Resources

How it works, in plain words

Somebody who wants to trick your customers buys a web address that looks like yours, and uses it to send mail or open a page that looks like you. These articles explain how we find those addresses, how we make sure an alert is real, how we decide which ones matter most, and why the first thing we do about a dangerous one is block it.

1. 01 How we find the names that copy yours The tricks people use to make a web address look like yours, and why we work out every one of them before anybody registers it.
2. 02 How we know a name is live Why asking the internet once gives the wrong answer, and how we get the right one before we alert you.
3. 03 How the risk score works What raises a score, what lowers it, and why a score is about what a name can do today.
4. 04 Why we block first An attack using a lookalike does its damage in hours. A block acts in minutes. How blocking works, and what it does not do.