{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "sfgov.org",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-30T21:04:33.000000Z",
    "scan": {
        "id": 14064,
        "last_scanned_at": "2026-09-30T21:04:33.000000Z",
        "score": {
            "id": 13043,
            "domain_scan_id": 14064,
            "score_rule_set_id": 5,
            "safety_score": 65,
            "evidence_confidence": 75,
            "uncapped_score": 65,
            "cap_code": null,
            "created_at": "2026-09-30 21:04:33",
            "updated_at": "2026-09-30 21:04:33"
        },
        "http": {
            "id": 13040,
            "domain_scan_id": 14064,
            "final_url": "https://www.sf.gov",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 266038,
            "duration_ms": 18000,
            "redirect_chain": "[\"https://www.sfgov.org\", \"https://www.sf.gov\"]",
            "observed_at": "2026-09-30 21:04:13",
            "created_at": "2026-09-30 21:04:32",
            "updated_at": "2026-09-30 21:04:32"
        },
        "tls": {
            "id": 12654,
            "domain_scan_id": 14064,
            "valid": 1,
            "protocol": "TLSv1.2",
            "issuer": "countryName=AT, organizationName=ZeroSSL GmbH, commonName=ZeroSSL RSA DV SSL CA 2",
            "valid_from": "2026-09-03 00:00:00",
            "valid_until": "2026-12-02 23:59:59",
            "san_names": "[\"sfgov.org\"]",
            "observed_at": "2026-09-30 21:03:55",
            "created_at": "2026-09-30 21:04:32",
            "updated_at": "2026-09-30 21:04:32"
        },
        "dns": {
            "id": 13571,
            "domain_scan_id": 14064,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-30 21:03:49",
            "created_at": "2026-09-30 21:04:32",
            "updated_at": "2026-09-30 21:04:32"
        },
        "infrastructure_summary": {
            "ip_address": "75.2.65.169",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Amazon CloudFront",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.sf.gov",
            "dnssec_observed": null,
            "dns_record_count": 9,
            "nameserver_count": 6,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2026-12-02 23:59:59",
            "security_header_count": 0,
            "technology_count": 4,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 266038,
            "duration_ms": 18000,
            "cookies_observed": null,
            "script_resources": 8,
            "external_script_hosts": 0,
            "frame_resources": 0,
            "resource_checks": 2
        },
        "security_headers": [],
        "signals": [
            {
                "id": 949507,
                "domain_scan_id": 14064,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949532,
                "domain_scan_id": 14064,
                "code": "local_resources.item0.host",
                "value": "www.sf.gov",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949531,
                "domain_scan_id": 14064,
                "code": "local_resources.item0.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949533,
                "domain_scan_id": 14064,
                "code": "local_resources.item0.sha256",
                "value": "a7bb20d7ddf4204dae6e2310cc18e2ba883543f1ddab5999ea30c6f6dd091956",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949535,
                "domain_scan_id": 14064,
                "code": "local_resources.item0.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949534,
                "domain_scan_id": 14064,
                "code": "local_resources.item0.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949537,
                "domain_scan_id": 14064,
                "code": "local_resources.item1.host",
                "value": "www.sf.gov",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949536,
                "domain_scan_id": 14064,
                "code": "local_resources.item1.kind",
                "value": "page",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949538,
                "domain_scan_id": 14064,
                "code": "local_resources.item1.sha256",
                "value": "96c7151e7ef9404efa9a117b8326189494b4765d508e54b0fb14a0911a553696",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949540,
                "domain_scan_id": 14064,
                "code": "local_resources.item1.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949539,
                "domain_scan_id": 14064,
                "code": "local_resources.item1.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949529,
                "domain_scan_id": 14064,
                "code": "local_resources.partial",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949526,
                "domain_scan_id": 14064,
                "code": "local_resources.status",
                "value": "partial",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949527,
                "domain_scan_id": 14064,
                "code": "local_resources.discovered_scripts",
                "value": "8",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949508,
                "domain_scan_id": 14064,
                "code": "local_security.bytes_analyzed",
                "value": "266038",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949510,
                "domain_scan_id": 14064,
                "code": "local_security.script_resources",
                "value": "8",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949509,
                "domain_scan_id": 14064,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949500,
                "domain_scan_id": 14064,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949499,
                "domain_scan_id": 14064,
                "code": "mail_security.dmarc.policy",
                "value": "reject",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949498,
                "domain_scan_id": 14064,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949497,
                "domain_scan_id": 14064,
                "code": "mail_security.spf.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949494,
                "domain_scan_id": 14064,
                "code": "page.contact",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.contact\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949496,
                "domain_scan_id": 14064,
                "code": "page.language",
