---
title: Domain Reputation API - Real-Time Risk Verdict, Trust Score, DGA Detection, and Threat Intelligence for Any Domain
version: 1.0.0
description: Assess any domain and get a synthesized risk verdict, a weighted trust score, DGA detection, threat intelligence matches, and a full email deliverability check in one call. Every score carries the evidence behind it, and partial data is called out in errors rather than silently dropped. Built for fraud screening, phishing triage, email vetting, brand protection, and threat intel enrichment.
openapi: 3.1.1
servers:
  - https://api.apifreaks.com/v1.0
paths: 1
operations: 1
schemas: 22
---

## Table of Contents

- [Domain Reputation API - Real-Time Risk Verdict, Trust Score, DGA Detection, and Threat Intelligence for Any Domain v1.0.0](#domain-reputation-api-real-time-risk-verdict-trust-score-dga-detection-and-threat-intelligence-for-any-domain-v100)
  - [Authentication](#authentication)
  - [Domain APIs](#domain-apis)
    - [getDomainReputation](#getdomainreputation)
      - [Parameters](#parameters)
      - [Responses](#responses)
  - [Schemas](#schemas)
    - [DomainReputationResponse](#domainreputationresponse)
    - [RiskCategory](#riskcategory)
    - [ThreatSource](#threatsource)
    - [PivotMatch](#pivotmatch)
    - [DgaScore](#dgascore)
    - [DgaFeatures](#dgafeatures)
    - [TrustSignals](#trustsignals)
    - [TrustScoreSignals](#trustscoresignals)
    - [TrustSignalItem](#trustsignalitem)
    - [TrustIndicators](#trustindicators)
    - [EmailDeliverability](#emaildeliverability)
    - [EmailAuthentication](#emailauthentication)
    - [SpfRecord](#spfrecord)
    - [DkimRecord](#dkimrecord)
    - [DmarcRecord](#dmarcrecord)
    - [EmailInfrastructure](#emailinfrastructure)
    - [EmailReputation](#emailreputation)
    - [EmailIssue](#emailissue)
    - [Intelligence](#intelligence)
    - [RelatedIoc](#relatedioc)
    - [EvidenceSummary](#evidencesummary)
    - [ErrorResponse](#errorresponse)



# Domain Reputation API - Real-Time Risk Verdict, Trust Score, DGA Detection, and Threat Intelligence for Any Domain v1.0.0

Assess any domain and get a synthesized risk verdict, a weighted trust score, DGA detection, threat intelligence matches, and a full email deliverability check in one call. Every score carries the evidence behind it, and partial data is called out in errors rather than silently dropped. Built for fraud screening, phishing triage, email vetting, brand protection, and threat intel enrichment.

Base URLs:

* [https://api.apifreaks.com/v1.0](https://api.apifreaks.com/v1.0)

## Authentication

* API Key (ApiKeyAuthHeader)
    - Parameter Name: **X-apiKey**, in: header. Pass your API key via the X-apiKey request header.

* API Key (ApiKeyAuthQuery)
    - Parameter Name: **apiKey**, in: query. Pass your API key via the apiKey query parameter.

## Domain APIs

### getDomainReputation

`GET /domain/reputation`

*Get a real-time risk verdict, trust score, and threat intelligence for any domain.*

The Domain Reputation API assesses a domain and returns a risk verdict, trust score, DGA detection results, threat intelligence matches, email deliverability analysis, and evidence summary. Partial data is flagged in the errors array rather than silently dropped.

