Proofpoint Domain Discover for Email
Prevent threats that use lookalike domains before they attack

Prevent threats that use lookalike domains to harm your users and business

Key Features

• Automatically detect and block email coming from fraudulent domains
• Extend security to domains you don’t own
• Proactively protect your organization from targeted threats, including email fraud and credential phishing

Proofpoint Domain Discover for Email protects you from email fraud and cyber attacks that imitate your domain. Our highly scalable system continuously detects newly registered domains that could be used to spoof your organization and trick your users into sending money or sensitive information. With Domain Discover for Email, you can block email coming from these fraudulent domains—even before an attack takes place.

We help stop a growing class of email fraud in which attackers register domains crafted to look like your organization’s. These impostor domains, in combination with social engineering tactics, can appear legitimate to many users. And they leave your organization vulnerable to wire- transfer fraud and data theft. Given the many ways attackers can create convincing lookalike domains, most security tools simply can’t identify them all. Unlike in traditional cyber attacks, the damage from email fraud is instant—and usually permanent.

Domain Discover for Email gives you actionable intelligence to proactively block email from lookalike domains. It stops business email compromise (BEC), credential phishing, and more.

Proactive Blocking

Domain Discover for Email analyzes more than 300 million registered domains every day. It identifies lookalike domains that could be used to target your users. Thanks to our rich threat analysis and breadth of coverage, you can count on thorough and accurate intelligence about the domains, subdomains and URLs that pose a risk to your organization and employees.

Once suspicious domains have been identified, Domain Discover for Email gives organizations the intelligence for proactive blocking through Proofpoint Email Protection. At the same time, suspicious domains are fed into the Proofpoint Nexus Threat Graph. Fraudulent or malicious domains can then be blocked by Email Protection deployments worldwide to better defend all Proofpoint customers. This approach saves your security team time and avoids any errors in manual domain searches.

Better Visibility

Domain Discover for Email saves you time and resources. You get detailed visibility of any domain spoofing your organization. Automated tags indicate risk level to help you quickly assess:

• Security risk domains that are part of a phishing or cyber attack
• Suspicious domains that are dormant for a potential future attack
• Brand-owned, defensively registered domains (to prevent typo-squatting and other tricks)

Within 24 hours of first running Domain Discover for Email, you’ll get visibility into lookalike domains that might be affecting your business. You’ll have confidence that you’re protecting your organization against targeted phishing and email fraud from spoofed domains—even before an attack takes place.

Built-in Mitigation Workflow

Domain Discover for Email makes responding to fraudulent domains and URLs easy. Using the administration console, you can configure a takedown option and send a request with third-party takedown services.

Domain Discover for Email integrates with takedown services and your remediation workflow. Administrators can receive automated reports when new suspicious domains are detected and need to be taken down. Tracking the status and outcomes of takedown requests is easy.

Ecosystem Integration

Domain Discover for Email works with your security information and event management (SIEM) deployment. When Domain Discover for Email detects a spoofed domain, it can feed that information into your SIEM automatically as part of your existing security operations center (SOC) processes. It also works with Splunk and Sumo Logic.

Documentation:

Download the Proofpoint Domain Discover for Email Datasheet (PDF).