Discussions
Feature Request: block newly seen domains
10 months ago by Pascal
Hi there,
Would be great to have a proactive 0-Day possibility to block domains that are ultra new or less known. Newly registered domains are updated to reflect 24-36h domain age, I was told. So the following features variants would may be possible:
- block domains registered between now and from 2 days (list being updated more frequently, e.g. hourly)
- block domains with a low hit count on the global ControlD Network for n days
- include the hit count and first hit date on the ControlD Network in the malware AI decisions
The last 2 would probably be more effective as not all domains have whois information publicly available
What do you think?