The Proofpoint Email Fraud Defense (EFD) integration ingests lookalike domains detected by Proofpoint’s Email Fraud Defense solution into ThreatQ.

The integration provides the following feed:

• Proofpoint EFD Lookalike Domains – Periodically retrieves lookalike domains identified by Proofpoint’s Email Fraud Defense system to detect possible impersonation attempts or phishing campaigns.

The integration ingests indicators and indicator attributes.