Domain Intelligence

Interpret a domain before you trust it.

Entropy0 converts DNS, WHOIS, SSL/TLS, network, and behavioral signals into explainable trust, threat, and anomaly intelligence — structured for automated pipelines and defensible in analyst reports.

Public API.  Deterministic scoring.  Versioned engine.

Domain
SignalsDNS · WHOIS · SSL · HTTP
EnginesTrust · Threat · Deviation
EvidenceCoverage · Confidence
OutputJSON · PDF · API
Three lenses

Every scan returns three independent scores.

No verdict — just evidence. Combine the lenses to build your own picture.

Trust
Infrastructure posture

DNS consistency, SSL validity, WHOIS age, registrar context, and network hygiene — consolidated into a single structural integrity score.

Threat
Abuse likelihood

TLD risk, phishing keywords, domain age, brand impersonation, deceptive content patterns, and corroboration from external intel feeds.

Deviation
Percentile-based anomaly

How far this domain sits from typical infrastructure patterns, scored against heavy-tail distribution baselines. High deviation flags statistical outliers, prompting deeper inspection — not necessarily malicious.

Why Entropy0

Designed for platforms that require explainable decisions

Signals, not verdicts

Entropy0 surfaces evidence. Your judgment closes the loop. No "safe" or "unsafe" labels — only scored signals with explainable reasons.

Uncertainty is visible

Coverage and confidence are first-class outputs, not footnotes. Missing data is reported as a signal gap, not a clean pass.

Built for accountability

Every score is tied to observable evidence. JSON outputs are structured for direct API integration — exportable, auditable, and defensible in a review or incident report.

Use cases

Built for trust and safety workflows

Automated Batch Processing

Drop thousands of domains into the async batch engine. Get explainable Trust, Threat, and Deviation scores back in minutes — no manual triage required.

Merchant Onboarding

Score seller or advertiser domains during underwriting to flag suspicious infrastructure before activation.

Phishing Detection

Classify suspicious domains in real time. Brand impersonation, typosquats, and lookalikes surface as scored signals.

Threat Investigation

Triage domains linked in incidents or alerts. Get structural evidence you can cite — not a vendor verdict you have to trust.

Due Diligence

Assess domains during vendor, counterparty, or acquisition review before exposure.

Ready to start analyzing?

50 scans/month, free forever.

Entropy0 does not generate binary safe/unsafe verdicts. Scores are deterministic, explainable, and tied to observed evidence. Final judgment always belongs to the analyst.