Domain Threat Watchlist

Nota Bene : The Domain Threat Watchlist is available to all “Cybersquatting on Domain Name Servers” customers. To extend your risk coverage into this perimeter, please contact your Customer Success Manager.

Cybersquatting will never go unnoticed again with CybelAngel's new Domain Threat Watchlist.

We hear you. Tracking and monitoring every single cybersquatting attempt is a lot of work. It takes time to pinpoint lookalike domains, tag parking efforts, and assess the actual level of risk. It is difficult to keep up with the volume of threats and therefore it is even more difficult to monitor them dutifully.

That’s why we are very happy to bring you the feature that’ll make monitoring cybersquatting threats feel like a walk in the park: the Domain Threat Watchlist.

What is the Domain Threat Watchlist?

The Domain Threat Watchlist is an AI-powered report that updates continuously. It is your one-stop-shop for tracking all actively monitored parked domains that may threaten your business in the future. 

How does the Domain Threat Watchlist work?

The Domain Threat Watchlist is fed: 

- automatically through a Machine Learning algorithm. 

- manually by your CybelAngel analysts, best placed to understand your business. 

CybelBots detect cybersquatting attempts when attackers register domain names looking like your legitimate ones. They will then scroll each malicious domain and watch for tens of threat markets to assess the level of risk. In most cases, CybelBots will tag parked domains. A parked domain is a registered domain name that’s not linked to a website or email hosting service. Essentially, the domain isn’t actively being used. Instead, it’s parked for later use. 

Parked domain are added to the Watchlist. When our CybelBots notice whether a mail server has been set-up or which type of content has been uploaded on the fake website, the threat escalates into an incident report. That’s when you get notified.

Looks great, how can I use the Watchlist?

Simply look for the new Watchlist tab on the sidebar.

We made it pretty straightforward. All the domains we monitor will be listed in this watchlist starting from day 1. 

The domain name comes with additional information to provide context and help you assess the threat criticity. By documenting intel like date of detection, IP addresses, MX servers, or registrant email, the Watchlist allows to figure out the intent behind the parked domains. For example, it’ll allow you to detect Shadow IT if the registrant is a member of your organization.

Red dot? The domain was added over the past 7 days. 

Green tag? The domain triggered an incident. Click on the tag to access the report.

And because we will always go the extra-mile for you: this feature is also available on mobile!

 Get ready to catch a lot of mice with CybelAngel’s Domain Threat Watchlist!