#### Parameters

|Name|In|Type|Required|Description|
|---|---|---|---|---|
|format|query|string|false|Format of the response.|
|domainName|query|string|true|The domain name to assess (e.g. example.com). Must contain at least one dot and be at most 253 characters. Automatically lowercased.|

##### Enumerated Values

|Parameter|Value|
|---|---|
|format|json|
|format|xml|

> Example responses

> Success

```json
{
  "input": {
    "domain": "apple.com"
  },
  "assessed_at": "2026-09-08T08:36:23.820181075Z",
  "version": "1.0.0",
  "processing_time_ms": 1739,
  "risk_category": {
    "verdict": "safe",
    "confidence": 0.8,
    "primary_threat": null,
    "severity": "none",
    "threat_types": [],
    "sources": [],
    "pivot_matches": []
  },
  "dga_score": {
    "score": 0,
    "is_dga": false,
    "model": "deterministic_features_v1",
    "features": {
      "domain_length": 5,
      "vowel_consonant_ratio": 0.6666666666666666,
      "ngram_perplexity": -8.83,
      "shannon_entropy": 1.9219280948873623,
      "digit_letter_ratio": 0,
      "consonant_streak_max": 3,
      "tld_in_known_dga_set": false
    },
    "interpretation": "human_readable"
  },
  "trust_signals": {
    "trust_score": 72,
    "trust_band": "high",
    "signals": {
      "positive": [
        {
          "code": "spf_configured",
          "weight": 5,
          "polarity": "positive",
          "category": "email_security",
          "evidence": "SPF record found",
          "confidence": 1
        },
        {
          "code": "dmarc_present",
          "weight": 5,
          "polarity": "positive",
          "category": "email_security",
          "evidence": "DMARC record present",
          "confidence": 1
        },
        {
          "code": "established_domain",
          "weight": 10,
          "polarity": "positive",
          "category": "domain_age",
          "evidence": "Domain age > 2 years",
          "confidence": 1
        },
        {
          "code": "mature_domain",
          "weight": 5,
          "polarity": "positive",
          "category": "domain_age",
          "evidence": "Domain age > 5 years",
          "confidence": 1
        },
        {
          "code": "paid_ssl",
          "weight": 5,
          "polarity": "positive",
          "category": "ssl_certificate",
          "evidence": "Uses paid SSL certificate",
          "confidence": 0.9
        },
        {
          "code": "valid_ssl",
          "weight": 3,
          "polarity": "positive",
          "category": "ssl_certificate",
          "evidence": "Valid SSL certificate",
          "confidence": 1
        }
      ],
      "negative": [
        {
          "code": "privacy_whois",
          "weight": 1,
          "polarity": "negative",
          "category": "whois_privacy",
          "evidence": "WHOIS information is privacy-protected",
          "confidence": 0.9
        },
        {
          "code": "external_redirect",
          "weight": 10,
          "polarity": "negative",
          "category": "content_analysis",
          "evidence": "Site redirects visitors to an external domain",
          "confidence": 0.8
        }
      ],
      "neutral": []
    },
    "indicators": {
      "is_newly_registered": false,
      "uses_free_extension": false,
      "uses_free_ssl": false,
      "has_privacy_whois": true,
      "ssl_age_days": 26,
      "has_dmarc": true,
      "has_spf": true,
      "redirects_externally": true,
      "javascript_obfuscated": false,
      "domain_age_days": 14446,
      "registrar": "NOM-IQ Ltd dba Com Laude"
    }
  },
  "email_deliverability": {
    "score": 95,
    "grade": "excellent",
    "can_receive_email": true,
    "authentication": {
      "spf": {
        "present": true,
        "policy": "~all",
        "record": "v=spf1 include:_spf.apple.com include:_spf-txn.apple.com ~all"
      },
      "dkim": {
        "found": true,
        "selectors_found": [
          "selector1",
          "selector2"
        ],
        "providers_detected": [],
        "note": "Only common selectors are probed; a domain may use a custom selector"
      },
      "dmarc": {
        "present": true,
        "policy": "quarantine",
        "reporting_configured": true
      }
    },
    "infrastructure": {
      "mx_count": 6,
      "mx_records": [
        "mx-in-ma.apple.com.",
        "mx-in.g.apple.com.",
        "mx-in-rn.apple.com.",
        "mx-in-sg.apple.com.",
        "mx-in-hfd.apple.com.",
        "mx-in-vib.apple.com."
      ],
      "mx_provider": "self_hosted",
      "null_mx": false
    },
    "reputation": {
      "spam_blacklisted": false,
      "newly_registered": false,
      "domain_age_days": 14446
    },
    "issues": [
      {
        "code": "spf_softfail",
        "severity": "low",
        "message": "The SPF policy '~all' only soft-fails unauthorized senders",
        "recommendation": "Move to '-all' once all legitimate sending sources are listed"
      }
    ]
  },
  "intelligence": {
    "ioc_type": "domain",
    "ioc_value": "apple.com",
    "related_iocs": [
      {
        "type": "ipv4",
        "value": "17.253.144.10",
        "confidence": 0.9
      },
      {
        "type": "ipv6",
        "value": "2620:149:af0:0:0:0:0:10",
        "confidence": 0.9
      }
    ],
    "feed_tags": [
      "verdict:safe",
      "severity:none",
      "ns:d.ns.apple.com.",
      "ns:b.ns.apple.com.",
      "ns:c.ns.apple.com.",
      "ns:a.ns.apple.com.",
      "mx:mx-in-ma.apple.com.",
      "mx:mx-in.g.apple.com.",
      "mx:mx-in-rn.apple.com.",
      "mx:mx-in-sg.apple.com.",
      "mx:mx-in-hfd.apple.com.",
      "mx:mx-in-vib.apple.com."
    ],
    "stix_pattern": "[domain-name:value = 'apple.com' OR ipv4-addr:value = '17.253.144.10' OR ipv6-addr:value = '2620:149:af0:0:0:0:0:10']",
    "recommended_action": "allow",
    "first_seen": null,
    "last_seen": null
  },
  "evidence_summary": {
    "why_flagged": []
  },
  "errors": []
}
```

```json
{
  "input": {
    "domain": "apifreaks.com"
  },
  "risk_category": {
    "verdict": "safe",
    "confidence": 0.7,
    "severity": "none"
  },
  "trust_signals": {
    "trust_score": 70,
    "trust_band": "high",
    "indicators": {
      "is_newly_registered": null,
      "has_privacy_whois": null,
      "domain_age_days": null,
      "registrar": null
    }
  },
  "errors": [
    "WHOIS lookup failed"
  ]
}
```

