At Shmoocon 2025, I released Watchman – a system to detect imposter domains by diffing ICANN CZDS Zonefiles and running matches. You can see my presentation here.
Insomniac Technologies
Hacker's Don't Sleep
Imposter Detection with Watchman
About the author
Matthew Wollenweber (@mwollenweber) is a security engineer with over 20 years experience in cybersecurity and software development. Matthew is passionate about analyzing real-world security problems as inspiration to build tools. His day job is security operations, incident response, and tool development. He is a progressive political organizer in New Orleans, a BJJ brown belt, and bulldog rescuer.