Netcraft Domain Protection

Netcraft Domain Protection is a brand protection service that monitors and defends against domain-based threats targeting organizations. The platform identifies maliciously registered look-alike domains and hostnames through multiple data sources including certificate transparency logs, DNS registrations, zone files, abuse reporting, and the Netcraft Web Server Survey. The service continuously monitors domains for changes and malicious activity, checking daily for impersonations. It detects various attack types including phishing, social engineering exploits, web-brand abuse, malicious infrastructure, and hosting abuse. Detection methods include link following, credential stuffing, fuzzy matching, and optical character recognition (OCR) to identify brand impersonations beyond simple domain matching. The platform provides visibility into search patterns, probe strings, certificate patterns, and page patterns used to identify malicious URLs. A screenshot tool captures evidence of impersonating sites across a proxy detection network, collecting relevant details for takedown requests. The system automatically submits confirmed malicious domains for takedown. Business email compromise protection includes DMARC visualization to highlight insecure configurations and handle incoming reports of misuse. The platform offers reporting and dashboards for analyzing attack data and criminal tactics. Netcraft processes over 23 billion datapoints annually and has taken down over 25 million attacks.