.9800",
                "source_rule": "cloudflare-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-09-26 18:55:45",
                "updated_at": "2026-09-26 18:55:45"
            },
            {
                "id": 928,
                "domain_scan_id": 1417,
                "code": "nextjs",
                "name": "Next.js",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "nextjs-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-26 18:55:45",
                "updated_at": "2026-09-26 18:55:45"
            }
        ],
        "availability_history": [
            {
                "id": 1417,
                "status": "completed",
                "finished_at": "2026-09-26 18:55:47",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.notion.com/",
                "duration_ms": 0
            },
            {
                "id": 999,
                "status": "completed",
                "finished_at": "2026-09-25 09:41:46",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 605,
                "status": "completed",
                "finished_at": "2026-09-24 13:55:02",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 521,
                "status": "completed",
                "finished_at": "2026-09-24 13:41:37",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            }
        ],
        "comparison": {
            "previous": {
                "id": 999,
                "finished_at": "2026-09-25 09:41:46",
                "status_code": null,
                "final_url": null,
                "safety_score": null
            },
            "current": {
                "id": 1417,
                "finished_at": "2026-09-26 18:55:47",
                "status_code": 200,
                "final_url": "https://www.notion.com/",
                "safety_score": 66
            },
            "score_delta": null,
            "added_technologies": [
                "cloudflare",
                "nextjs"
            ],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}