What is the Risk Score?

Available as an optional Iris add-on, the DomainTools Risk score predicts how likely a domain is to be malicious. The score comes from two distinct algorithms: Proximity to Known Maliciousness examines how closely connected a domain is to other known-bad domains, while Threat Profile leverages machine learning to model how closely the domain resembles others used for spam, phishing or malware. The strongest signal from either of those algorithms becomes the overall Risk Score.

I see a column called Proximity but not one called Risk. Why is this?

The full Risk Score is an optional add-on, but by default Iris includes the scores from our Proximity algorithm. Proximity examines how closely connected a domain is to other known-bad domains but doesn’t provide any detail about what the threat type might be. To add the full Risk Score, please contact sales@domaintools.com, your Account Manager, or Enterprise Support at enterprisesupport@domaintools.com.