daylight · watchlist

Watchlist

The identities Daylight watches most closely. When a watched organization gains or changes a domain, or a watched email appears as any security contact, the change is flagged high-severity in Activity. Everything Daylight records is public regardless — the watchlist just decides what gets the loudest flag. It’s a curated list, seeded from public reporting.

Suggest a domain or organization to watch →

Watched organizations

Flagged when they gain or change a .gov.

Executive Office of the PresidentDepartment of Government EfficiencyWhite House Office

Watched contacts

Flagged when this email appears as any security contact.

@ndstudio.gov

Watched domains

Ownership + certificates tracked closely.

ndstudio.gov passports.gov trumprx.gov realfood.gov trumpaccounts.gov usadf.gov freedom.gov login.gov eac.gov

Watched subdomain hosts

Enumerated for subdomain-hosted programs.

energy.gov

Known shadow references

A name we compare against its real counterpart (shadow-vs-real).

vote.gov → eac.govpassports.gov → travel.state.govlogin → login.gov

Seeing something Daylight should watch — a `.gov` collecting data quietly, an org spinning up new domains, a contact that doesn’t belong? Send it in. Public sources only.