Use browser protection to block recently registered domains

natenova

Hello,

Is there the possibility, or will there be the possibilty, to add a setting to browser protection that blocks domains registered within ____ number of days or weeks? This would help to block sites being spun up for the purpose of delivering malware/ransomware. Hopefully.

MikaArasola

We have some analysts investigating the possibility to create a new category around "possible emerging threats" which would consider the age of domain registration as one attribute. Others would be around how common it is, and if it is hosted somewhere with a history of risky sites (either spreading malware or hosting phishing sites).

It will likely take some time to be properly implemented, and in a corporate environment it might also require a company to whitelist their own internal domains (assuming they are rare from a global point of view) so that they don't get flagged.