payment-gateway-pro[.]io is classified as critical with a risk score of 91/100: high-confidence malicious posture; multiple core signals reinforce one another. The recommended downstream action is block_domain.
The risk model observed 6 signals (including 3 core signals) across 5 taxonomy groups (Threat Intelligence, Relational Intelligence, Popularity & Backlink, and others). The strongest indicators are Fraud Indicator, Malicious Outbound Link, IP on Blacklist, plus 3 additional supporting signals. Each signal carries its own trigger evidence and direction; signal fusion drives the calibrated tier assignment.
Recommended response. Block at the perimeter (DNS firewall, SWG, EDR network rules). The signal stack supports a deny-by-default posture; blocking is unlikely to disrupt legitimate traffic. For active investigation, run POST /enrichwith the indicator to confirm the verdict against the current state of the domain. VerdictIQ's scoring recomputes today's signals on every call.