Risk Score API — Changelog

This page lists API changes by version. Breaking changes are only introduced with a major version bump.

v2.0 — 2025-12-28

Breaking change: signal names updated for accuracy.

Renamed signals to match what is actually measured (truth-in-label).
recent_ownership_change → recent_rdap_record_update (window: 30 days).
nameserver_volatility → recent_nameserver_or_delegation_change (window: 30 days, RDAP best-effort).
whois_anonymous → whois_redacted_or_privacy.
incomplete_whois_fields → registrar_missing_in_rdap.
high_risk_registrar → registrar_high_risk_listed.
registrant_country_mismatch_tld → cctld_registrant_country_mismatch.
shared_hosting_high_density → shared_hosting_asn_listed.
blacklist_proximity → spamhaus_drop_listed_ip.
domain_pattern_similarity → suspicious_keywords_in_domain.
disposable_domain_traits → long_or_hyphenated_domain.
Adjusted risk level thresholds: low 0–24, medium 25–49, high 50–100.