At Doinmon, our product development is a continuous cycle of innovation driven by one core principle: delivering ever-increasing value to our users. Your feedback is the blueprint for our evolution, and your security challenges are the problems we are passionate about solving. We believe a security platform should never stand still.
In line with that commitment, we are proud to announce our June 2025 Product Update. This is a significant release that directly responds to your needs for deeper investigative power and greater operational efficiency. We've been hard at work turning your requests into powerful, intuitive features.
This update introduces two major enhancements designed to elevate your security posture: the game-changing Domain Intel Module and the precision-focused Smart Whitelisting module. Let's dive into what we've built for you.
From Raw Data to Rich Intelligence: The Domain Intel Module
(Exclusive to Enterprise Plans)
An alert is just an event. Intelligence is the rich context that connects that event to an adversary's identity, infrastructure, and intent. This is the core philosophy behind the Domain Intel Module. It moves beyond simply telling you what happened, to showing you who is behind it and what else they're planning.
Building the Intelligence Picture:
The module works by enriching every suspicious domain with a deep set of correlated data points—the digital fingerprints an attacker leaves behind. Our intelligence engine synthesizes these raw data points into a coherent picture:
- Domain Age: Instantly identify newly registered domains (NRDs), a classic TTP (Tactic, Technique, and Procedure) for phishing campaigns.
- WHOIS & Registrar Information: Uncover clusters of domains tied to specific registrars or registration patterns, revealing the adversary's preferred operational channels.
- HTTP Status & HTML Headers: Find hidden infrastructure links by identifying domains that share unique server responses or custom HTTP headers, indicating they were deployed from the same campaign toolkit.
- Geographical & Network Data (IP, Country, Organization, ASN): Map the adversary's global footprint. A single ASN (Autonomous System Number) might host dozens of malicious domains. Our intelligence engine connects these dots for you.
- Doinmon’s Proprietary Risk Score: We analyze these factors to assign a dynamic risk score, allowing you to instantly triage and prioritize your resources on the most critical threats.
The Core of Our Intelligence Engine: Correlation
This is where raw data is forged into strategic intelligence. Instead of viewing each threat as an isolated incident, our engine reveals the hidden relationships between them.
Consider this intelligence-led investigation:
Doinmon detectsyourbrand-login.xyz. With the Domain Intel Module, your query evolves:
"Show me a consolidated intelligence report of all domains, regardless of name, that are hosted on ASN 67890, were registered in the last 48 hours with the same registrar, and share a specific server header. Then, cross-reference this with their risk scores."
In seconds, you move from a single data point to a full-blown intelligence brief. You haven't just found one phishing site; you have mapped the adversary's entire operational infrastructure and gained critical insight into their TTPs. This allows you to proactively block their entire campaign, often before it even launches.
This power is accessible through an intuitive advanced filtering and search interface, allowing your analysts to query the Doinmon intelligence platform and conduct deep-dive investigations with ease.
Achieving Signal Clarity: The Smart Whitelisting Module
(Available for all users)
Actionable intelligence requires a clear, unambiguous signal. The greatest challenge in cybersecurity is often cutting through the noise of false positives to identify genuine threats. We've listened to your feedback about legitimate domains—like your own marketing subdomains (promo.yourbrand.com) or country-specific websites (yourbrand.co.uk)—triggering alerts.
Our new Smart Whitelisting module is engineered to solve this, ensuring the intelligence you receive is pristine.
How It Provides Clarity:
This is an intelligent system designed to understand the legitimate footprint of your digital ecosystem.
- Subdomain Intelligence: The module automatically recognizes and whitelists legitimate subdomains associated with your primary domains, ensuring your internal operations don't create external noise.
- ccTLD Awareness: It intelligently identifies your official country-code top-level domains (ccTLDs), distinguishing your legitimate international presence from genuinely suspicious domains.
- Full Customization: While smart by default, the module provides you with granular control to customize whitelisting rules for each domain, ensuring the platform adapts perfectly to your organization.
The Result: A dramatic reduction in noise and a crystal-clear view of the threats that matter. This allows your team to trust the data and act with confidence. This feature is now live for all Doinmon users.
Summary: Your New Intelligence Partner
Doinmon has evolved. Smart Whitelisting provides the signal clarity, and the Domain Intel Module delivers the strategic depth. Together, they transform Doinmon from a monitoring tool into a vital domain intelligence platform.
- All Doinmon Users: Log in to your dashboard now to experience the enhanced clarity and focus provided by Smart Whitelisting.
- Enterprise Users: The "Intel" tab is now available on your suspicious domain detail pages. Begin exploring the rich intelligence connected to your alerts.
- Ready to equip your team with true Domain Intelligence? If you are not yet on our Enterprise plan and want to leverage this strategic advantage, [Click Here to Request a Demo or Learn More About Enterprise].
Thank you for trusting Doinmon. We are committed to providing you with the intelligence you need to not just react to threats, but to anticipate and neutralize them.
The Doinmon Team