Netcraft Launches AI Tool to Disrupt Malicious Domains Preemptively

Netcraft Launches AI Tool to Disrupt Malicious Domains Preemptively

First seen 18 Mar 2026, 16:13 UTC MorningstarItbrief.AuSecuritybrief.Au 27.9

Article Content

Browse articles
ThreatCluster

On March 17, 2026, Netcraft announced the launch of its AI-powered Preemptive Domain Disruption service, designed to identify and take down attacker-controlled domains before they are utilized in phishing and Business Email Compromise (BEC) campaigns. This service targets the critical window between domain registration and activation, where attackers often prepare their infrastructure. Early results indicate that approximately 90% of malicious domains can be removed within 24 hours, with one enterprise customer reporting over 21,000 takedowns in three months. The tool employs infrastructure clustering and campaign fingerprinting to detect domains showing signs of preparation for abuse, even before they host malicious content. This proactive approach aims to redefine cyber threat prevention as attackers increasingly leverage AI to enhance their operations. The service is part of a broader shift towards earlier intervention in cybercrime, reflecting the growing urgency in combating brand impersonation and credential theft. Netcraft will also share data from this service with the Anti-Phishing Working Group to enhance collective defense efforts.

Key Points: • Netcraft's Preemptive Domain Disruption targets domains before phishing campaigns launch. • 90% of malicious domains are taken down within 24 hours of detection. • The service uses AI to identify and disrupt malicious infrastructure proactively.

Timeline

2026-03-17
Netcraft launched Preemptive Domain Disruption service.
2026-03-17
Netcraft reported 90% of malicious domains taken down within 24 hours.
2026-03-17
One enterprise customer recorded over 21,000 takedowns in three months.