SURBL FRESH by SecurityZONES is a real-time threat intelligence data feed designed to enhance protection against malware, ransomware, phishing, and spam. It identifies and lists newly registered or recently activated dormant domains before they can establish a reputation or be used for malicious activities. SURBL FRESH addresses the issue of cybercriminals rapidly cycling through new domains to evade traditional filters and blocklists. The feed provides information about the DNS insertion time of new domains for most top-level domains (TLDs) on the internet, using UNIX epoch time to track when a domain first appears in global TLD zone files. SURBL FRESH contains data on hostnames and domains recently observed in spam trap networks, offering protection against emerging threats. It is designed for use in various security system applications such as email filtering, web filtering, DNS firewalls, and SIEM platforms.
