The Farsight Solution
Newly Observed Domains (NOD)
Provides organizations with real-time actionable insights based on the newness of a domain.
This enables them to protect their users until those domains are better understood by the rest of the security industry thereby materially changing their risk profile. NOD leverages Farsight’s real-time Passive DNS sensor array and cross-references that data with its industry-leading DNSDB® historical Passive DNS database.
Malware obstruction
Block outbound connections to newly minted and used domains by leveraging NOD Response Policy Zones on DNS Servers; thus, disrupting techniques commonly used by modern malware.
Phishing protection
Take immediate action in case of suspected brand phishing, confusion or dilution when new names are detected. New domains are often used to trick users by creating a lookalike site. These domains are dangerous until they are classified and blocked. They can be blocked for periods of time by leveraging NOD Response Policy Zones on DNS Servers.
Spam filtering
Filter email of very young domains (e.g., five minutes old or newer, 30 minutes old or newer, etc.) by adding SpamAssassin rules that readily consume this DNSBL. Most email coming from new, lookalike domains can be malicious. It’s good practice to protect users from these messages.
“Farsight’s NOD protected, on average, each of my users at least once a day.”
