{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "shell.us",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-31T23:02:16.000000Z",
    "scan": {
        "id": 28263,
        "last_scanned_at": "2026-10-01T23:02:16.000000Z",
        "score": {
            "id": 22426,
            "domain_scan_id": 28263,
            "score_rule_set_id": 5,
            "safety_score": 65,
            "evidence_confidence": 65,
            "uncapped_score": 65,
            "cap_code": null,
            "created_at": "2026-10-01 23:02:16",
            "updated_at": "2026-10-01 23:02:16"
        },
        "http": {
            "id": 22423,
            "domain_scan_id": 28263,
            "final_url": "https://www.shell.us/",
            "status_code": 200,
            "content_type": "text/html;charset=utf-8",
            "response_bytes": 5291,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://www.shell.us/\"]",
            "observed_at": "2026-10-01 16:15:33",
            "created_at": "2026-10-01 23:02:16",
            "updated_at": "2026-10-01 23:02:16"
        },
        "tls": {
            "id": 21479,
            "domain_scan_id": 28263,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Let's Encrypt, commonName=YE2",
            "valid_from": "2026-09-19 00:10:26",
            "valid_until": "2026-12-18 00:10:25",
            "san_names": "[\"ru.shell\", \"shell.ae\", \"shell.al\", \"shell.at\", \"shell.be\", \"shell.bf\", \"shell.bg\", \"shell.ca\", \"shell.ch\", \"shell.ci\", \"shell.cl\", \"shell.com.ru\", \"shell.cz\", \"shell.de\", \"shell.dk\", \"shell.eg\", \"shell.es\", \"shell.fi\", \"shell.fr\", \"shell.gr\", \"shell.hk\", \"shell.hu\", \"shell.ie\", \"shell.in\", \"shell.iq\", \"shell.is\", \"shell.it\", \"shell.jp\", \"shell.lgbt\", \"shell.lu\", \"shell.ma\", \"shell.ml\", \"shell.mu\", \"shell.nl\", \"shell.no\", \"shell.ph\", \"shell.pl\", \"shell.pt\", \"shell.sa\", \"shell.sd\", \"shell.se\", \"shell.sg\", \"shell.si\", \"shell.sk\", \"shell.sn\", \"shell.sr\", \"shell.sz\", \"shell.tn\", \"shell.tt\", \"shell.ua\", \"shell.us\", \"ua.shell\", \"www.bitumes.shell.fr\", \"www.heizoel.shell.de\", \"www.shell.com.ru\", \"www.shell.fi\", \"www.shell.hk\", \"www.shell.ie\", \"www.shell.is\", \"www.shell.jp\", \"www.shell.lgbt\", \"www.shell.ph\", \"www.shell.se\", \"www.shell.sg\", \"www.shell.sz\", \"www.shell.tt\", \"www.shell.ua\"]",
            "observed_at": "2026-10-01 16:15:32",
            "created_at": "2026-10-01 23:02:16",
            "updated_at": "2026-10-01 23:02:16"
        },
        "dns": {
            "id": 23702,
            "domain_scan_id": 28263,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-01 16:15:32",
            "created_at": "2026-10-01 23:02:16",
            "updated_at": "2026-10-01 23:02:16"
        },
        "infrastructure_summary": {
            "ip_address": "4.210.156.184",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.shell.us/",
            "dnssec_observed": null,
            "dns_record_count": 12,
            "nameserver_count": 3,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2026-12-18 00:10:25",
            "security_header_count": 4,
            "technology_count": 1,
            "screenshot_available": false
        },
        "page_stats": {
            "response_bytes": 5291,
            "duration_ms": 1000,
            "cookies_observed": null,
            "script_resources": 1,
            "external_script_hosts": 0,
            "frame_resources": 0,
            "resource_checks": 0
        },
        "security_headers": [
            {
                "id": 54856,
                "domain_scan_id": 28263,
                "name": "content-security-policy",
                "value": "frame-ancestors 'self'",
                "assessment": "present",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 54857,
                "domain_scan_id": 28263,
                "name": "strict-transport-security",
                "value": "max-age=31536000 ; preload",
                "assessment": "present",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 54858,
                "domain_scan_id": 28263,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 54859,
                "domain_scan_id": 28263,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            }
        ],
        "signals": [
            {
                "id": 1495613,
                "domain_scan_id": 28263,
                "code": "local_security.script_resources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495628,
                "domain_scan_id": 28263,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495630,
                "domain_scan_id": 28263,
                "code": "local_reputation.status",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495635,
                "domain_scan_id": 28263,
                "code": "local_resources.bytes_scanned",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495633,
                "domain_scan_id": 28263,
                "code": "local_resources.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495632,
                "domain_scan_id": 28263,
                "code": "local_resources.discovered_scripts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495634,
                "domain_scan_id": 28263,
                "code": "local_resources.partial",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495631,
                "domain_scan_id": 28263,
                "code": "local_resources.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495610,
                "domain_scan_id": 28263,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495611,
                "domain_scan_id": 28263,
                "code": "local_security.bytes_analyzed",
