{"name":"domain-threat-report","description":"Domain threat report API for a security investigation on any domain: is this a phishing domain, a lookalike squat, or a legitimate registration? Covers WHOIS/RDAP registration age, DNS records, TLS certificate posture, DMARC/SPF/DKIM email authentication, certificate-transparency subdomain enumeration, IP/ASN hosting attribution, and homoglyph lookalike detection on the domain string. Composite: one call runs whois-lookup + dns-lookup + ssl-cert-info + dmarc-check + subdomain-enum + homoglyph-check + ip-asn in parallel (ip-asn needs a resolved A record and is skipped otherwise) into {registration, dns, tls, email_auth, subdomains, ip_intelligence, lookalike_check}. Use it as a phishing check API, domain security audit, or brand-impersonation detector.","price":"$0.08","method":"POST","input_schema":{"properties":{"domain":{"type":"string","description":"Domain to investigate, e.g. 'example.com'. Max 253 chars; bare hostnames only (scheme/path are stripped if present)."}},"required":["domain"]},"input_example":{"domain":"example.com"},"output_example":{"domain":"example.com","registration":{"registered_date":"1995-08-14T04:00:00Z","age_days":11223,"flags":[]},"dns":{"flat":{"a":["93.184.216.34"],"mx":[]}},"tls":{"issuer_common_name":"DigiCert TLS RSA CA","days_until_expiry":60},"email_auth":{"score":40,"grade":"C","dmarc":{"exists":false}},"subdomains":{"subdomain_count":3,"subdomains":[{"hostname":"www.example.com"}]},"ip_intelligence":{"asn":15133,"asn_org":"EDGECAST","country":"US"},"lookalike_check":{"is_suspicious":false,"risk_level":"none"},"composed_of":["whois","dns-lookup","ssl-cert-info","dmarc-check","subdomain-enum","homoglyph-check","ip-asn"],"components":[{"name":"whois","ok":true,"ms":640}],"degraded":false},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}