What is a homoglyph attack?
A homoglyph attack uses visually similar characters to create deceptive domain names. For example, replacing “o” with “0” (zero) or “l” with “1” (one) to create paypa1.com instead of paypal.com. Users can't easily spot the difference, making these domains effective phishing tools.
What is typosquatting?
Typosquatting registers domains that exploit common typing mistakes — missing letters, doubled characters, or swapped adjacent keys. gogle.com, gooogle.com and googel.com are all typosquats of google.com.
How does CertStream help detect phishing domains?
CertStream is a real-time feed of all SSL/TLS certificates issued globally through Certificate Transparency logs. Phishing sites need HTTPS to look legitimate — so attackers must obtain a certificate. Tetik monitors this feed 24/7 and instantly flags any new cert containing your brand name or its variants.
How do I take down a phishing domain?
The most common approaches are: DMCA notices to the hosting provider, UDRP arbitration for trademark-infringing domains, direct abuse reports to the registrar, and reports to Google Safe Browsing / PhishTank. Tetik automates the generation of legally-compliant DMCA, UDRP, CFAA, Lanham Act and BEC takedown notices.