{
    "schema": "websitevirusscanner.evidence.v1",
    "domain": "who.int",
    "archived": false,
    "archive_reason": null,
    "next_scan_due_at": "2026-10-26T18:56:09.000000Z",
    "scan": {
        "id": 1423,
        "last_scanned_at": "2026-09-26T18:56:09.000000Z",
        "score": {
            "id": 1077,
            "domain_scan_id": 1423,
            "score_rule_set_id": 5,
            "safety_score": 77,
            "evidence_confidence": 70,
            "uncapped_score": 77,
            "cap_code": null,
            "created_at": "2026-09-26 18:56:09",
            "updated_at": "2026-09-28 17:28:09"
        },
        "http": {
            "id": 1075,
            "domain_scan_id": 1423,
            "final_url": "https://www.who.int/",
            "status_code": 200,
            "content_type": "text/html; charset=utf-8",
            "response_bytes": 135129,
            "duration_ms": 1000,
            "redirect_chain": "[\"https://www.who.int/\"]",
            "observed_at": "2026-09-26 18:56:04",
            "created_at": "2026-09-26 18:56:08",
            "updated_at": "2026-09-26 18:56:08"
        },
        "tls": {
            "id": 1287,
            "domain_scan_id": 1423,
            "valid": 1,
            "protocol": "TLSv1.3",
            "issuer": "countryName=US, organizationName=Google Trust Services, commonName=WE1",
            "valid_from": "2026-07-31 15:44:36",
            "valid_until": "2026-10-29 16:44:34",
            "san_names": "[\"who.int\"]",
            "observed_at": "2026-09-26 18:56:03",
            "created_at": "2026-09-26 18:56:07",
            "updated_at": "2026-09-26 18:56:07"
        },
        "dns": {
            "id": 1421,
            "domain_scan_id": 1423,
            "resolver": null,
            "dnssec": null,
            "observed_at": "2026-09-26 18:56:02",
            "created_at": "2026-09-26 18:56:07",
            "updated_at": "2026-09-26 18:56:07"
        },
        "infrastructure_summary": {
            "ip_address": "192.133.11.1",
            "asn": null,
            "organization": null,
            "country_code": null,
            "cdn": "Cloudflare",
            "waf": null,
            "http_status": 200,
            "final_url": "https://www.who.int/",
            "dnssec_observed": null,
            "dns_record_count": 28,
            "nameserver_count": 5,
            "mail_exchanger_count": 1,
            "tls_valid": true,
            "tls_valid_until": "2026-10-29 16:44:34",
            "security_header_count": 5,
            "technology_count": 2,
            "screenshot_available": true
        },
        "page_stats": {
            "response_bytes": 135129,
            "duration_ms": 1000,
            "cookies_observed": null,
            "script_resources": null,
            "external_script_hosts": null,
            "frame_resources": null,
            "resource_checks": null
        },
        "security_headers": [
            {
                "id": 2913,
                "domain_scan_id": 1423,
                "name": "content-security-policy",
                "value": "default-src 'self' self watch.4am.ch *.analysis.windows.net *.clarity.ms *.nativechat.com *.tts.speech.microsoft.com *.who.int data.who.int *.who.cloud.sitefinity.com answers.yext-pixel.com app.powerbi.com assets.sitescdn.net content.powerapps.com covidfunding.eiu.com dc.services.visualstudio.com gis.azureedge.net js.arcgis.com liveapi.yext.com liveapi-cached.yext.com pbi.azureedge.net pbipdfapp.azurewebsites.net player.4am.ch player.clevercast.com services.arcgis.com staging-dot-eiu-wellcome-7664.nw.r.appspot.com tiles.arcgis.com utility.arcgisonline.com visuals.azureedge.net wabi-north-europe-redirect.analysis.windows.net westeurope.tts.speech.microsoft.com who.cloudflareaccess.com who-answers.pagescdn.com who-covid-answers.int.pagescdn.com whotest.appiancloud.com www.arcgis.com www.googleadservices.com iris.who.int kendo.cdn.telerik.com; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com *.google-analytics.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.twitter.com https://syndication.twitter.com/ https://s.ytimg.com https://publish.twitter.com *.twimg.com platform.linkedin.com http://platform.stumbleupon.com/1/widgets.js https://*.googletagmanager.com cdnjs.cloudflare.com *.who.int data.who.int https://cse.google.com clients1.google.com cse.google.com/adsense/search/async-ads.js https://partner.googleadservices.com https://*.fundraiseup.com https://*.stripe.com https://m.stripe.network https://pay.google.com https://google.com/pay https://*.paypal.com https://*.paypalobjects.com https://app-script.monsido.com/v2/monsido-script.js https://heatmaps.monsido.com/ https://tracking.monsido.com/ https://pagecorrect.monsido.com/v1/page-correct.js https://cdn.monsido.com/ 'unsafe-eval' 'unsafe-inline' data: apps.who.int/gho/athena/data/ *.clarity.ms *.doubleclick.net *.eloqua.com *.en25.com *.googletagmanager.com *.jwpcdn.com *.msecnd.net *.nativechat.com *.pingdom.net *.sharethis.com assets.pinterest.com assets.sitescdn.net cdn.ampproject.org cdn.insight.sitefinity.com cdn.jsdelivr.net covidfunding.eiu.com https://dec.azureedge.net/ https://www.youtube.com/iframe_api js.arcgis.com js.hs-analytics.net js.hs-scripts.com kendo.cdn.telerik.com munchkin.marketo.net npmcdn.com public.tableau.com services.arcgis.com staging-dot-eiu-wellcome-7664.nw.r.appspot.com storage.googleapis.com tagmanager.google.com tiles.arcgis.com utility.arcgisonline.com who-answers.pagescdn.com who-covid-answers.int.pagescdn.com whosearch.searchblox.com www.arcgis.com www.clarity.ms www.googletagmanager.com www.who.int www.youtube.com youtu.be app-script.monsido.com  unpkg.com /js/isotope.pkgd.js https://heatmaps.monsido.com/v1/heatmaps.js https://cdn.insight.sitefinity.com https://player.vimeo.com/api/player.js; style-src 'self' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com *.who.int data.who.int self watch.4am.ch 'unsafe-inline' tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com js.arcgis.com *.nativechat.com *.sharethis.com cdn.insight.sitefinity.com cdnjs.cloudflare.com https://dec.azureedge.net https://cdn.fundraiseup.com use.fontawesome.com www.who.int player.4am.ch player.clevercast.com whosearch.searchblox.com tagmanager.google.com blob: https://cdn.insight.sitefinity.com; img-src 'self' *.gstatic.com *.googleapis.com platform.tumblr.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com i.ytimg.com https://syndication.twitter.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png pbs.twimg.com platform.twitter.com/css/ *.twimg.com data: blob: https://*.googletagmanager.com self https://*.fundraiseup.com https://ucarecdn.com https://pay.google.com https://google.com/pay https://*.paypalobjects.com tracking.monsido.com iris.who.int tiles.arcgis.com www.arcgis.com services.arcgis.com utility.arcgisonline.com cdn.insight.sitefinity.com js.arcgis.com *.nativechat.com *.sharethis.com *.google-analytics.com *.clarity.ms https://",
