Domain Research Suite (DRS)
      Back to home
      1. Knowledge Base
      2. Domain Research Suite (DRS)

      Do you have examples of how I can use DRS monitoring tools?

      Yes, please see below for examples of how to use DRS monitoring tools.

      Table of contents:

      1. Detect Typosquatting Campaigns Targeting Fortune 500 Brands and Other Companies
      2. Monitor the Activities of Registrants of Interest
      3. Be Alerted to Changes within Your Domain Portfolio

      1. Detect Typosquatting Campaigns Targeting Fortune 500 Brands and Other Companies

      Here’s how to check the activity (e.g., new registrations, updates, expirations, etc.) of potential typosquatting domains for a particular brand, company, or trademark.

      1. Go to Brand Monitor and click Advanced.

      2. Type the company or brand name into the search field. For this illustration, we will monitor two Fortune 500 companies—Walmart and Amazon.


      3. Toggle the Typos radio button on to include variants with typos in the monitoring. The tool detected 220 misspelled variants for Walmart and 214 for Amazon.



      4. Click Add to monitoring. The tool will begin monitoring for domains containing the search term. Each monitor will get updated every 24 hours on average.


      5. You can see when cybersquatting or typosquatting domains targeting the company get added, dropped, or updated by clicking View Changes. Within 24 hours of monitoring, Brand Monitor detected one new typosquatting domain targeting Walmart and 23 for Amazon.

       


      6. Click the orange arrow sign (>) to generate other reports relevant to the typosquatting domain.


      7. [BONUS pro tip]: To receive Brand Monitor alerts for new domain activities via email, go to Settings, click Domain Research Suite, and tick the box next to Brand Monitor.

      2. Monitor the Activities of Registrants of Interest

      Use Registrant Monitor to follow the domain-related activities of specific individuals and organizations, whether they’re threat actors or good guys. Here’s how.

      1. Go to Registrant Monitor and type the registrant name, organization name, or email address into the search field. To demonstrate, we will set up a monitor for Microsoft Corporation.


      2. Click Add to monitoring to add the search term to the monitor.


      3. Click View changes to see the registrant’s recent activities or mark the checkbox beside the registrant name. The registrant in our demonstration has been adding, dropping, and updating several domains daily since the day we started the monitor.


      You may also click the Download JSON button to download the data.



      4. As in the previous example, click the orange arrow sign (>) beside the domain names to:
      • Generate current and historical WHOIS reports
      • Retrieve connected domains through current and historical reverse WHOIS searches
      • Retrieve a list of domains sharing the same DNS resolutions
      • Add the domain to other DRS monitors

      3. Be Alerted to Changes within Your Domain Portfolio

      Here’s how to keep track of different changes in the WHOIS records of the domain names you own or are responsible for administering.

      1. Go to Domain Monitor and enter the domain or domains you want to monitor into the input fields. Select Add one domain or Add domains in bulk. If you choose the latter, make sure the list of domains is in comma-separated values (CSV) format.


      2. If the tool detects registration record changes, View changes will appear. If there are none, it will display No changes detected. Below are some examples of domains with detected changes.

      a) The statuses of this domain were updated on 13 October 2022 to pendingTransfer, indicating that someone has requested a registrar transfer. An unauthorized person may be planning to hijack the domain if the rightful administrator did not file the request.


      b) The name server of another domain was changed on 19 October 2022, which can also be concerning if the rightful administrator did not make that update.


      c) The contact email address of this domain was changed although the same privacy redaction service was used.


      d) [BONUS pro tip]: You can use Domain Monitor to track when domains of interest get dropped so you can take the next steps in adding them to your portfolio.

       


      Feel free to explore our DRS monitoring tools for the use cases discussed above or other applications you have in mind. Access the tools here.