A domain that is referenced by a small number of sources (mid or tail harmonic centrality) but those sources carry strong authority (PageRank head). Typical examples are academic citation targets, regulator decision pages, or specialist-portal references. The pattern reads as 'few but high-quality inlinks'.
The questions every analyst asks before acting on this signal.
A domain that is referenced by a small number of sources (mid or tail harmonic centrality) but those sources carry strong authority (PageRank head). Typical examples are academic citation targets, regulator decision pages, or specialist-portal references. The pattern reads as 'few but high-quality inlinks'.
Transient indicates the high-authority-but-narrow pattern was observed only in the most recent period, possibly a one-time citation event. Persistent means the pattern has been stable for at least persistent_min_count consecutive periods, which strengthens the safe rescue interpretation (the domain is structurally a niche reference).
global_popularity flags mainstream popular domains (broad reach AND high authority). niche_authority captures the orthogonal case where the domain lacks broad reach but is endorsed by authoritative sources. A domain is never tagged with both, the guard ensures niche_authority is only set when global_popularity is absent.
Limited but possible: an older malicious domain referenced once by a high-authority watchlist could land in this zone, typically as transient. Persistent niche authority is a much stronger safe indicator. The label is safe and low-severity, so a single occurrence is unlikely to flip overall verdicts.
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
{
"slug": "niche_authority",
"name": "Newly Niche-Authoritative",
"group": "popularity_and_backlink",
"subgroup": "popularity_score",
"direction": "safe",
"evidence": {
"tranco_rank": 482103,
"tranco_rank_band": "100k-1m",
"organic_traffic_band": "low",
"regional_rank_top_country": "US"
}
}9 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
A domain that is reachable from many distinct sources (high harmonic centrality) yet none of those sources carry meaning…
It represents a domain that receives links from a large number of distinct sources (high harmonic centrality) but whose …
A domain whose harmonic centrality places it in the deep tail (very few distinct sources link to it) while PageRank is a…
It refers to globally recognized, high-traffic domains with verified ownership and a long operational history, such as g…
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
1,000 verdicts/month on the free tier, LLM layer included. No card required.