The Domain Watchdog is an online brand monitoring and protection service designed to help businesses and individuals identify and deal with suspicious domains that may resemble their trademarks.
PolarisMaker
📌As a cybersecurity company, we're no strangers to being targeted by malicious actors. Recently, we were able to thwart an attack thanks to our vigilant monitoring system, which detected suspicious activity early on and allowed us to react promptly. We want to share the valuable insights we gained from this experience in the hopes that it can help other companies stay protected.
It all started when we received alerts of suspicious domains using our company name. Initially, we thought it might be a coincidence, but as we detected more domains without content but with DNS configured, we knew we had to act.
As we offer domain monitoring to our clients, we already had this monitoring in place. However, we intensified it by adding more keywords and also looking at typos. We observed an increase in the number of fake domains appearing, and that at any moment these zombie domains could establish a DNS, MX, or launch a website, which would be a sign that something malicious was about to happen.
We were able to resolve all of this internally! Our concern was that these domains could be used for spear phishing attacks against our clients, partners, or even employees. Fortunately, we were able to take down the domains that were being used to capture credentials on our webpage. However, we began to consider that countless businesses worldwide experience similar scenarios on a daily basis, lacking the necessary tools to combat malicious actors effectively.
Therefore, we decided to create a free tool that allows you to search for domain names similar to your company's on a database with billions of records and monitor those that you find suspicious. With this tool, you can find fake pages in the name of your company that are in operation, domains that were registered to be used in spear phishing campaigns (which is a commonly used attack vector in ransomware attacks), or even be alerted that a threat actor is starting a campaign against your company.
Report