                "value": "5291",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495614,
                "domain_scan_id": 28263,
                "code": "local_security.inline_scripts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495621,
                "domain_scan_id": 28263,
                "code": "local_headers.hsts_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495612,
                "domain_scan_id": 28263,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495603,
                "domain_scan_id": 28263,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495602,
                "domain_scan_id": 28263,
                "code": "mail_security.dmarc.policy",
                "value": "quarantine",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495601,
                "domain_scan_id": 28263,
                "code": "mail_security.dmarc.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495599,
                "domain_scan_id": 28263,
                "code": "mail_security.spf.all",
                "value": "-all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495600,
                "domain_scan_id": 28263,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495598,
                "domain_scan_id": 28263,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495597,
                "domain_scan_id": 28263,
                "code": "page.language",
                "value": "en-US",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495638,
                "domain_scan_id": 28263,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495626,
                "domain_scan_id": 28263,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495608,
                "domain_scan_id": 28263,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495609,
                "domain_scan_id": 28263,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495607,
                "domain_scan_id": 28263,
                "code": "dns_consistency.mail_route_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495606,
                "domain_scan_id": 28263,
                "code": "dns_consistency.nameserver_count",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495604,
                "domain_scan_id": 28263,
                "code": "dns_consistency.record_count",
                "value": "12",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495637,
                "domain_scan_id": 28263,
                "code": "javascript_advisories.checked",
                "value": "0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495636,
                "domain_scan_id": 28263,
                "code": "javascript_advisories.status",
                "value": "not_sampled",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495629,
                "domain_scan_id": 28263,
                "code": "local_antivirus.status",
                "value": "disabled",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495627,
                "domain_scan_id": 28263,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495625,
                "domain_scan_id": 28263,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495605,
                "domain_scan_id": 28263,
                "code": "dns_consistency.address_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495616,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_has_default_src",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495617,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_has_object_src",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495615,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_present",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495619,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_unsafe_eval",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495618,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_unsafe_inline",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495620,
                "domain_scan_id": 28263,
                "code": "local_headers.csp_wildcard_sources",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495623,
                "domain_scan_id": 28263,
                "code": "local_headers.hsts_include_subdomains",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495622,
                "domain_scan_id": 28263,
                "code": "local_headers.hsts_max_age",
                "value": "31536000",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            },
            {
                "id": 1495624,
                "domain_scan_id": 28263,
                "code": "local_headers.hsts_preload",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            }
        ],
        "technologies": [
            {
                "id": 64378,
                "domain_scan_id": 28263,
                "code": "apache",
                "name": "Apache HTTP Server",
                "version": null,
                "confidence": "0.9300",
                "source_rule": "apache-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-10-01 23:02:16",
                "updated_at": "2026-10-01 23:02:16"
            }
        ],
        "availability_history": [
            {
                "id": 28263,
                "status": "completed",
                "finished_at": "2026-10-01 23:02:16",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.shell.us/",
                "duration_ms": 1000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 28263,
                "finished_at": "2026-10-01 23:02:16",
                "status_code": 200,
                "final_url": "https://www.shell.us/",
                "safety_score": 65
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}