Darkmon - Brand-Targeted NRD Watch

Daily sweep of newly-registered domains. Each candidate's root label is compared against the brand list via DarkmonLevenshtein; matches with distance <= 2 (configurable) open a 'Darkmon Typosquatting Threat' incident.

Pack

Darkmon

Tasks

9

Inputs

• MaxDistance — Maximum Levenshtein distance between a newly registered domain root label and any brand in the Darkmon - Brand Names list for the NRD to be flagged as a typosquatting candidate. Defaults to 2. Lower (1) for stricter brand-protection, raise (3) for broader recall.

Outputs

• Typosquats — NRD entries flagged as typosquats with their best-match brand and distance.

Commands used

• dmontip-get-nrd