A nameserver reputation score is a measure of the trustworthiness and reputation of the nameservers associated with a particular domain (or set of domains).
Threat actors often use compromised or low-reputation nameservers to host phishing or malware distribution websites or to carry out other malicious activities.
Nameserver reputation scores are calculated based on a variety of factors, including (but not limited to):
Historical activity associated with the nameservers
The number of domains associated with the nameservers that have been used in malicious activity
The quality of the nameserver's security controls and practices
Nameserver density
Listed domains
By focusing on domains associated with nameservers that have a low reputation score, security teams can reduce the risk of cyber attacks and protect their organization’s network and data.
Silent Push provides a fast, simple lookup that allows organizations to ascertain a nameserver's reputation score, which can then be used to inform other threat intelligence activities and cyber defense operations.
Obtain reputation score
Navigate to Advanced Query Builder > Domain Queries > Nameserver Reputation.
Specify a domain.
Click Search.
Save queries
Organizational users can save queries for future use or sharing.
Specify query parameters.
Click Save Query.
Provide a Name and Description for context.
Click Save. The query appears in Private Queries.
This reduces attack risk by flagging low-reputation nameservers.