Threat Monitoring Newly Created Ukraine-Related Domain Names

Published on: 
June 1, 2022

A free threat intelligence feed of newly observed or registered Ukraine-related domain names

If you haven’t yet seen it, the FBI issued a PSA regarding scams relating to donations (both monetary and cryptocurrency) to the crisis in Ukraine. Read the full announcement here: https://www.ic3.gov/Media/Y2022/PSA220531

As a reminder, the free threat intelligence feed of newly observed or registered Ukraine-related domain names is still available to help organizations monitor threats. Learn more and download here: https://ukraine-domains.domaintools.com/

Related Content

SecuritySnacks
DPRK Contagious Interview: Developer Workflow Compromise
Analyze the DPRK "Contagious Interview" campaign targeting developers. Get technical deep-dives into VS Code task abuse, Node.js malware obfuscation, and a full Sigma/EDR detection pack to defend your CI/CD pipeline and identity perimeter.
Learn More
SecuritySnacks
The AI Frame Campaign Continues
Analysis of the persistent AIFrame campaign: A fake Google Authenticator Chrome extension and 6+ related apps use "deploy clean, update dirty" tactics to steal 2FA credentials and inject malicious iframes. Learn how this operation bypasses Google’s security reviews.
Learn More
SecuritySnacks
Cybersecurity Reading List - Week of 2026-04-06
From Gramsci's 'morbid symptoms' to modern threat intelligence - a cybersecurity roundup exploring why defenders should treat root causes over chasing dramatic threats, with curated links on ransomware, HUMINT, disinformation, and more.
Learn More