> Bad Request – Invalid or missing domainName parameter

```json
{
  "error": "Invalid Domain Exception",
  "message": "Please provide a valid domain name in the \"domainName\" parameter.",
  "path": "/v1.0/domain/reputation",
  "status": 400,
  "timestamp": "2026-09-08T12:00:00.000Z"
}
```

```json
{
  "error": "Invalid Param Exception",
  "message": "Please provide a valid domain name in the \"domainName\" parameter.",
  "path": "/v1.0/domain/reputation",
  "status": 400,
  "timestamp": "2026-09-08T12:00:00.000Z"
}
```

> Service Unavailable – The assessment service is temporarily unavailable

```json
{
  "error": "Service Unavailable",
  "message": "Service is unavailable. Please try after some time. [For Technical Support email at: support@apifreaks.com]",
  "path": "/v1.0/domain/reputation",
  "status": 503,
  "timestamp": "2026-09-08T12:00:00.000Z"
}
```

#### Responses

|Status|Meaning|Description|Schema|
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Success|[DomainReputationResponse](#domainreputationresponse)|
|400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad Request – Invalid or missing domainName parameter|[ErrorResponse](#errorresponse)|
|503|[Service Unavailable](https://tools.ietf.org/html/rfc7231#section-6.6.4)|Service Unavailable – The assessment service is temporarily unavailable|[ErrorResponse](#errorresponse)|

#### Response Headers

|Status|Header|Type|Format|Description|
|---|---|---|---|---|
|200|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.|
|400|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.|
|503|X-AF-Credits-Cost|integer||Specifies the number of credits consumed by the current request.|

To perform this operation, you must be authenticated by means of one of the following methods:
ApiKeyAuthHeader, ApiKeyAuthQuery

