⇤ How is the Diligence Risk Category Calculated?
The Domain Squatting risk vector reveals if a company has registration coverage for domains that resemble their own primary/secondary domains, which render them most susceptible to these types of attacks.
See domain registration statuses.
| Concept | Behavior |
|---|---|
|
A default risk vector grade is assigned. |
Default: This is an informational risk vector. It does not currently affect security ratings. |
|
The number of days a finding impacts the risk vector grade, assuming nothing changes in the future and the finding is not updated with new information. Learn why findings have a decay and lifetime period. |
Duration: Not Applicable |
|
Percentage (out of 70.5% in Diligence): Not Applicable |
Domain Registration Statuses
We determine if domains are registered based on the information provided by DNS queries.
If new primary or secondary domains are added to a company, the data will be available the following week. If newly mapped companies are added to the Bitsight inventory during the nightly data collection process, findings will be available for those companies the following day.
Each domain variation is evaluated and grouped into one of the following states:
| Ownership Status | Description |
|---|---|
|
Own Company |
Indicates if the company who owns the target domain (appears in its domain map) registered the variation. |
|
Another Company |
Indicates if another company registered the variation. This assumes that organizations are not maliciously squatting. This helps resolve issues where Cosco legitimately has “cosco.com,” a domain variation of “cisco.com,” registered. This also captures cases where we have mapped Identity/Brand Protection companies and various companies in our inventory use these third-parties for brand protection. Example: SBC.com and ABC.com |
|
Third Party |
This domain is registered, but not by a known organization. |
|
Not Registered |
The domain is unregistered. |
- March 25, 2024: “No findings/low findings” changed to “insufficient data.”
- December 12, 2023: Linked to no findings definition.
- December 4, 2023: Finding lifetime definition link changed to Finding Lifetime section.
Feedback
0 comments
Please sign in to leave a comment.