archaeologyliterate[.]tokyo is classified as high with a risk score of 77/100: elevated-risk posture; converging signals indicate intent. The recommended downstream action is block_domain.
The risk model observed 3 signals (including 1 core signals) across 2 taxonomy groups (Threat Intelligence, WHOIS). The strongest indicators are Registered in Last Week, Cleared by Security Vendors, Not Listed in Open-Source Threat Feeds. Each signal carries its own trigger evidence and direction; signal fusion drives the calibrated tier assignment.
Recommended response. Block at the perimeter (DNS firewall, SWG, EDR network rules). The signal stack supports a deny-by-default posture; blocking is unlikely to disrupt legitimate traffic. For active investigation, run POST /verdict with the indicator to confirm the verdict against the current state of the domain. VerdictIQ's scoring recomputes today's signals on every call.