{
  "artifact": {
    "artifact_id": "seo-stuff-com-b88d3ac208",
    "artifact_name": "www.seo-stuff.com",
    "canonical_url": "https://www.seo-stuff.com",
    "artifact_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
    "first_seen_at": "2026-11-05T04:21:01.431Z",
    "last_changed_at": "2026-11-05T06:46:52.659Z",
    "change_count": 30,
    "receipt_count": 31,
    "versions": 29,
    "current_sha256": "4355601188ef1df51bcbcc0059e56b695b6576ba7c2f16f2d8424404fda7d9b3",
    "version_note": "The bytes at this URL have changed across receipts: each distinct SHA-256 in the history is a distinct version of the artifact, recorded as its own receipt and never merged or overwritten.",
    "latest_receipt": {
      "id": "rsc_a629559e67faafe6a10eff71",
      "artifact_id": "seo-stuff-com-b88d3ac208",
      "artifact_name": "www.seo-stuff.com",
      "canonical_url": "https://www.seo-stuff.com",
      "fetched_from": "https://www.seo-stuff.com",
      "sha256": "4355601188ef1df51bcbcc0059e56b695b6576ba7c2f16f2d8424404fda7d9b3",
      "byte_size": 106556,
      "scanner_version": "resource-scan-v1",
      "scanned_at": "2026-11-05T06:46:52.659Z",
      "checks": [
        {
          "id": "network",
          "label": "Outbound network references",
          "status": "flag",
          "findings": [
            "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
          ],
          "evidence": [
            "domain: alexgrobermanlabs.com",
            "domain: buy.stripe.com",
            "domain: cal.com",
            "domain: cdn.sanity.io",
            "domain: connect.facebook.net",
            "domain: rightcited.com",
            "domain: schema.org",
            "domain: static.ads-twitter.com",
            "domain: www.facebook.com",
            "domain: www.producthunt.com",
            "domain: www.seo-stuff.com",
            "domain: www.w3.org",
            "domain: x.com",
            "fetch / XMLHttpRequest / WebSocket calls"
          ]
        },
        {
          "id": "credentials",
          "label": "Credential and environment access",
          "status": "pass",
          "findings": [
            "No credential or environment access patterns were found in the scanned bytes."
          ],
          "evidence": []
        },
        {
          "id": "install_hooks",
          "label": "Install and postinstall hooks",
          "status": "pass",
          "findings": [
            "No install or postinstall hooks were found in the scanned bytes."
          ],
          "evidence": []
        },
        {
          "id": "obfuscation",
          "label": "Obfuscation and encoded payloads",
          "status": "pass",
          "findings": [
            "No obfuscation or encoded-payload signs were found in the scanned bytes."
          ],
          "evidence": []
        },
        {
          "id": "shell_and_download",
          "label": "Shell-outs and download-and-execute",
          "status": "pass",
          "findings": [
            "No shell-out or download-and-execute patterns were found in the scanned bytes."
          ],
          "evidence": []
        },
        {
          "id": "permission_vs_behavior",
          "label": "Permission declarations vs behavior",
          "status": "flag",
          "findings": [
            "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
          ],
          "evidence": [
            "behavior: network"
          ]
        },
        {
          "id": "known_bad",
          "label": "Known-bad indicators",
          "status": "pass",
          "findings": [
            "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
          ],
          "evidence": []
        },
        {
          "id": "provenance",
          "label": "Provenance facts (weak signals)",
          "status": "flag",
          "findings": [
            "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
          ],
          "evidence": [
            "source host: www.seo-stuff.com",
            "bytes scanned: 106556"
          ]
        }
      ],
      "checks_total": 8,
      "checks_flagged": 3,
      "summary": "3 of 8 checks flagged",
      "ledger_seq": 11673,
      "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
      "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_a629559e67faafe6a10eff71, verify at rightshold.com/verify."
