What it detects01
What does 'Suspicious Authority Growth' indicate?
It indicates an abnormal or accelerated increase in domain authority metrics over a short time period that deviates from typical organic growth patterns.
Suspicious Authority Growth
It indicates an abnormal or accelerated increase in domain authority metrics over a short time period that deviates from typical organic growth patterns.
Analyst Q&A
What this signal answers
The questions every analyst asks before acting on this signal.
Why it matters02
Why is this considered a risky signal?
Because rapid authority growth is commonly associated with SEO manipulation techniques such as backlink injections, link farm usage, expired domain authority transfer, or coordinated campaign-driven promotion.
How analysts use it03
How should SOC analysts interpret this label?
This label should be treated as a contextual risk indicator. When correlated with low backlink quality, malicious backlink relationships, or authority, age mismatch signals, it strongly suggests artificial authority inflation.
Often paired with:alert_only
Evidence shape
What Suspicious Authority Growth looks like in the response
A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.
json
{
"slug": "authority_suspicious_growth",
"name": "Suspicious Authority Growth",
"group": "popularity_and_backlink",
"subgroup": "popularity_score",
"direction": "malicious",
"evidence": {
"tranco_rank": 482103,
"tranco_rank_band": "100k-1m",
"organic_traffic_band": "low",
"regional_rank_top_country": "US"
}
}Siblings
Peers in Popularity Score
9 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.
Mild Authority–Age Mismatch
It indicates that a domain exhibits authority or backlink strength that is disproportionately high relative to its regis…
Malicious
One-Off Popularity Rise
It indicates that the domain's PageRank time series contains a single interior point where the rank improved (numericall…
Malicious
High-Reputation Domain
It refers to globally recognized, high-traffic domains with verified ownership and a long operational history, such as g…
SafeCore
Emerging Link Farm Pattern
A domain that is reachable from many distinct sources (high harmonic centrality) yet none of those sources carry meaning…
Malicious
In the wild
See Suspicious Authority Growth fire on real IOCs
The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.
Start free, in five minutes
1,000 verdicts/month on the free tier, LLM layer included. No card required.