A nameserver reputation score measures the trustworthiness and reputation of the nameservers associated with a particular domain (or set of domains).
Threat actors often use compromised or low-reputation nameservers to host phishing or malware distribution websites or to carry out other malicious activities.
Nameserver reputation scores are calculated based on a variety of factors, including (but not limited to):
Historical activity associated with the nameservers
The number of domains associated with the nameservers that have been used in malicious activity
The quality of the nameserver's security controls and practices
Nameserver density
Listed domains
By focusing on domains associated with low-reputation nameservers, security teams can reduce the risk of cyberattacks and protect their organization’s network and data.
Silent Push provides a fast, simple lookup that allows organizations to determine a nameserver's reputation score, which can then inform other threat intelligence activities and cyber defense operations.
Obtain Reputation Score
From the left navigation menu, select Advanced Query Builder > Domain Queries > Nameserver Reputation.
Specify a domain.
Click Search.
Save Query
Specify query parameters.
Click Save Query.
Provide a Name and Description for context.
Click Save. The query appears in Private Queries.
This reduces the risk of attack by flagging low-reputation nameservers.