Running checks

Waiting for the risk sources to answer (4 of them, queried in one go)

Usually 5–60 s; deep traces can take a few minutes. Hard limit 5:30.

What this check asks (all in one request — results arrive together)

• ·Phishing list (GoPlus)
• ·Domain age and registrar (RDAP)
• ·Does it imitate a known brand?
• ·Does the domain exist? (DNS)
• ·Draft verdict

We don't get per-source progress from the engine, so we don't fake a checklist: the list below is what is being asked, not what has finished.