It represents a domain that receives links from a large number of distinct sources (high harmonic centrality) but whose linking sources are not authoritative enough to push it into the mainstream popularity tier (mid PageRank). Typical examples are legitimate SMBs, regional services, or niche communities that have grown organic backlinks without large-publisher coverage. Treated as a safe rescue signal.
The questions every analyst asks before acting on this signal.
It represents a domain that receives links from a large number of distinct sources (high harmonic centrality) but whose linking sources are not authoritative enough to push it into the mainstream popularity tier (mid PageRank). Typical examples are legitimate SMBs, regional services, or niche communities that have grown organic backlinks without large-publisher coverage. Treated as a safe rescue signal.
Transient means the domain only entered the broad-reach zone in the most recent period; the pattern is short-lived and weaker as a rescue signal. Persistent means the domain has stayed in the broad-reach zone for at least persistent_min_count consecutive periods, indicating a stable structural pattern and a higher-confidence safe verdict.
global_popularity captures domains that are popular by authority-weighted reachability (PageRank head). broad_reach captures domains that are widely reachable but not yet authority-endorsed, a complementary safe signal that prevents legitimate-but-tail domains from being misclassified.
If bad_popularity is already matched for the same domain, broad_reach is skipped (guard). This avoids overlap with the bad_popularity weak/poor sublabels and keeps the safe signal restricted to the strictly mid-tail PR zone.
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
{
"slug": "broad_reach",
"name": "Newly Broadly Reachable",
"group": "popularity_and_backlink",
"subgroup": "popularity_score",
"direction": "safe",
"evidence": {
"tranco_rank": 482103,
"tranco_rank_band": "100k-1m",
"organic_traffic_band": "low",
"regional_rank_top_country": "US"
}
}9 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
A domain that is reachable from many distinct sources (high harmonic centrality) yet none of those sources carry meaning…
A domain that is referenced by a small number of sources (mid or tail harmonic centrality) but those sources carry stron…
A domain whose harmonic centrality places it in the deep tail (very few distinct sources link to it) while PageRank is a…
It refers to globally recognized, high-traffic domains with verified ownership and a long operational history, such as g…
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
grandkadrihotel[.]comSuspicious60Verified 2026-08-01generaitiv[.]xyzSuspicious66Verified 2026-08-01articles[.]skSuspicious60Verified 2026-08-01faqserv[.]comSuspicious66Verified 2026-08-01chrome-extesions[.]comSuspicious61Verified 2026-08-01cineby[.]gdSuspicious63Verified 2026-08-01clientshostname[.]comSuspicious61Verified 2026-08-01gmeil[.]comSuspicious65Verified 2026-08-01f3322[.]orgSuspicious66Verified 2026-08-01anondns[.]netSuspicious63Verified 2026-08-011,000 verdicts/month on the free tier, LLM layer included. No card required.