Deciphering Threat Signals: New Domain Registrations
Beyond the malicious and phishing activities of the ActiveWeb, lurks suspicious activity with new domain registrations in the ProActiveWeb.
The ActiveWeb is how zvelo refers to the websites that comprise the publicly-accessible Surface Web – also known as the Visible Web or Indexable Web. To provide a safe and secure internet experience, zvelo focused on classifying these sites for content, malware, phishing, adult and other content, which is licensed to partners on a data subscription model.
Beyond the malicious and phishing activities of the ActiveWeb, lurks suspicious activity with new domain registrations in the ProActiveWeb.
This post demonstrates the lifecycle of a website and how it moves through zvelo’s InActiveWeb, ProActiveWeb and ActiveWeb.
zvelo is expanding threat detection capabilities to explore suspicious activity outside the ActiveWeb to include what we call the ProActiveWeb.
We often get asked how we are able to attain such high levels of coverage with our URL database. Here, we explain our approach as well as how we got there.
In this blog, we explore the most common DNS filtering misconceptions, provide clarification, and identify what separates premium solutions from the pack.
Over many years or testing, trial and error, zvelo ultimately determined that a human-machine “hybrid” approach to classification produced the best outcomes. The Human element provided the verifications necessary for the highest levels of accuracy, while machines (ie. AI/ML models and calculations) provided the scaling necessary to deal with the incredible volumes of new URLs and content being published at an increasing rate.