DNS Errors and NXDOMAINS channels capabilities:
Operational Monitoring
An easy way to monitor domain names for unexpected errors - including those due to authoritative name server problems.
Brand Protection
Brand infringement campaigns often begin with DNS reconnaissance with malicious actors probing for unregistered domain names similar to those of targeted brands. Watching NXDOMAIN traffic is a simple way to detect the emergence of these campaigns.
Detection of Botnets and Domain Generation Algorithms (DGAs)
Botmasters have avoided takedowns by coding and deploying DGAs. Through this approach, botnet‑infected systems will attempt and fail to resolve a large number of random-appearing domain names. The DNS Errors and NXDOMAINS channels give threat analysts and security researchers visibility into DGA‑related DNS traffic.
Domain Protection
Security-conscious organizations often register commonly misspelled variations of their domain names to prevent cybercriminals from registering those domains and employing them in malware campaigns. The NXDOMAINS channel delivers a real-time view of misspelled variations of domain names so organizations can move quickly to register them before malicious actors do.
