Highlight: Core Metrics

The Highlight section of Total View, located at the top of the interface, provides a rapid technical overview of key metrics for Domains and IPv4 addresses, derived from Silent Push’s enrichment categories. It consolidates critical data points for immediate Threat assessment.

Overview of quasar.com domain with threat feed and web search highlights information.

Data Points

#	Field	Description
1	Domain	The observable’s domain name (e.g., example.com), serving as the primary identifier.
2	Risk Score	A proprietary score based on threat feed presence (paid users) and secondary metrics, quantifying malicious potential.
3	Flags	Indicators (e.g., Tranco Top 10k, IOFA Feed) reflecting Enriched Attributes.
4	Scores	Age: Domain Age in days, calculated from creation date. NS Reputation: Nameserver reputation score based on domain usage patterns. NS Entropy: Measure of nameserver change randomness, indicating potential compromise.
5	PADNS Infrastructure	Counts of DNS records (A, AAAA, CNAME, NS, MX, SOA, TXT) to detect anomalies.
6	Infrastructure Variance	ASN Diversity: Number of unique Autonomous System Numbers. IP Diversity: Count of unique IP addresses. NS Changes: Frequency and recency of nameserver updates.
7	Whois Information	Registrar: Entity managing domain registration. Created: Registration creation date (e.g., 1995-08-13).
8	Web Search Highlights	Response: HTTP response code (e.g., 200). favicon: MD5 hash of the favicon image. Scan Date: Last scan timestamp (e.g., 2025-08-28). HTML Title: Extracted title tag from HTML content. Header Server: Server software identified in HTTP headers.

Enrichment Highlights Table

Highlight Category	Metrics	Applies to	Notes
IP-based Highlights	IP Reputation, ASN Reputation, ASN Takedown Reputation, ASN RankSubnet Reputation, Curated Feeds History Score, IP Density, Open S3 Buckets,	IPv4 addresses, URLs (with IP root)	Displayed for IPv4 addresses and URLs where the root is an IP address.
Domain-based Highlights	NS Reputation, NS Entropy, Curated Feeds History Score, ASN Diversity, IP Diversity, Age, Registrar	Domains with URLs (with domain root)	Displayed for domains and URLs where the root is a domain.
ASN-based Highlights	Active IPs, Active Subnets, AS Name, Average Density	ASNs	Specific to Autonomous System Numbers (ASNs).