## Schemas

### DomainReputationResponse

Full domain reputation assessment response.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|input|object|true|none|Input object containing the analyzed domain.|
|» domain|string|true|none|Domain name being analyzed.|
|assessed_at|string|true|none|Timestamp when the assessment was performed (YYYY-MM-DDTHH:mm:ssZ).|
|version|string|true|none|API / response schema version.|
|processing_time_ms|integer|true|none|Time taken to process the request, in milliseconds.|
|risk_category|[RiskCategory](#riskcategory)|true|none|Overall risk assessment for the domain.|
|dga_score|[DgaScore](#dgascore)|true|none|Domain Generation Algorithm (DGA) detection results.|
|trust_signals|[TrustSignals](#trustsignals)|true|none|Trust scoring and supporting signals for the domain.|
|email_deliverability|[EmailDeliverability](#emaildeliverability)|true|none|Assessment of the domain's ability to send and receive email reliably.|
|intelligence|[Intelligence](#intelligence)|true|none|Threat intelligence details for the indicator of compromise (IOC).|
|evidence_summary|[EvidenceSummary](#evidencesummary)|true|none|Summary of reasons behind the risk assessment.|
|errors|[string]|true|none|List of errors encountered during processing, if any (e.g. "WHOIS lookup failed"). An empty array means every signal resolved.|

### RiskCategory

Overall risk assessment for the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|verdict|string|true|none|Final verdict of the risk assessment.|
|confidence|number(float)|true|none|Confidence score for the verdict (0-1).|
|primary_threat|string|true|none|Main threat type identified (e.g. phishing). null when no threat was identified.|
|severity|string|true|none|Severity level of the risk.|
|threat_types|[string]|true|none|List of threat types associated with the domain.|
|sources|[[ThreatSource](#threatsource)]|true|none|Threat intelligence sources that flagged the domain. Empty when nothing flagged it.|
|pivot_matches|[[PivotMatch](#pivotmatch)]|true|none|Related pivots (nameserver, email, etc.) linked to known threats.|

##### Enumerated Values

|Property|Value|
|---|---|
|verdict|safe|
|verdict|suspicious|
|severity|none|
|severity|low|
|severity|medium|
|severity|high|

### ThreatSource

A threat intelligence source that flagged the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|source|string|true|none|Name of the threat intelligence source (e.g. Spamhaus).|
|indicator|string|true|none|Indicator matched by this source.|
|threat_type|string|true|none|Threat type reported by this source.|
|confidence|number(float)|true|none|Confidence score from this source (0-1).|
|first_seen|string|true|none|First time this indicator was seen by the source (YYYY-MM-DDTHH:mm:ssZ).|
|last_seen|string|true|none|Last time this indicator was seen by the source (YYYY-MM-DDTHH:mm:ssZ).|

### PivotMatch

A related pivot linked to known threats.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|pivot|string|true|none|Pivot value (e.g. a nameserver or email address).|
|pivot_type|string|true|none|Type of pivot.|
|total_related_threats|integer|true|none|Total number of threats related to this pivot.|
|confidence|number(float)|true|none|Confidence score for the pivot match (0-1).|

### DgaScore

Domain Generation Algorithm (DGA) detection results.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|score|number(float)|true|none|DGA likelihood score (0-1).|
|is_dga|boolean|true|none|Indicates whether the domain is likely DGA-generated.|
|model|string|true|none|Model used to compute the DGA score.|
|features|[DgaFeatures](#dgafeatures)|true|none|Underlying lexical / statistical features used in DGA detection.|
|interpretation|string|true|none|Human-readable interpretation of the DGA score.|

### DgaFeatures

Underlying lexical / statistical features used in DGA detection.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|domain_length|integer|true|none|Length of the domain name.|
|vowel_consonant_ratio|number(float)|true|none|Ratio of vowels to consonants in the domain.|
|ngram_perplexity|number(float)|true|none|N-gram perplexity score of the domain string.|
|shannon_entropy|number(float)|true|none|Shannon entropy of the domain string.|
|digit_letter_ratio|number(float)|true|none|Ratio of digits to letters in the domain.|
|consonant_streak_max|integer|true|none|Maximum consecutive consonant streak in the domain.|
|tld_in_known_dga_set|boolean|true|none|Indicates if the TLD belongs to a known DGA set.|

