COBRA: A Content-Agnostic Framework for Zero-Day Detection of Suspicious Domains
COBRA clusters newly registered domain names to flag suspicious domains at registration time, finding 47K domains with 98.5% precision before threat intel does.
3 stories, newest first · one card per story
COBRA clusters newly registered domain names to flag suspicious domains at registration time, finding 47K domains with 98.5% precision before threat intel does.

Unit 42 tracked 19 newly released top-level domains and found large-scale phishing, unwanted program distribution, and cybersquatting tied to TLD launch dates.

Unit 42 found scammers surge deceptive domain registrations around major events like the 2024 Paris Olympics to run phishing and counterfeit merchandise scams.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views