It means that the domain’s homepage contains a very small amount of textual or visual content. Such minimal pages may indicate a placeholder site, an under-construction page, or a potentially suspicious domain created for temporary use.
Three questions every analyst asks before acting on this signal.
It means that the domain’s homepage contains a very small amount of textual or visual content. Such minimal pages may indicate a placeholder site, an under-construction page, or a potentially suspicious domain created for temporary use.
It indicates that the homepage has little to no dynamic or interactive content and remains mostly unchanged over time. While this is uncommon for active or well-maintained websites, it can occasionally be observed on passive, low-maintenance domains.
It means the homepage was recently modified but still lacks sufficient content or structure. Newly created or recently updated low-content pages may belong to domains in the setup phase or early stages of development.
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
{
"slug": "poor_web_content",
"name": "Low Content Density (Homepage)",
"group": "http_crawling_history",
"subgroup": "page_template_content",
"direction": "malicious",
"evidence": {
"template_hash": "tpl_8c4f12",
"content_word_count": 1843,
"subpage_count": 64,
"content_richness": "rich"
}
}4 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
It means that the domain’s homepage contains a sufficient amount of structured, relevant, and well-presented web content…
It means the domain hosts a large number of subpages and internal links, forming a structured and content-rich website. …
It means the domain hosts only a few subpages or internal links. This pattern is commonly observed in malicious infrastr…
It refers to a website that displays the default or placeholder page of a known web technology, such as 'Apache Default …
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
100 IOCs/day on the free tier, LLM layer included. No card required.