PhishEye

Monitor the Internet for “Phishy” Domains

Free DomainTools Information Kit

Get first-hand information and use cases to discover how DomainTools can empower your organization with the world’s largest DNS Dataset

Download Now

Discover Phishing Domains Before They Strike

Phishing campaigns often use deceptive domain names to accomplish their nefarious goals. These look-alike domains can either exist in the email in the From field, or in the body of the email as the link they want the victim to click on. Phishing is the most often-used vector in successful data breaches, and targets an organization’s employees, its customers, or the world at large, with alarming effectiveness. Basic prevention can and should start with monitoring the Internet for “phishy” domain name registrations.

DomainTools discovers more newly-registered domain names every day than any other organization in the world. PhishEye enables you to surface existing and new domains that spoof legitimate brand, product, organization, or other names, so that you can carry out defensive or investigative actions against them.

What Can I Do With PhishEye?

Search the world’s largest database of domains to find currently-registered domains that mimic keywords such as a brand or company name
Set up alerts to learn of new domains matching the same criteria
Download the domain information in order to block them in email or web filtering, IPS, or other security systems
Investigate the domains in DomainTools Iris to learn more about the actors who registered them and their larger networks of malicious infrastructure

Key Features:

14 categories of typos, as well as prefixes, suffixes, and exact string inclusions, in order to find the widest variety of relevant domains
Alerts that notify you of new domain registrations–whether or not the registrant has provisioned the domains in DNS
Domain profile information on all discovered domains, including DomainTools Risk Score, registrant information, and other
Direct export to DomainTools Iris for investigation
Export to .csv for easy building of custom domain blacklists

Proactive Alerts

Alerts notify you of new domain registrations even before they’re provisioned in DNS.

Profiling

Info on each domain including the Domain Risk Score, registrant, name server and IP.

Easy Exporting

Direct export to Iris or export to .csv for easy building of customer domain/IP blocklists.

Latest Updates

Using Iris Investigate Pivot Engine to Collect Bulk Screenshots | DomainTools

Originally published by DomainTools. See how you can use Iris Investigate to manually collect screenshots one domain at a time.

The Perfect Pair: Integrating DomainTools Data Sets in Microsoft’s Sentinel SIEM Product

Originally published by DomainTools. See how you can use Iris Investigate to manually collect screenshots one domain at a time.

Crypto Phishing and Credential Stealer Footprint Continues to Expand | DomainTools

Originally published by DomainTools. DomainTools research uncovers additional infrastructure related to recent malware campaigns targeting Windows & Android users.

Enhancing DNSDB to Better Handle DNS Wildcard Names | DomainTools

Originally published by DomainTools. This blog article explains how DomainTools is enhancing DNSDB to better handle wildcard DNS records.

The State of Threat Hunting | DomainTools

Originally published by DomainTools. In 2022, DomainTools, in partnership with Cybersecurity Insiders, conducted the fifth annual threat hunting survey to...

Stop Crypto Kleptos in Their Tracks | DomainTools

Originally published by DomainTools. DomainTools recent research illustrates that early detection of phishing campaigns and other malicious, brand-threatening behavior are...

SPM55: Ascending the Ranks of Indonesian Phishing As A Service Offerings | DomainTools

Originally published by DomainTools. Although SPM55 is a relative newcomer to the Indonesian cybercrime community, a marked uptick in activity...

{"slide_show":"3","slide_scroll":1,"dots":"false","arrows":"true","autoplay":"true","autoplay_interval":3000,"speed":600,"loop":"true","design":"design-2"}

LOGON is a pan-asian company operating in China, Hong Kong (HK), India, Singapore, Malaysia, Indonesia, Vietnam, Philippines and Thailand. LOGON has local dedicated trained product specialists in Hong Kong, Guangzhou, Kuala Lumpur, Mumbai and Bangalore. LOGON acts both as value added reseller and sole distributor for award winning software solutions. Customers can buy new licenses, purchase upgrades and renewals from any of our local offices. Contact us for first line support during evaluations, PoCs. We offer best practices consulting services and classroom & online training. Check our site for latest offers, special discounts, bundle deals, etc..