Protection against fraud and phishing is now boosted with Zero Reputation Domains (ZRD) threat intelligence from Spamhaus.  

We have added a ZRD zone to our DNS Firewall Threat Feeds, which can be used as a check in an organization’s DNS management to block malicious and low reputation domains. With the new ZRD data feed, network security managers can block access to newly-registered domains which are often associated with fraud or phishing attempts.

Cyber criminals immediately use newly registered domains for websites, hoping that users will fall victim before a domain has been analyzed for its reputation, as opposed to legitimate organizations who will rarely activate a domain and start using it as soon as it has been registered.

The ZRD zone automatically adds newly-registered and previously dormant domains to a blocklist for 24 hours. Once the domain is older than 24 hours it will be removed from this zone, or if the domain is deemed malicious by other tests it will be added into another zone.

DNS Firewall Threat Feeds are currently used by ISPs, corporations and public institutions world-wide. Find out more and start your 30 day free trial today.

Existing DNS Firewall subscribers can reach out to their Spamhaus partner to enquire about adding ZRD to their subscription.

Related Products

Resources

The Value of Threat Intelligence – The White Paper (2019)

29 October 2019

Report

In this Osterman Report, over 200 companies were interviewed to find out how they were utilizing threat intelligence data. Compare yourself to the market place, and find out how others are protecting themselves.

What is DNS Firewall? A beginner’s guide

14 September 2018

Blog

With the ever increasing demands on IT, security and networking teams, tools that reduce workloads, which don't cost the earth, are always welcome. One such tool is DNS Firewall. Find out how it works, and the benefits it provides.

Successfully accessing Spamhaus’ free blocklists using a public DNS

4 July 2018

Blog

If you're using the Spamhaus free public mirrors and Google's public DNS then it's likely your spam isn't being blocked. Here's what you need to do.