Four signals
Does DNS resolve, is there an MX record, does HTTP respond, is it in certificate transparency logs?
PHISH Look-alike domains, fake profiles, ads, apps
Phishing Monitoring
Every record impersonating your brand is listed with score, severity, status, takedown request, AI classification, DNS/MX/HTTP/CT signals, match method and registrar.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
The match method says how a finding was caught: typo domain (brand-login.com), homoglyph (rnbrand → mbrand), keyword (brand.com.tr.login-verify.xyz). The arrow next to the score shows the change since the last scan; ignored records can be hidden and brought back.
What it does
AI classification
Page content is classified as phishing or suspicious, with a confidence percentage.
Four tabs
Domains, social media, ads and mobile apps are counted separately.
What you get
- Armed domains are separated from parked ones.
- The fake page is known before a customer complains.
- Evidence is ready for the takedown request.
Scenarios featuring this module
Typosquatted domain with a fake login page
Shortly after appearing in certificate transparency logs, the freshly registered domain began serving a copy of the organisation's login page that posted credentials to a third-party server.
3 modules
Impersonation account targeting an executive
An account copying the profile photo and title began direct-messaging employees and business partners.
3 modules
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.