Multi-dimensional drift nuance intelligence threat engine

A method comprising:

• deriving, by one or more hardware processors for a group of risk sources comprising a first risk source, collective characteristics based on attributes of each risk source in the group of risk sources, wherein the first risk source corresponds to a first network address;
• accessing, by the one or more hardware processors, weights for the collective characteristics;
• assigning, by the one or more hardware processors, a first risk level from a plurality of risk levels to the first risk source based on (i) comparing first attributes of the first risk source against the collective characteristics of the group of risk sources and (ii) the weights of the collective characteristics;
• adding, by the one or more hardware processors, a second risk source to the group of classified risk sources;
• adjusting, by the one or more hardware processors, the collective characteristics of the group of risk sources based at least in part on second attributes of the second risk source;
• in response to adjusting the collective characteristics of the group of risk sources, reassigning, by the one or more hardware processors, a second risk level from the plurality of risk levels to the first risk source based on a comparison of the first attributes of the first risk source against the adjusted collective characteristics of the group of risk sources, wherein the second risk level is different from the first risk level;
• and
• denying an electronic request corresponding to the first risk source based on the reassigning the second risk level to the first risk source.

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

• accessing weights to first collective characteristics of a group of risk sources;
• classifying a first risk source, from the group of risk sources, according to a first risk level based on (i) comparing first attributes of the first risk source against the first collective characteristics of the group of risk sources and (ii) the weights of the first collective characteristics;
• adding a second risk source to the group of risk sources;
• adjusting the first collective characteristics of the group of risk sources based on an addition of the second risk source in the group;
• in response to adjusting the first collective characteristics of the group of risk sources, reclassifying the first risk source according to a second risk level based on a comparison of the first attributes of the first risk source against the adjusted collective characteristics of the group of risk sources;
• and
• denying an electronic request corresponding to the first risk source based on the reclassifying of the first risk source according to the second risk level.