Silent Push Risk Scores are color-based indicators that illustrate of the risk level of observables at-a-glance
Scanning through passive DNS data returns a risk indication for every record. As soon as the colored dots appear, you can hover over them to get more information
The risk score displayed on the colored dots istaken from a variety of attributes, varying by domain and IP observable type.
Domain-based scoring
Curated Feed History Score- A score based on the frequency and recency of an observable's presence within trusted feedsNS Reputation- The ratio of blacklisted domains, taken from the total number of domains using a nameserverNS Entropy- A score that includes recency, frequency, and the number of NS changesGenerated domain probability- How likely it is that a domain was created by an domain generation algorithm
IP-based scoring
Curated Feed History Score- A score based on the frequency and recency of an observable's presence within trusted feedsASN Rank- A ranking of ASNs seen to host threats listed on feeds, calculated using a weighted formula based on the type of threat observedASN Takedown Reputation- A reputation score based on the time it takes for an ASN owner to react to takedown requests related to malicious URLs. A higher reputation score indicates the ASN owner is slow to react to takedown requestsASN Reputation- The ratio of blacklisted IPs, taken from from the total number of IPs that have been observed as being active within an ASN, in the last 30 daysSubnet Reputation- The ratio of blacklisted IPs, taken from the total number of IPs that have been observed as being active within a particular subnet in the last 30 days