Brand Defense · Sub-capability

Lookalike Monitoring

Continuous detection of typosquats, homoglyphs and combosquats registering your brand. Risk scoring + screenshot + DNS analysis. Catch them before they become active phishing kits.

Capabilities

Variant generation

Algorithms generate 5000+ variants per brand: typos, swaps, homoglyphs (Cyrillic/Greek), combosquats with common TLDs.

Continuous monitoring

Cross-check against global DNS registries every 4 hours. Detection in hours, not weeks.

Automatic risk scoring

Score based on active MX, issued SSL certs, hosting reputation, domain age, content. High = phishing kit set up.

Screenshot evidence

Timestamped screenshot + HTML meta for abuse complaints. Evidence for registrar take-downs.

DNS analysis

Nameservers, MX, SPF, TXT. If the lookalike has valid SPF and MX, it is preparing phishing email — critical alert.

Spike alerts

10 new lookalikes in 24h = a campaign being prepped. Priority notification with suggested response plan.