Domains

Domain Monitoring

This is where you can check the blacklist status of your domains using the Web Risk API. More information can be found at:

https://cloud.google.com/web-risk/

Column Description
Domain name The hosted domain name.
Checked The date and time that the domain name was last checked.
Status Whether the Web Safe API reported the domain name as being blacklisted (OK or Not OK)
Response If the domain name is blacklisted the reponse will contain the threat type.

Get a Web Risk API key

The Web Risk API is free for up to 100,000 API calls per month. Domain checking in Sentinel is entirely optional. It just adds additional external monitoring of your domains for malware.

  1. You must be whitelisted in order to gain access to the Web Risk API. Fill out the signup form.
  2. Once you've received confirmation that you have been whitelisted, enable Web Risk API by logging into the Google Developers Console.
  3. Login using your Google account and Create a new Project, unless you already have one created. Add a project name and click on the Create button (wait a few moments after you click the create button to load your project, otherwise you can manually select it).
  4. Select API Library.
  5. Search for the Web Risk API, access it and click on the Enable button.
  6. Next click on Credentials from the left panel.
  7. Select the Create credentials drop-down, then choose API key.
  8. Copy the provided key and paste it into Sentinel Anti-malware -> Settings -> Domain Monitoring > Web Risk API key field.
  9. Go to Sentinel Anti-malware -> Domains and select all your domains then press the "check" button to check if any of your domains are blacklisted.

More information can be found at: https://cloud.google.com/web-risk/

You can choose who gets domain monitoring alerts under Tools & Settings -> Notifications -> Sentinel Anti-malware domain monitoring alert