Newly-Registered Domain Lists from Stamus Labs

When hosts on your network are accessing newly-registered domains, there’s a good chance bad things are heading your way. So, you’ll want to know as soon as possible if this is happening.

New from Stamus Labs - a collection of newly-registered domains that could be used for phishing or to host and control malware.

Every day, the Stamus Labs team collects all newly-registered domains and identifies those which appear to be algorithmically-generated (high-entropy) and those which use typosquatting and homoglyph techniques to mimic popular legitimate domains (phishing).

We package these into six feeds optimized for Clear NDR (community and enterprise) and Suricata 7 users and make them available for FREE.

Want to learn more? Our team has created several additional resources on this topic:

• BLOG: Threat Hunting with Suricata and Newly-Registered Domain Threat Intel (Open NRD) 
• BLOG: Introducing Open NRD: Newly Registered Domain Threat Intel Feeds for Suricata
• BLOG: Threat Hunting for Unknown Actors & Threats using NRD and Sightings
• VIDEO: Webinar using the NRD threat intel - "Network Threat Hunting with Suricata and SELKS"