### TrustSignals

Trust scoring and supporting signals for the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|trust_score|integer|true|none|Overall trust score (0-100).|
|trust_band|string|true|none|Trust score band / category (e.g. low, medium, high).|
|signals|[TrustScoreSignals](#trustscoresignals)|true|none|Signals contributing to the trust score.|
|indicators|[TrustIndicators](#trustindicators)|true|none|Individual trust / risk indicators for the domain.|

### TrustScoreSignals

Signals contributing to the trust score.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|positive|[[TrustSignalItem](#trustsignalitem)]|true|none|Signals that positively affect the trust score.|
|negative|[[TrustSignalItem](#trustsignalitem)]|true|none|Signals that negatively affect the trust score.|
|neutral|[[TrustSignalItem](#trustsignalitem)]|true|none|Signals that are neutral to the trust score.|

### TrustSignalItem

A single trust signal contributing to the trust score.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|code|string|true|none|Signal code identifier (e.g. valid_ssl, dmarc_missing).|
|weight|integer|true|none|Weight assigned to the signal.|
|polarity|string|true|none|Polarity of the signal.|
|category|string|true|none|Category the signal belongs to (e.g. ssl_certificate).|
|evidence|string|true|none|Evidence supporting the signal.|
|confidence|number(float)|true|none|Confidence score for the signal (0-1).|

##### Enumerated Values

|Property|Value|
|---|---|
|polarity|positive|
|polarity|negative|
|polarity|neutral|

### TrustIndicators

Individual trust / risk indicators for the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|is_newly_registered|boolean|false|none|Indicates whether the domain was recently registered. null when WHOIS data is unavailable.|
|uses_free_extension|boolean|false|none|Indicates whether the domain uses a free TLD extension.|
|uses_free_ssl|boolean|false|none|Indicates whether the domain uses a free SSL certificate.|
|has_privacy_whois|boolean|false|none|Indicates whether WHOIS privacy protection is enabled. null when WHOIS data is unavailable.|
|ssl_age_days|integer|false|none|Age of the SSL certificate in days.|
|has_dmarc|boolean|false|none|Indicates whether a DMARC record exists.|
|has_spf|boolean|false|none|Indicates whether an SPF record exists.|
|redirects_externally|boolean|false|none|Indicates whether the domain redirects to an external site.|
|javascript_obfuscated|boolean|false|none|Indicates whether obfuscated JavaScript was detected.|
|domain_age_days|integer|false|none|Age of the domain in days. null when WHOIS data is unavailable.|
|registrar|string|false|none|Domain registrar name. null when WHOIS data is unavailable.|

### EmailDeliverability

Assessment of the domain's ability to send and receive email reliably.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|score|integer|true|none|Overall email deliverability score out of 100.|
|grade|string|true|none|Letter / word grade summarizing the deliverability score.|
|can_receive_email|boolean|true|none|Indicates whether the domain is configured to receive email.|
|authentication|[EmailAuthentication](#emailauthentication)|true|none|Email authentication mechanisms configured for the domain.|
|infrastructure|[EmailInfrastructure](#emailinfrastructure)|true|none|Mail server infrastructure backing the domain.|
|reputation|[EmailReputation](#emailreputation)|true|none|Reputation and trust signals related to the domain's email sending history.|
|issues|[[EmailIssue](#emailissue)]|true|none|List of detected email deliverability issues or misconfigurations.|

### EmailAuthentication

Email authentication mechanisms configured for the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|spf|[SpfRecord](#spfrecord)|true|none|Sender Policy Framework configuration.|
|dkim|[DkimRecord](#dkimrecord)|true|none|DomainKeys Identified Mail configuration.|
|dmarc|[DmarcRecord](#dmarcrecord)|true|none|Domain-based Message Authentication, Reporting and Conformance configuration.|

