Plug-and-Play DNS Sinkhole

Network-Wide Threat Blocking
With One Cable

Blackhol3 Master Rig 0 plugs into a LAN port on your existing router. Point your network's DNS at it and it sinkholes newly registered and malicious domains for every device, cutting off the lookups behind phishing, Business Email Compromise (BEC) lures and malware, with nothing to install on any endpoint.

1 Cable
Drop-In Install
NRD
New-Domain Blocking
On-Prem
DNS Processing
Live
Policy Push

How It Works

Every website visit starts with a lookup: a device asks where a domain lives. Rig 0 answers those lookups for your whole office, and refuses to answer for domains that are dangerous.

Office device asks: where is acme-invoices.co?
[●] Rig 0 checks the domain on-site
Trusted: real address returned
New or malicious: blocked
  1. 1

    Plug it in

    Connect Rig 0 to any free LAN port on your existing router with one network cable. No re-cabling, nothing to install on computers or phones.

  2. 2

    Point your DNS at it

    Change one setting on your router so every device uses Rig 0 for lookups. From that moment, the whole network is covered.

  3. 3

    Manage from the dashboard

    Add blocks or allow trusted domains, see which nodes are online, and push changes that reach your network in seconds.

Master Rig 0: Tactical Mitigation Breakdown

BEC Lure & Typosquatting Blocker

Rig 0 applies Newly Registered Domain (NRD) Squashing, refusing DNS lookups for recently registered domains, the window in which most look-alike and phishing domains are used.

  • Blocks look-alike supplier-portal domains at lookup time
  • Cuts off lookups to infrastructure used by known threat actors
  • Helps protect payment and wire-instruction workflows from phishing links
  • One layer of BEC defense: best paired with email authentication and payment-verification procedures

Local Hardware Engine

Unlike cloud-routed DNS services, Rig 0 sits inside your premises and answers your network's DNS queries locally.

  • Plugs into one LAN port on your existing router: no re-cabling, no endpoint software
  • Quad-core ARM hardware running a local DNS resolver and cache
  • Policies pushed live from the dashboard and cached on the device, so the last known rules keep working if the internet drops

Data Sovereignty by Design

Your network's DNS queries are resolved by hardware in your own facility rather than by a third-party cloud DNS service.

  • No third-party DNS analytics in the query path
  • Only device registration and policy settings sync with the dashboard
  • Built to support your NDPA 2023 obligations

Less Wasted Bandwidth

Blocks lookups to ad, tracker and malware domains at the gateway, so those requests never leave your network.

  • Fewer wasted requests to ad and tracking networks
  • Useful on metered, satellite and capped fiber connections
  • Actual savings depend on your traffic mix

Built for Businesses That Move Money by Email

Law Firms & Chambers

Settlement funds, escrow and client accounts are prime targets for fake payment instructions.

Banks, Fintech & Microfinance

Staff are targeted with look-alike login pages built to harvest credentials.

Logistics & Import/Export

Supplier invoices and changed bank details are the classic invoice-fraud setup.

Accounting & Real Estate

Large transfers, many external parties and tight deadlines make convincing fakes hard to spot.

Frequently Asked Questions

Will it slow down our internet?

No. Rig 0 only answers DNS lookups, the step where a device asks where a website lives. Your downloads, video calls and file transfers never pass through it. Lookups are answered on your own network and cached, so repeat visits are often answered faster than by a resolver on the internet.

What happens if Rig 0 goes offline?

You choose at installation. With a backup DNS server configured, your network stays online but unfiltered until Rig 0 is back. Without one, filtering never lapses, but websites stop loading until Rig 0 returns. Either way, the dashboard shows when a node is offline, and the last rules are cached on the device so it resumes filtering as soon as it restarts.

Can Blackhol3 see our traffic?

Rig 0 only sees which domain names devices look up, never the contents of pages, emails or files. Those lookups are resolved on the device inside your office. The cloud dashboard only holds device registration and the rules you set.

Do we need IT staff to run it?

No. We help you set it up during the 14-day evaluation. You need someone who can sign in to your router to change one DNS setting. After that, rules are managed from a web dashboard.

Will it work with our router?

It works with any router that lets you choose the DNS server it gives to your devices, which most business routers do. Some routers locked by internet providers do not allow this; we check yours before the evaluation starts.

Could it block a legitimate website?

Occasionally. Blocking newly registered domains can catch a genuine new site, such as a supplier's new portal. You can allow any domain from the dashboard and the change reaches your network within seconds.

Does it protect laptops outside the office?

No. Rig 0 protects devices while they are connected to your office network. Laptops and phones on home or mobile networks are not covered.

See What Your Network Is Exposed To

Run Rig 0 on your own network for 14 days. One cable, no software, no commitment.