    },
    "history": [
      {
        "id": "rsc_a629559e67faafe6a10eff71",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "4355601188ef1df51bcbcc0059e56b695b6576ba7c2f16f2d8424404fda7d9b3",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:46:52.659Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11673,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_a629559e67faafe6a10eff71, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_000114dc556fd7796ff87318",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "bfadd37ef0ee3a677dee81b9f0c5bfaf121d3c3349cc2eeaeb9c7bdbb66cc41d",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:41:53.074Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11658,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_000114dc556fd7796ff87318, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_b85361f6e73860faa905931e",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "47f58611127001ea31875d0fe94ebdd33492e7f24922d1b49d420f4fb93f0b04",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:36:52.644Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11642,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_b85361f6e73860faa905931e, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_b589b3edc7de1ee7a073cfeb",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "5e00e9600f269659b1dceae16c4e13c34d78bd66899071432a3cbb7bbe3f6058",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:31:52.672Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11628,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_b589b3edc7de1ee7a073cfeb, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_44b32cdf388eb0f916a3faed",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "af0ee1076774c891b3cd3df115752c207b0a42c9f6db7a04ca0ef09a6deb5721",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:21:52.701Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11600,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_44b32cdf388eb0f916a3faed, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_d430f0450c00256b60eadd88",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "33731d78acf57f0381a235f0e88f1f62e6144778567fae40bd1c4e1c184fd637",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:16:52.703Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11586,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_d430f0450c00256b60eadd88, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_c6e08f744371e5fc9d010641",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "e8d6a27909456bba58962dcbebf5c369e7b66483c353524e2a6260716b13d3a0",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:11:52.666Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11572,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_c6e08f744371e5fc9d010641, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_31a4fa65701c882c6421a9d8",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "bc40f9a7241ffad4ee79ba1d44e30328013bc924562517275c22bc14564cd9c0",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:06:52.646Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11557,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_31a4fa65701c882c6421a9d8, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_feeb2b770bcf028a52f163fc",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "f10cc59bf285bbb991cbe63bcc076e39b73dde6f44f78605b75a89e7092deb65",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T06:01:52.729Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11541,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_feeb2b770bcf028a52f163fc, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_cd03bcab4c931f8758177e05",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "4123593c3847289a062c4b5932ce4098a49fb9104c062ddf16a3b078d5a0d7de",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:56:52.819Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11526,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_cd03bcab4c931f8758177e05, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_d0a511b0f9280cc7eee7ae77",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "d8e08f05d8486240243552da2925e7152120e74cc27ea9321a558583623548bb",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:51:52.575Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11512,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_d0a511b0f9280cc7eee7ae77, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_320396ca6e1f6d6252d28d6c",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "949a164ca5dec457b5b1c7d0c05cf417dba7e3c74c0b420cd0769fec4a2925a2",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:46:52.674Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11498,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_320396ca6e1f6d6252d28d6c, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_364df800ad43e288bc44f014",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "82fabada19e0f69f473e1826d38567e75bc8ab434ebcfe50833529e30483b0bd",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:41:52.547Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11482,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_364df800ad43e288bc44f014, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_6f826074de064a13e52d72e2",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "4355601188ef1df51bcbcc0059e56b695b6576ba7c2f16f2d8424404fda7d9b3",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:36:52.714Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11468,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_6f826074de064a13e52d72e2, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_c97c0e4bcd4a1afc86720d79",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "8fef26c5211df7d22b39332a4c91e21ae2937e1f3c499e6d2b21a459bfa321b2",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:31:52.555Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11454,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_c97c0e4bcd4a1afc86720d79, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_6d5997c42c8b1313e0b0507d",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "d816271aa747eb03ae1e3474be131baecbece9530eb665b5f61b5ba15b2b45e7",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:26:52.640Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11440,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_6d5997c42c8b1313e0b0507d, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_bb397a591a840e6590e2a89f",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "140dc8233ff4803e60c675df5b0fd855de70a2e91a02b1b7d04a7a639e252460",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:21:52.556Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11424,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_bb397a591a840e6590e2a89f, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_d8a6467e699d3be7746c645a",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "442e869cca276031ff1f5b66defea8f1bc5c8a4e67da291bd8057246e7013053",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:16:52.576Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11409,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_d8a6467e699d3be7746c645a, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_30c80d79e2ca9e612e15d6ad",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "47bc3ef898f8f9287bb6e2f384653808ed359e406018035e923c521b41a93816",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:11:52.571Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11395,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_30c80d79e2ca9e612e15d6ad, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_589ecca5b8a0c09e3b093514",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "46ef0eb3816dea587086edebc545d4b57ee023258e2089ca39d474e056442e4d",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:06:52.545Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11380,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_589ecca5b8a0c09e3b093514, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_5e62cbe94f6a755a7b7627ee",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "4ad9a2b16a331c1883343c99efa70cc49cec83cae0ea09738992f945be51ddf6",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T05:01:52.556Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11364,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_5e62cbe94f6a755a7b7627ee, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_040aa53c5cd179f13537c414",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "0b3321358e71ded9490ccf54b0c9584d3019bc82ff8c0c9500107657a234e13f",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:56:52.851Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11350,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_040aa53c5cd179f13537c414, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_be779a83ee795a2638bd9630",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "c48b7d307b36287db71e713a52c0ff212bf18c04bda4cf98a736924fc66578e3",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:51:52.616Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11336,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_be779a83ee795a2638bd9630, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_57e63ae344ea4c860b531970",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "d84429075365bfaf3a4ce6ccc239269a45ec7133725236c2b7a016bf7c1afc26",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:46:53.060Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11322,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_57e63ae344ea4c860b531970, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_8b3d05e2f508de0b4a90dd42",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "6a4a1255766f9561ac3613b8d2ee6bf10cbdd912f0f3927bd9f7eeb72226a06b",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:41:52.750Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11306,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_8b3d05e2f508de0b4a90dd42, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_72d80ab504366ebc97833354",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "519e2f0d57aeffc9d304b0f1e4502595515df4602e3a4ef4a1b8836599d878f6",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:36:52.603Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11292,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_72d80ab504366ebc97833354, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_a566adf554277e75cd6740e3",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "30454c70ea2eaedbd60bc0f3933dd73ce969b93cbe8d4ed4c58388bdc20bd160",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:31:53.460Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11278,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_a566adf554277e75cd6740e3, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_57827eaf204f340d4c677a99",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "f4279346af2afeb58f0d948816b27f62efcbba8d6ca49490e7a6a6f5436d3432",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:26:52.743Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11264,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_57827eaf204f340d4c677a99, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_44eb8cff8c961f46fa0d4d35",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "4355601188ef1df51bcbcc0059e56b695b6576ba7c2f16f2d8424404fda7d9b3",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:21:52.301Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11248,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_44eb8cff8c961f46fa0d4d35, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_75ab9361501133b79651723c",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "b04cefc163a6258a8a3e39591e18e002f7404929596a4418e6ebe24d29ddd948",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:21:11.228Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11242,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_75ab9361501133b79651723c, verify at rightshold.com/verify."