### SpfRecord

Sender Policy Framework configuration.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|present|boolean|true|none|Indicates whether an SPF record was found.|
|policy|string|true|none|SPF enforcement policy qualifier found in the record (e.g. ~all, -all).|
|record|string|true|none|Raw SPF DNS TXT record string.|

### DkimRecord

DomainKeys Identified Mail configuration.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|found|boolean|true|none|Indicates whether a DKIM record was found for any probed selector.|
|selectors_found|[string]|true|none|List of DKIM selectors for which a record was found.|
|providers_detected|[string]|true|none|Email service providers inferred from the matched DKIM selectors.|
|note|string|true|none|Clarifying note about the limitations of DKIM selector probing.|

### DmarcRecord

Domain-based Message Authentication, Reporting and Conformance configuration.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|present|boolean|true|none|Indicates whether a DMARC record was found.|
|policy|string|true|none|DMARC enforcement policy applied to failing messages (e.g. none, quarantine, reject).|
|reporting_configured|boolean|true|none|Indicates whether DMARC aggregate / forensic reporting addresses are configured.|

### EmailInfrastructure

Mail server infrastructure backing the domain.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|mx_count|integer|true|none|Number of MX records found for the domain.|
|mx_records|[string]|true|none|List of mail exchange server hostnames for the domain.|
|mx_provider|string|true|none|Email hosting provider inferred from the MX records.|
|null_mx|boolean|true|none|Indicates whether the domain explicitly declines email via a null MX record.|

### EmailReputation

Reputation and trust signals related to the domain's email sending history.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|spam_blacklisted|boolean|true|none|Indicates whether the domain appears on known spam blacklists.|
|newly_registered|boolean|true|none|Indicates whether the domain was registered recently.|
|domain_age_days|integer|false|none|Age of the domain in days since registration.|

### EmailIssue

A detected email deliverability issue or misconfiguration.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|code|string|false|none|Machine-readable code identifying the specific deliverability issue.|
|severity|string|false|none|Severity level assigned to the detected issue.|
|message|string|false|none|Human-readable explanation of the issue.|
|recommendation|string|false|none|Plain-language description of the exact fix to apply.|

### Intelligence

Threat intelligence details for the indicator of compromise (IOC).

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|ioc_type|string|true|none|Type of the indicator of compromise (e.g. domain).|
|ioc_value|string|true|none|Value of the indicator of compromise.|
|related_iocs|[[RelatedIoc](#relatedioc)]|true|none|Other IOCs related to this domain.|
|feed_tags|[string]|true|none|Tags associated with this IOC from threat feeds.|
|stix_pattern|string|true|none|STIX 2.1 pattern representation of the IOC, ready to wrap into an Indicator object.|
|recommended_action|string|true|none|Recommended action based on the assessment.|
|first_seen|string|true|none|First time this IOC was observed (YYYY-MM-DDTHH:mm:ssZ). null when never observed on a feed.|
|last_seen|string|true|none|Last time this IOC was observed (YYYY-MM-DDTHH:mm:ssZ). null when never observed on a feed.|

##### Enumerated Values

|Property|Value|
|---|---|
|recommended_action|allow|
|recommended_action|monitor|
|recommended_action|block|

### RelatedIoc

A related indicator of compromise.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|type|string|true|none|Type of the related IOC (e.g. ipv4, ipv6).|
|value|string|true|none|Value of the related IOC.|
|confidence|number(float)|true|none|Confidence score for the related IOC (0-1).|

### EvidenceSummary

Summary of reasons behind the risk assessment.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|why_flagged|[string]|true|none|List of reasons why the domain was flagged. Empty for a clean domain.|

### ErrorResponse

Standard error envelope returned by the API on failed requests.

#### Properties

|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
|error|string|false|none|Short error category or exception type.|
|message|string|true|none|Human-readable error message describing the failure.|
|path|string|false|none|API endpoint path that produced the error.|
|status|integer|false|none|HTTP status code returned with the error.|
|timestamp|string(date-time)|false|none|Timestamp when the error occurred (ISO 8601).|