                "assessment": "present",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 2914,
                "domain_scan_id": 1423,
                "name": "referrer-policy",
                "value": "no-referrer-when-downgrade",
                "assessment": "present",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 2915,
                "domain_scan_id": 1423,
                "name": "strict-transport-security",
                "value": "max-age=31536000; preload",
                "assessment": "present",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 2916,
                "domain_scan_id": 1423,
                "name": "x-content-type-options",
                "value": "nosniff",
                "assessment": "present",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 2917,
                "domain_scan_id": 1423,
                "name": "x-frame-options",
                "value": "SAMEORIGIN",
                "assessment": "present",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            }
        ],
        "signals": [
            {
                "id": 3272,
                "domain_scan_id": 1423,
                "code": "local_security.analyzed",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 3273,
                "domain_scan_id": 1423,
                "code": "local_security.bytes_analyzed",
                "value": "135129",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 3274,
                "domain_scan_id": 1423,
                "code": "local_security.truncated",
                "value": "",
                "confidence": "1.0000",
                "source_rule": "local-security-v1",
                "evidence_keys": "[\"http.homepage_html\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 3269,
                "domain_scan_id": 1423,
                "code": "page.about",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.about\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 3271,
                "domain_scan_id": 1423,
                "code": "page.language",
                "value": "en",
                "confidence": "1.0000",
                "source_rule": "html-lang-signals-v1",
                "evidence_keys": "[\"content.language\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 3270,
                "domain_scan_id": 1423,
                "code": "page.page",
                "value": "1",
                "confidence": "1.0000",
                "source_rule": "informational-page-signals-v1",
                "evidence_keys": "[\"content.informational_pages.page\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            }
        ],
        "technologies": [
            {
                "id": 938,
                "domain_scan_id": 1423,
                "code": "cloudflare",
                "name": "Cloudflare",
                "version": null,
                "confidence": "0.9800",
                "source_rule": "cloudflare-v1",
                "evidence_keys": "[\"page.headers\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            },
            {
                "id": 939,
                "domain_scan_id": 1423,
                "code": "google-tag-manager",
                "name": "Google Tag Manager",
                "version": null,
                "confidence": "0.9600",
                "source_rule": "google-tag-manager-v1",
                "evidence_keys": "[\"page.html\"]",
                "created_at": "2026-09-26 18:56:08",
                "updated_at": "2026-09-26 18:56:08"
            }
        ],
        "availability_history": [
            {
                "id": 1423,
                "status": "completed",
                "finished_at": "2026-09-26 18:56:09",
                "error_code": null,
                "status_code": 200,
                "final_url": "https://www.who.int/",
                "duration_ms": 1000
            },
            {
                "id": 1005,
                "status": "completed",
                "finished_at": "2026-09-25 09:42:35",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 611,
                "status": "completed",
                "finished_at": "2026-09-24 13:55:37",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            },
            {
                "id": 527,
                "status": "completed",
                "finished_at": "2026-09-24 13:41:56",
                "error_code": null,
                "status_code": null,
                "final_url": null,
                "duration_ms": null
            }
        ],
        "comparison": {
            "previous": {
                "id": 1005,
                "finished_at": "2026-09-25 09:42:35",
                "status_code": null,
                "final_url": null,
                "safety_score": null
            },
            "current": {
                "id": 1423,
                "finished_at": "2026-09-26 18:56:09",
                "status_code": 200,
                "final_url": "https://www.who.int/",
                "safety_score": 77
            },
            "score_delta": null,
            "added_technologies": [
                "cloudflare",
                "google-tag-manager"
            ],
            "removed_technologies": []
        }
    },
    "limitations": [
        "This is a point-in-time technical evidence export.",
        "Unavailable checks are not clean results.",
        "The export is not a malware-removal guarantee or uptime SLA."
    ]
}