                "value": "en",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949495,
                "domain_scan_id": 14064,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949543,
                "domain_scan_id": 14064,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949515,
                "domain_scan_id": 14064,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949505,
                "domain_scan_id": 14064,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949506,
                "domain_scan_id": 14064,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949504,
                "domain_scan_id": 14064,
                "code": "dns_consistency.mail_route_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949503,
                "domain_scan_id": 14064,
                "code": "dns_consistency.nameserver_count",
                "value": "6",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949501,
                "domain_scan_id": 14064,
                "code": "dns_consistency.record_count",
                "value": "9",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949542,
                "domain_scan_id": 14064,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949541,
                "domain_scan_id": 14064,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949518,
                "domain_scan_id": 14064,
                "code": "local_antivirus.bytes_scanned",
                "value": "266038",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949521,
                "domain_scan_id": 14064,
                "code": "local_antivirus.database_date",
                "value": "2026-09-30T06:24:18+00:00",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949520,
                "domain_scan_id": 14064,
                "code": "local_antivirus.database_version",
                "value": "28139",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949519,
                "domain_scan_id": 14064,
                "code": "local_antivirus.engine_version",
                "value": "1.5.4",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949517,
                "domain_scan_id": 14064,
                "code": "local_antivirus.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949502,
                "domain_scan_id": 14064,
                "code": "dns_consistency.address_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949513,
                "domain_scan_id": 14064,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949514,
                "domain_scan_id": 14064,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949511,
                "domain_scan_id": 14064,
                "code": "local_headers.csp_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949512,
                "domain_scan_id": 14064,
                "code": "local_headers.hsts_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949516,
                "domain_scan_id": 14064,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949524,
                "domain_scan_id": 14064,
                "code": "local_reputation.entry_count",
                "value": "386072",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949523,
                "domain_scan_id": 14064,
                "code": "local_reputation.fetched_at",
                "value": "2026-09-30T18:00:09+00:00",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949525,
                "domain_scan_id": 14064,
                "code": "local_reputation.sha256",
                "value": "f2ad8dc16de3cc79cdc46967f9e15925ccbea2815d623baffd4d1e060b7372b9",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949522,
                "domain_scan_id": 14064,
                "code": "local_reputation.status",
                "value": "not_listed",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949530,
                "domain_scan_id": 14064,
                "code": "local_resources.bytes_scanned",
                "value": "533929",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 949528,
                "domain_scan_id": 14064,
                "code": "local_resources.checked",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            }
        ],
        "technologies": [
            {
                "id": 35276,
                "domain_scan_id": 14064,
                "code": "bootstrap",
                "name": "Bootstrap",
                "version": null,
                "confidence": "0.8000",
                "source_rule": "bootstrap-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 35274,
                "domain_scan_id": 14064,
                "code": "nextjs",
                "name": "Next.js",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "nextjs-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 35275,
                "domain_scan_id": 14064,
                "code": "nginx",
                "name": "Nginx",
                "version": null,
                "confidence": "0.9300",
                "source_rule": "nginx-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            },
            {
                "id": 35277,
                "domain_scan_id": 14064,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-30 21:04:33",
                "updated_at": "2026-09-30 21:04:33"
            }
        ],
        "availability_history": [
            {
                "id": 14064,
                "status": "completed",
                "finished_at": "2026-09-30 21:04:33",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.sf.gov",
                "duration_ms": 18000
            },
            {
                "id": 9199,
                "status": "completed",
                "finished_at": "2026-09-30 09:17:49",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            }
        ],
        "comparison": {
            "previous": {
                "id": 9199,
                "finished_at": "2026-09-30 09:17:49",
                "status_code": null,
                "final_url": null,
                "safety_score": null
            },
            "current": {
                "id": 14064,
                "finished_at": "2026-09-30 21:04:33",
                "status_code": 200,
                "final_url": "https://www.sf.gov",
                "safety_score": 65
            },
            "score_delta": null,
            "added_technologies": [
                "bootstrap",
                "nextjs",
                "nginx",
                "tailwind"
            ],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}