      },
      {
        "id": "rsc_8abfd15c1ceba43b72061874",
        "artifact_id": "seo-stuff-com-b88d3ac208",
        "artifact_name": "www.seo-stuff.com",
        "canonical_url": "https://www.seo-stuff.com",
        "fetched_from": "https://www.seo-stuff.com",
        "sha256": "697626442bc87d26a3d4c18c75d467b5ec1acefb55fc74b92e00bc87c49875d8",
        "byte_size": 106556,
        "scanner_version": "resource-scan-v1",
        "scanned_at": "2026-11-05T04:21:01.431Z",
        "checks": [
          {
            "id": "network",
            "label": "Outbound network references",
            "status": "flag",
            "findings": [
              "The scanned bytes reference outbound network activity to these domains: alexgrobermanlabs.com, buy.stripe.com, cal.com, cdn.sanity.io, connect.facebook.net, rightcited.com, schema.org, static.ads-twitter.com, www.facebook.com, www.producthunt.com, www.seo-stuff.com, www.w3.org, x.com. Any resource that reaches the network can send data out as well as bring data in; the findings name what the bytes reference, and the reader decides whether that fits the resource's stated purpose."
            ],
            "evidence": [
              "domain: alexgrobermanlabs.com",
              "domain: buy.stripe.com",
              "domain: cal.com",
              "domain: cdn.sanity.io",
              "domain: connect.facebook.net",
              "domain: rightcited.com",
              "domain: schema.org",
              "domain: static.ads-twitter.com",
              "domain: www.facebook.com",
              "domain: www.producthunt.com",
              "domain: www.seo-stuff.com",
              "domain: www.w3.org",
              "domain: x.com",
              "fetch / XMLHttpRequest / WebSocket calls"
            ]
          },
          {
            "id": "credentials",
            "label": "Credential and environment access",
            "status": "pass",
            "findings": [
              "No credential or environment access patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "install_hooks",
            "label": "Install and postinstall hooks",
            "status": "pass",
            "findings": [
              "No install or postinstall hooks were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "obfuscation",
            "label": "Obfuscation and encoded payloads",
            "status": "pass",
            "findings": [
              "No obfuscation or encoded-payload signs were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "shell_and_download",
            "label": "Shell-outs and download-and-execute",
            "status": "pass",
            "findings": [
              "No shell-out or download-and-execute patterns were found in the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "permission_vs_behavior",
            "label": "Permission declarations vs behavior",
            "status": "flag",
            "findings": [
              "The bytes show network behavior, and no permissions declaration was found in the scanned bytes to compare it against."
            ],
            "evidence": [
              "behavior: network"
            ]
          },
          {
            "id": "known_bad",
            "label": "Known-bad indicators",
            "status": "pass",
            "findings": [
              "None of the scanner's published known-bad indicator patterns matched the scanned bytes."
            ],
            "evidence": []
          },
          {
            "id": "provenance",
            "label": "Provenance facts (weak signals)",
            "status": "flag",
            "findings": [
              "Only partial provenance facts could be read from the URL — a weak signal, recorded as such: source host: www.seo-stuff.com; bytes scanned: 106556."
            ],
            "evidence": [
              "source host: www.seo-stuff.com",
              "bytes scanned: 106556"
            ]
          }
        ],
        "checks_total": 8,
        "checks_flagged": 3,
        "summary": "3 of 8 checks flagged",
        "ledger_seq": 11241,
        "receipt_url": "https://www.rightshold.com/resource-scans/seo-stuff-com-b88d3ac208",
        "rightshold": "The rightshold on https://www.seo-stuff.com — scanned 2026-11-05 · 3 of 8 checks flagged · receipt rsc_8abfd15c1ceba43b72061874, verify at rightshold.com/verify."
      }
    ]
  }
}