{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "unexpectedwildliferefuge.org",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-11-27T10:30:56.000000Z",
    "scan": {
        "id": 617722,
        "last_scanned_at": "2026-10-28T10:30:56.000000Z",
        "score": {
            "id": 574805,
            "domain_scan_id": 617722,
            "score_rule_set_id": 5,
            "safety_score": 59,
            "evidence_confidence": 70,
            "uncapped_score": 59,
            "cap_code": null,
            "created_at": "2026-10-28 10:30:56",
            "updated_at": "2026-10-28 10:30:56"
        },
        "http": {
            "id": 574933,
            "domain_scan_id": 617722,
            "final_url": "https://unexpectedwildliferefuge.org/",
            "status_code": 200,
            "content_type": "text/html; charset=UTF-8",
            "response_bytes": 19885,
            "duration_ms": 2000,
            "redirect_chain": "[]",
            "observed_at": "2026-10-28 10:30:41",
            "created_at": "2026-10-28 10:30:55",
            "updated_at": "2026-10-28 10:30:55"
        },
        "tls": {
            "id": 553560,
            "domain_scan_id": 617722,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=GB, organizationName=Sectigo Limited, commonName=Sectigo Public Server Authentication CA DV R36",
            "valid_from": "2025-12-11 00:00:00",
            "valid_until": "2027-01-11 23:59:59",
            "san_names": "[\"unexpectedwildliferefuge.org\", \"www.unexpectedwildliferefuge.org\"]",
            "observed_at": "2026-10-28 10:30:39",
            "created_at": "2026-10-28 10:30:55",
            "updated_at": "2026-10-28 10:30:55"
        },
        "dns": {
            "id": 612629,
            "domain_scan_id": 617722,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-10-28 10:30:37",
            "created_at": "2026-10-28 10:30:54",
            "updated_at": "2026-10-28 10:30:54"
        },
        "infrastructure_summary": {
            "ip_address": "66.29.141.68",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": null,
            "waf": null,
            "http_status": 200,
            "final_url": "https://unexpectedwildliferefuge.org/",
            "dnssec_observed": null,
            "dns_record_count": 8,
            "nameserver_count": 2,
            "mail_exchanger_count": 3,
            "tls_valid": true,
            "tls_valid_until": "2027-01-11 23:59:59",
            "security_header_count": 0,
            "technology_count": 3,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 19885,
            "duration_ms": 2000,
            "cookies_observed": null,
            "script_resources": 1,
            "external_script_hosts": 1,
            "frame_resources": 0,
            "resource_checks": 1
        },
        "security_headers": [],
        "signals": [
            {
                "id": 40779954,
                "domain_scan_id": 617722,
                "code": "local_security.bytes_analyzed",
                "value": "19885",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779970,
                "domain_scan_id": 617722,
                "code": "local_reputation.status",
                "value": "not_listed",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779978,
                "domain_scan_id": 617722,
                "code": "local_resources.bytes_scanned",
                "value": "384032",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779976,
                "domain_scan_id": 617722,
                "code": "local_resources.checked",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779975,
                "domain_scan_id": 617722,
                "code": "local_resources.discovered_scripts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779980,
                "domain_scan_id": 617722,
                "code": "local_resources.item0.host",
                "value": "www.googletagmanager.com",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779979,
                "domain_scan_id": 617722,
                "code": "local_resources.item0.kind",
                "value": "script",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779981,
                "domain_scan_id": 617722,
                "code": "local_resources.item0.sha256",
                "value": "a14493dbcfbfb1b10b43aaf65b7cb7034b30f542818ebaf5904a99c9e509bccf",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779983,
                "domain_scan_id": 617722,
                "code": "local_resources.item0.signature",
                "value": null,
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779982,
                "domain_scan_id": 617722,
                "code": "local_resources.item0.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779977,
                "domain_scan_id": 617722,
                "code": "local_resources.partial",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779974,
                "domain_scan_id": 617722,
                "code": "local_resources.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-resources-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779953,
                "domain_scan_id": 617722,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779973,
                "domain_scan_id": 617722,
                "code": "local_reputation.sha256",
                "value": "70c6c2e24e6b3484e7ace27b079723e55937bc1f4cbd98bea38a472ec8e37326",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779958,
                "domain_scan_id": 617722,
                "code": "local_security.external_script_hosts",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779957,
                "domain_scan_id": 617722,
                "code": "local_security.inline_scripts",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779956,
                "domain_scan_id": 617722,
                "code": "local_security.script_resources",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779955,
                "domain_scan_id": 617722,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v2",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779946,
                "domain_scan_id": 617722,
                "code": "mail_security.dmarc.percentage",
                "value": "100",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779945,
                "domain_scan_id": 617722,
                "code": "mail_security.dmarc.policy",
                "value": "none",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779944,
                "domain_scan_id": 617722,
                "code": "mail_security.dmarc.status",
                "value": "monitoring_only",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779942,
                "domain_scan_id": 617722,
                "code": "mail_security.spf.all",
                "value": "~all",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779943,
                "domain_scan_id": 617722,
                "code": "mail_security.spf.direct_dns_terms",
                "value": "4",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779941,
                "domain_scan_id": 617722,
                "code": "mail_security.spf.status",
                "value": "policy_observed",
                "confidence": "1.0000",
                "source_rule": "mail-security-v1",
