BastionGuard Threat Intelligence Search Is Now Available

BastionGuard™ is pleased to announce the availability of BastionGuard Threat Intelligence Search, a new service designed to provide real-time visibility into domains associated with phishing, suspicious infrastructure, and emerging malicious campaigns.

Threat Intelligence Search continuously discovers and analyzes newly observed domains using multiple intelligence sources, certificate transparency data, DNS information, domain characteristics, reputation signals, and direct HTTPS page analysis.

Rather than relying exclusively on external threat feeds, BastionGuard also performs its own classification and correlation process. Newly discovered domains are screened in real time and evaluated using phishing-oriented heuristics, including credential collection patterns, brand impersonation, typosquatting, suspicious form destinations, redirects, obfuscation, OTP and verification requests, wallet recovery patterns, and other indicators commonly associated with phishing infrastructure.

The platform also builds an internal reputation layer from previously analyzed infrastructure. Related domains can be correlated through page fingerprints, structural similarities, form destinations, redirects, infrastructure characteristics, and recurring phishing-kit patterns. This allows BastionGuard to identify relationships between domains and detect emerging campaigns that may not yet appear in public threat feeds.

Domains confirmed as malicious are automatically classified and added to the BastionGuard public blocklist.

Threat Intelligence Search

The service provides access to:

• real-time domain discovery and classification;
• phishing and malicious-domain detection;
• direct HTTPS landing-page analysis;
• DNS and reputation analysis;
• typosquatting and brand-impersonation detection;
• phishing-kit and infrastructure correlation;
• campaign intelligence;
• classification evidence and scoring;
• continuously updated public blacklist data.

Threat Intelligence Search is available at:

https://search.bastionguard.eu/

The service can also be accessed directly from the BastionGuard website through:

Support → Threat Intelligence Search

The continuously updated public blacklist is available at:

https://search.bastionguard.eu/blacklist.txt

BastionGuard Threat Intelligence Search is intended to strengthen defensive security operations by providing an additional source of independently generated threat intelligence and by helping identify malicious domains as early as possible.

The service will continue to evolve as new detection techniques, correlation mechanisms, and intelligence sources are integrated into the BastionGuard threat-analysis pipeline.