add VirusTotal ,AbuseIPDB threat intelligence to scan results

app/schemas/scan.py

@@ -1,7 +1,12 @@
 from datetime import datetime
+from typing import Optional
 
 from pydantic import BaseModel, Field
 
+# Import the ThreatIntelReport schema from the service layer.
+# We import it here for use in ScanResponse so the schema stays clean.
+from app.services.threat_intel import ThreatIntelReport
+
 
 class ScanRequest(BaseModel):
     url: str = Field(..., description="The URL of the website to scan")
@@ -29,6 +34,8 @@ class ScanResponse(BaseModel):
     layers: dict[str, LayerStatus]
     issues: list[Issue]
     created_at: datetime | None = None
+    # Step 3: Threat intelligence enrichment (optional — only present when API keys are set)
+    threat_intel: Optional[ThreatIntelReport] = None
 
 
 class ScanHistoryItem(BaseModel):