# New domain monitoring | Precursor Intelligence

**Know when a new domain uses your name. We keep watching.**

> New domain monitoring watches for newly registered domains that contain your brand name, such as acme-refunds.shop. You choose the names to watch, and we pick up matches from registry changes and certificate logs as they appear, then add them to your lookalikes with an alert. It is for any business that wants early warning of impersonation.

Canonical page: https://www.precursorintelligence.com/features/domain-monitoring
Breadcrumb: [Home](https://www.precursorintelligence.com/) > [Features](https://www.precursorintelligence.com/features) > New domain monitoring
Start free: https://www.precursorintelligence.com/register · Book a demo: https://www.precursorintelligence.com/contact

Names you choose. Part of brand protection. Nothing to install.

Example data on this page uses the fictional company Acme (acme.co.uk, watch names "acme" and "acmepay"). Examples of new domains across every brand are made-up generic lure names.

## Contents

1. [What does it watch?](#what-does-it-watch)
2. [How does it work?](#how-does-it-work)
3. [What do I set up?](#what-do-i-set-up)
4. [What happens when one turns up?](#what-happens-when-one-turns-up)
5. [What are scammers registering?](#what-are-scammers-registering)
6. [Questions](#questions)
7. [Related features](#related-features)

## What does it watch?

Scammers need a web address before they can fool anyone. When a new one contains a name you care about, this is how we find it and what we do with it.

1. **New domains with your name.** A new domain counts as a match when it contains a name you are watching, such as acme in acme-refunds.shop.
2. **Names you choose, per brand.** Watch rules are set in your brand settings, so every domain in a brand shares them.
3. **Registry changes.** We keep going through the changes to registry zone files to see which names are new.
4. **Certificate logs.** New website certificates are published in public logs. A new name containing yours that gets one is picked up too.
5. **Added to your lookalikes.** Each match becomes a lookalike finding, with its page captured, analysed and given a risk level.
6. **An alert for each one.** You hear about new lookalikes in the app, by email or by webhook to your own tools. See [alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting).
7. **Misspellings too.** Typos, swapped characters and lookalike letters are caught by lookalike monitoring on each domain you add. See [brand protection](https://www.precursorintelligence.com/features/brand-protection).
8. **The wider picture.** We also show ongoing intelligence on newly observed domains across every brand.

## How does it work?

There is nothing to install. You tell us which names matter, and we keep going through new domains for them.

1. **Choose the names to watch** (once per brand). In your brand settings, add your brand name and any product names someone might use to pass as you.
2. **We go through what is new** (continuously). We check new registry changes and certificate logs for new domains that contain your names.
3. **It joins your lookalikes** (when one matches). The domain is added to your lookalikes and you get an alert.
4. **Triage it like any lookalike** (then). Check its captured page, assign it and, if it turns out to be a threat, prepare takedown emails or export it in a blocklist.

## What do I set up?

Watch rules live in your brand settings, under "Brand names to watch in new domain registrations". Add each name you want to hear about. A new domain is a match when it contains one of them.

- **Set once per brand,** so acme.co.uk and your other domains share one list.
- **Your brand name and product names,** or any name someone might use to pass as you.
- **Misspellings are covered separately** by lookalike monitoring on each domain you add.

## What happens when one turns up?

A match is treated like any other lookalike, and you hear about it without having to log in and look.

- **An alert for each new lookalike,** in the app, by email or by webhook to your own tools.
- **The same checks as every lookalike:** a captured page, analysis for login forms and use of your brand, and a risk level.
- **Triage it as a team** with a status, an assignee and notes.
- **Act on it:** prepare takedown emails to send yourself, or export it in a blocklist.

We keep watching for new domains, and you hear about a match as soon as we spot it.

Example: the alert "New domain containing your name: acme-refunds.shop" arrives in the app. The domain appears in Acme's lookalikes as a new, high-risk finding that uses the brand name, ready to investigate or to prepare takedown emails for.

## What are scammers registering?

Your watch rules cover your own names. New domain monitoring also gives you ongoing intelligence on newly observed domains across every brand, so you can see what scammers are setting up across the internet.

1. **High-risk look-alikes.** New domains that imitate a brand, picked out from newly observed names.
2. **Lure themes.** The subjects scammers build fake addresses around, such as payroll or parcel delivery.
3. **Campaigns and signals.** Groups of new domains that belong together, and the signals that tie them.
4. **An explorer.** Search the newly observed domains yourself.

## Questions

### What is new domain monitoring?

It watches for newly registered domains that contain your brand name. You choose the names, and we pick up matches from registry changes and certificate logs as they appear, then add them to your lookalikes with an alert.

### How is it different from lookalike monitoring?

Lookalike monitoring works out misspellings and lookalike versions of each domain you add. New domain monitoring looks at newly registered domains and new certificates for any name that contains one you are watching. The two work together.

### How quickly will I hear about a match?

We keep watching for new domains, and as soon as we spot a match it is added to your lookalikes with an alert.

### Does it catch misspellings of my name?

Watch rules look for the names you set. Misspellings, swapped characters and lookalike letters are covered by lookalike monitoring on each domain you add, so use both.

### Can I see new domains beyond my own brand?

Yes. We give you ongoing intelligence on newly observed domains for every brand: high-risk look-alikes, lure themes, campaigns, signals and an explorer. It sits in the threat intelligence part of the platform.

## Related features

- [Brand protection](https://www.precursorintelligence.com/features/brand-protection): continuous monitoring for lookalike domains using your name, with takedown emails drafted for you to send.
- [Threat intelligence](https://www.precursorintelligence.com/features/threat-intelligence): who targets businesses like yours, how they work and which flaws they use.
- [Alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting): alerts by email, in the app or by webhook as soon as we spot something, plus PDF reports you can share.
- [SSL certificate monitoring](https://www.precursorintelligence.com/features/ssl-certificate-monitoring): get a warning before your own SSL certificates expire, with every domain's certificate in one place.
- [All features](https://www.precursorintelligence.com/features)

## Get started

Hear about new domains using your name, and act early. Choose the names to watch and we check new registrations and certificate logs for them, add each match to your lookalikes with an alert, and show you what scammers are registering across every brand.

- Start free: https://www.precursorintelligence.com/register
- Book a demo: https://www.precursorintelligence.com/contact
- Nothing to install · Unlimited team members · Data stored in London · Two-factor sign-in for everyone