NFR: Check sender domain against FortiGuard -> Newly registered domain

[Carl_Wallmark]

Hi,

Today we had a few scam emails which were accepted, they misspelled our domain so at first glance it looked ok but it was not correct.

And the fortimail let it pass because nothing "dangerous" was in it. 

But the domain was created 2017-11-02, so is it possible to run the sender domain against FortiGuard and flag/redirect emails which will be under the "newly registered domain / newly observed domain" category ?

[Carl_Windsor_FTNT]

This is already scheduled for the next release (5.5) together with some other relevant BEC features.

[Carl_Wallmark]

Nice! Thanks!

Any ETA on 5.5 ?

[Carl_Windsor_FTNT]

I don't want to commit an exact date here as things do change as we add customer NFRs but it should be late Q1/early Q2 timeframe.

[Carl_Wallmark]

Very good Carl.

Thanks!

[emnoc]

OP, in the mean time, you can subscribe to a newdomain  listing  service and build a list  of new domains.

e.g

https://www.whoisxmlapi.com

Until  a domain has reputation scoring it  will rate neutral in the spam rating for more appliances. I use the above and  unix-whois looks to vaidate domain creation time and manually apply the domains in a tight policy.