The team behind DNSWatch is constantly looking for where attackers are setting up on the internet. We do this in three ways. First, our team is analyzing malware daily, providing us with real threat data we use to protect you. Second, DNSWatch has partners that provide us with data we use to protect you. Last, DNSWatch works in collaboration with numerous open-source intelligence feeds that are constantly updated with new malicious domains.