[IA] - Applying Shanon Entropy to SenderDomains via Kusto

Sergio Albea@Sergio_Albea

•updated Feb 12, 2026•13•0•118

Domains that introduce substitutions, extra characters, or randomness (e.g., micr0soft, paypa1-secure) tend to have higher entropy than the original brand name. This increase in entropy is a useful signal for detecting typosquatting and brand impersonation attempts in phishing campaigns.