CyberSpark looks at your DNS entries, starting with the start-of-authority [SOA] for your domain, to be sure they haven’t been hijacked.

Among other things, if any of your servers changes its IP addresses, or your email servers are changed, this filter detects it and warns you.

This filter is designed to alert you of a domain hijacking if it takes place.