                "evidence_keys": "[\"dns.mail_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779990,
                "domain_scan_id": 617722,
                "code": "security_txt.status",
                "value": "missing",
                "confidence": "1.0000",
                "source_rule": "security-txt-v1",
                "evidence_keys": "[\"security_txt\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779969,
                "domain_scan_id": 617722,
                "code": "local_antivirus.database_date",
                "value": "2026-10-23T06:24:08+00:00",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779951,
                "domain_scan_id": 617722,
                "code": "dns_consistency.cname_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779952,
                "domain_scan_id": 617722,
                "code": "dns_consistency.dnssec_state",
                "value": "unavailable",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779950,
                "domain_scan_id": 617722,
                "code": "dns_consistency.mail_route_count",
                "value": "3",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779949,
                "domain_scan_id": 617722,
                "code": "dns_consistency.nameserver_count",
                "value": "2",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779947,
                "domain_scan_id": 617722,
                "code": "dns_consistency.record_count",
                "value": "8",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779985,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.checked",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779988,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.database_date",
                "value": "2026-10-28T02:40:09.772Z",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779989,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.database_sha256",
                "value": "c213444cbf88314fb7fd11c20f0541fb880245ddef07f90b7f437a25f533b081",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779987,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.engine_version",
                "value": "5.7.0",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779986,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.limited",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779984,
                "domain_scan_id": 617722,
                "code": "javascript_advisories.status",
                "value": "no_known_advisories",
                "confidence": "1.0000",
                "source_rule": "retirejs-local-v1",
                "evidence_keys": "[\"http.sampled_resources\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779966,
                "domain_scan_id": 617722,
                "code": "local_antivirus.bytes_scanned",
                "value": "19885",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779948,
                "domain_scan_id": 617722,
                "code": "dns_consistency.address_count",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "dns-consistency-v1",
                "evidence_keys": "[\"dns.records\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779968,
                "domain_scan_id": 617722,
                "code": "local_antivirus.database_version",
                "value": "28162",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779967,
                "domain_scan_id": 617722,
                "code": "local_antivirus.engine_version",
                "value": "1.5.4",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779965,
                "domain_scan_id": 617722,
                "code": "local_antivirus.status",
                "value": "no_match",
                "confidence": "1.0000",
                "source_rule": "clamav-local-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779963,
                "domain_scan_id": 617722,
                "code": "local_headers.cors_credentials_with_wildcard",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779961,
                "domain_scan_id": 617722,
                "code": "local_headers.cors_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779962,
                "domain_scan_id": 617722,
                "code": "local_headers.cors_wildcard_origin",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779959,
                "domain_scan_id": 617722,
                "code": "local_headers.csp_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779960,
                "domain_scan_id": 617722,
                "code": "local_headers.hsts_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779964,
                "domain_scan_id": 617722,
                "code": "local_headers.permissions_policy_present",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-headers-v1",
                "evidence_keys": "[\"http.response_headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779972,
                "domain_scan_id": 617722,
                "code": "local_reputation.entry_count",
                "value": "386082",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 40779971,
                "domain_scan_id": 617722,
                "code": "local_reputation.fetched_at",
                "value": "2026-10-28T06:00:09+00:00",
                "confidence": "1.0000",
                "source_rule": "phishing-db-v1",
                "evidence_keys": "[\"domain.ascii\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            }
        ],
        "technologies": [
            {
                "id": 1745385,
                "domain_scan_id": 617722,
                "code": "google-analytics",
                "name": "Google Analytics",
                "version": null,
                "confidence": "0.9400",
                "source_rule": "google-analytics-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 1745386,
                "domain_scan_id": 617722,
                "code": "php",
                "name": "PHP",
                "version": null,
                "confidence": "0.8800",
                "source_rule": "php-header-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            },
            {
                "id": 1745387,
                "domain_scan_id": 617722,
                "code": "tailwind",
                "name": "Tailwind CSS",
                "version": null,
                "confidence": "0.7200",
                "source_rule": "tailwind-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-10-28 10:30:56",
                "updated_at": "2026-10-28 10:30:56"
            }
        ],
        "availability_history": [
            {
                "id": 617722,
                "status": "completed",
                "finished_at": "2026-10-28 10:30:56",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://unexpectedwildliferefuge.org/",
                "duration_ms": 2000
            }
        ],
        "comparison": {
            "previous": null,
            "current": {
                "id": 617722,
                "finished_at": "2026-10-28 10:30:56",
                "status_code": 200,
                "final_url": "https://unexpectedwildliferefuge.org/",
                "safety_score": 59
            },
            "score_delta": null,
            "added_technologies": [],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}