{ "verdict": "fail", "minRiskScore": 25, "categories": ["credential-harvesting"] }