Threat Intel Feed

Farsight Newly Observed Hostnames

Detect domain shadowing

Get a Demo
DomainTools Threat Intelligence Feeds Farsight NOH Header Image

Millions of hostnames are created every day as part of the Domain Name System (DNS). Often, bad actors use hostnames to impersonate other organizations. Security teams need to know when new hostnames are put into use in real-time. Unfortunately, this insight is not readily available because it is broadly distributed across many recursive and authoritative name servers around the world.

Farsight NOH Features and Benefits

  • Discover New Hostnames Within Minutes

     

    Provides organizations with visibility of new hostnames
    or Fully Qualified Domain Names (FQDNs) – when they are first active.

  • Block Phishing and Fraud From Wildcarded Domains

     

    Identify “wildcarded” and uniquely tagged hostnames, which are often used in phishing attempts or to evade domain name-focused investigations.

  • Brand Protection and Targeted Attacks

     

    • Monitor potentially infringing websites, like yourdomain.acme.com or yourdomain-sale.acme.biz
    • Detect websites used in attacks targeting your organization or customers (e.g., 1YOURDOMAIN.co.uk or www.YOURDOMAINwholesale.com)

  • Discover “Domain Shadowing”

     

    Adversaries hijack legitimate domains to create subdomains to distribute malicious content, like YOURDOMAIN.hackedsite.com or YOURDOMAIN.secureserver.hackedsite.com

“Farsight’s NOH is very valuable for malware discovery.”

— Senior Security Analyst, Fortune 500 Investment Manager

What makes Farsight NOH Superior?

NOH leverages more than 5 TB of real-time Passive DNS data to detect hundreds of millions of hostnames per day. Farsight validates that more than 25 million of those hostnames are newly configured from the perspective of the historical DNSDB database.

NOH is available in real-time stream using Security Information Exchange (SIE) Channel 213 or an hourly CSV format file.

Related Domain Discovery Feed Resources

Discover how our Domain Visibility Feeds can protect your organization

Request a Demo
DomainTools Logo
Pricing Contact Login Support Request a Demo

© 2024 DomainTools

DomainTools® and DomainTools™ are owned by DomainTools, all rights reserved.

Privacy Policy    |    California Privacy Notice
Do Not Sell My Personal Information    |    Terms of Service    |    Sitemap