Related domains report
If related domains are detected, you can view a detailed list of these domains. The related domains report shows data on domains that Akamai detected are a risk to your organization. In this report, you can:
- Filter the list of domains to narrow your view. You can filter by zone or zones, risk level, assigned priority level, UTC timestamp of when the domain was last registered, whether an administrator is following it or not, whether a notification about a risk level change was sent to administrators, and assigned tags.
- View detailed information about a domain. You expand the table row of a domain in the report to view additional information about the domain. For more information, see Detailed domain information.
- Review the risk level that was detected and assigned to the domain. The report automatically sorts domains by the highest risk level.
- Assign priority level. To manage the list of domains, you can assign a priority level that lets you or other administrators manage it more easily.
- View a screenshot of content that’s hosted by the related domain. This allows you to view content without navigating to the domain.
- Follow a domain. You provide the email address of administrators or other users who are notified when the risk level for a domain changes
- Add a domain to an allowlist. After a domain is added to an allowlist, it no longer appears in zone reports for your account. Similarly, you can also remove a domain from the allowlist.
- Download a CSV that contains a filtered list of domains in the report.
- Perform bulk actions on multiple domains. These actions include adding domains to an allowlist, setting a priority level, managing tags, following or unfollowing domains, and updating the follow settings with new recipient email addresses.
To take down a domain that you believe is a threat to your organization, use Brand Guardian. To try this solution, contact your Akamai representative.
Detailed domain information
You can expand a domain to view more detailed information about the domains that Akamai considers a risk to your organization.
| Data Field | Description |
|---|---|
| Risk Indicators | Attributes that were identified and allowed Akamai to identify the domain as a threat. These attributes include device, browser information, a domain update, and more. |
| Domain URLs | URLs where the domain is used |
| Tags | Tags associated with the domain. You can add or remove a tag. For more information, see Create and manage tags. |
| WHOIS Registration Time (UTC) | The date and time in UTC format when the domain was registered with WHOIS. |
| Screenshot timestamp | The date and time in UTC format when the screenshot was taken. |
| DNSSEC | Indicates whether the domain was protected with Domain Name System Security Extensions (DNSSEC). DNSSEC are cryptographic signatures added to DNS records to secure DNS data transmitted over the internet. |
| Name servers | Addresses of the name servers that are associated with the domain. |
| DNS | Records in the domain. |
| Rule name | Shows the specific rule that identified the domain as a risk. |
| Zone(s) | Zone or zones of the related domain. |
| Comment | Comment that you can enter about the domain. |
Risk levels
Akamai monitors your zone and assigns one of these risk levels to domains.
You can use the report filter to show the domains for a specific risk level. Each risk level includes the attributes of the previous risk level. For example, a risk level with a Medium risk level also includes the attributes of a domain with a low and minimal risk level. For more information, see Filter the related domains report.
| Risk Level | Description |
|---|---|
| Critical | Indicates the domain appears in a long URL that is likely part of a phishing scam. |
| High | Indicates the domain leads to a phishing form that is used to steal sensitive information. |
| Medium | Indicates the domain includes a DNS record that is a mail exchanger (MX) record. An MX record routes emails to email servers. |
| Low | Indicates a website is live with this domain. |
| Minimal | Indicates the domain is an A or Address record where a domain maps to an IP address. |
Priority levels
To help you manage domains in the related domain reports, you can assign one of these preset priority levels:
- Critical
- High
- Medium
- Low
- Minimal
The priority level you assign is based on your preference. A critical priority level should be reserved for domains that require the most attention, while minimal should be assigned to domains that require the least amount of attention. For instructions on setting a level, see Set a priority level.
Updated 3 days ago