How is the Domain Squatting Risk Vector Assessed? Ingrid ⇤ How is the Diligence Risk Category Calculated?The Domain Squatting risk vector reveals if a company has registration coverage for domains that resemble their own primary/secondary domains, which render them most susceptible to these types of attacks.See domain registration statuses. Concept Behavior Insufficient Data A default risk vector grade is assigned. Default: This is an informational risk vector. It does not currently affect security ratings. Lifetime The number of days a finding impacts the risk vector grade, assuming nothing changes in the future and the finding is not updated with new information. Learn why findings have a decay and lifetime period. Duration: Not Applicable Weight Percentage (out of 70.5% in Diligence): Not Applicable Domain Registration StatusesWe determine if domains are registered based on the information provided by DNS queries.If new primary or secondary domains are added to a company, the data will be available the following week. If newly mapped companies are added to the Bitsight inventory during the nightly data collection process, findings will be available for those companies the following day.Each domain variation is evaluated and grouped into one of the following states: Ownership Status Description Own Company Indicates if the company who owns the target domain (appears in its domain map) registered the variation. Another Company Indicates if another company registered the variation. This assumes that organizations are not maliciously squatting. This helps resolve issues where Cosco legitimately has “cosco.com,” a domain variation of “cisco.com,” registered. This also captures cases where we have mapped Identity/Brand Protection companies and various companies in our inventory use these third-parties for brand protection. Example: SBC.com and ABC.com Third Party This domain is registered, but not by a known organization. Not Registered The domain is unregistered. December 19, 2025: Links updated to open in new tab. March 25, 2024: “No findings/low findings” changed to “insufficient data.” December 12, 2023: Linked to no findings definition. December 4, 2023: Finding lifetime definition link changed to Finding Lifetime section. Related articles Domain Squatting Risk Vector How is the File Sharing Risk Vector Assessed? Finding Behavior How is the Diligence Risk Category Calculated? How is the Mobile Application Security Risk Vector Assessed? Feedback 0 comments Please sign in to leave a comment.