{"success":true,"data":{"domain":"example.com","score":0,"risk_level":"high","verdict":"phishing","threats":[{"source":"phishtank","category":"phishing","labels":["SUSPECTED_PHISHING"],"severity":"high","confidence":0.6},{"source":"ipqs","category":"suspicious","labels":["SUSPICIOUS","SPAM"],"severity":"low","confidence":0.9119999999999999},{"source":"maltiverse","category":"suspicious","labels":["BLACKLISTED","MALICIOUS_TAGS"],"severity":"low","confidence":0.7},{"source":"shodan_internetdb","category":"suspicious","labels":["SUSPICIOUS_PORTS"],"severity":"low","confidence":0.6}],"confidence":"high","summary":"This domain, example.com, is a well-known and","summary_status":"available","cached":true,"reportCount":0,"providers_signals_count":4,"providers_checked_count":20,"access_tier":"anonymous","tier":"cached_providers","disclosure":"Real-time aggregation across 30+ threat-intelligence sources (Google Safe Browsing, VirusTotal, PhishTank, URLhaus, ThreatFox, Cloudflare Radar, etc.). Cached results refresh every 6 hours. Enterprise SLA available via /v1/api/check/domain with an API key."}}