Four channels
Domains, social accounts, ads and app stores are tracked in separate tabs with the same scoring logic.
BRAND Fake domains, social profiles, ads and mobile apps
Brand Protection
Domains, social profiles, ads and mobile apps impersonating your brand are watched across four channels; each finding is scored, classified by AI and tied to a takedown request.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
Every hour a phishing page stays up is a chance for a customer to type their credentials in. So the job is not finding look-alike domains but separating the ones actually armed for an attack: does it have an MX record, does the page respond, was a certificate issued? Brand Protection stamps these signals on every finding and tracks the takedown alongside the case.
What it does
Signal-based score
DNS, MX, HTTP and certificate transparency signals become a 0–100 score; AI classifies the page as phishing or suspicious.
Takedown tracking
The takedown request, its status and the registrar stay with the finding; open takedowns show on the command screen.
How it works
-
01
Detect
Typo, homoglyph (rn/m, v/u) and keyword-bearing registrations are caught from certificate logs and other sources.
-
02
Weaponisation check
MX, HTTP response and certificate are checked; a screenshot is taken and an AI classification added.
-
03
Takedown
A critical finding becomes a case, a takedown request is opened and the domain is blocked in internal DNS and mail filtering.
Sub-modules
PHISH
Phishing Monitoring
Every record impersonating your brand is listed with score, severity, status, takedown request, AI classification, DNS/MX/HTTP/CT signals, match method and …
Look-alike domains, fake …
TAKEDOWN
Takedown Management
A takedown request opens from the finding itself; requested, in progress and completed states are tracked with the registrar. A …
Takedown requests tracked…
What you get
- A fake login page is visible before the campaign starts.
- Less noise: unarmed parked domains are not treated as critical.
- Legal and communications follow the takedown from a single record.
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.