It means that the domain’s homepage contains a very small amount of textual or visual content. Such minimal pages may indicate a placeholder site, an under-construction page, or a potentially suspicious domain created for temporary use.
The questions every analyst asks before acting on this signal.
It means that the domain’s homepage contains a very small amount of textual or visual content. Such minimal pages may indicate a placeholder site, an under-construction page, or a potentially suspicious domain created for temporary use.
It indicates that the homepage has little to no dynamic or interactive content and remains mostly unchanged over time. While this is uncommon for active or well-maintained websites, it can occasionally be observed on passive, low-maintenance domains.
It means the homepage was recently modified but still lacks sufficient content or structure. Newly created or recently updated low-content pages may belong to domains in the setup phase or early stages of development.
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
{
"slug": "poor_web_content",
"name": "Low Content Density (Homepage)",
"group": "http_crawling_history",
"subgroup": "page_template_content",
"direction": "malicious",
"evidence": {
"template_hash": "tpl_8c4f12",
"content_word_count": 1843,
"subpage_count": 64,
"content_richness": "rich"
}
}4 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
It means that the domain’s homepage contains a sufficient amount of structured, relevant, and well-presented web content…
It means the domain hosts a large number of subpages and internal links, forming a structured and content-rich website. …
It means the domain hosts only a few subpages or internal links. This pattern is commonly observed in malicious infrastr…
It refers to a website that displays the default or placeholder page of a known web technology, such as 'Apache Default …
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
fabricic[.]comSuspicious73Verified 2026-08-01dp94[.]comHigh77Verified 2026-08-01dp399[.]comSuspicious64Verified 2026-08-01filemix-1[.]comSuspicious68Verified 2026-08-01825testsites[.]comSuspicious65Verified 2026-08-013h[.]wfSuspicious71Verified 2026-08-01canvascascade[.]siteSuspicious68Verified 2026-08-01atomicusers[.]xyzSuspicious61Verified 2026-08-01gonamod[.]comHigh75Verified 2026-08-01capp[.]comSuspicious62Verified 2026-08-01avmfuli[.]xyzSuspicious65Verified 2026-08-010energylighting[.]comHigh75Verified 2026-08-013z[.]nuSuspicious61Verified 2026-08-01epaaab[.]comSuspicious68Verified 2026-08-01ferrox[.]xyzSuspicious65Verified 2026-08-01cfck[.]mobiSuspicious62Verified 2026-08-01exrap[.]comSuspicious64Verified 2026-08-01dantbritingd[.]clubSuspicious62Verified 2026-08-01excursiionline[.]roSuspicious64Verified 2026-08-01atendesolucao[.]comSuspicious63Verified 2026-08-011,000 verdicts/month on the free tier, LLM layer included. No card required.