Brand Signal V1.1 · Sub-capability

Visual Similarity

Perceptual hash + dHash + favicon fingerprint + title comparison vs. cached official snapshot. Catches phishing landings that clone your site even if they change the domain. No LLMs, no external computer vision.

Capabilities

Perceptual hash (pHash) V1.1

Screenshot image hash. Tolerant to minor changes (compression, resize). Detects clones even when they tweak pixels.

dHash difference V1.1

Hacker Factor difference-hash algorithm. Compares gradients — useful for detecting slightly modified templates.

Favicon fingerprint

MD5 of the favicon served by the lookalike. If it matches your official favicon, it is an explicit clone. Max weight in score.

Title + DOM fingerprint

Hash of <title> + main DOM structure. Detects when they copy only the HTML but change the domain.

Cached official snapshot

We keep a cached snapshot of your official site. Every candidate is compared against that baseline. Snapshot refresh weekly.

Adjustable similarity threshold

85%+ similarity = confirmed clone. 60-85% = suspicious. <60% = unrelated. Threshold tunable per-tenant.