Darkmon - Brand-Targeted NRD Watch

Daily sweep of newly-registered domains. Each candidate's root label is compared against the brand list via DarkmonLevenshtein; matches with distance <= 2 (configurable) open a 'Darkmon Typosquatting Threat' incident.

Darkmon · 9 tasks · 1 input · 1 output

Inputs

  • MaxDistance — Maximum Levenshtein distance between a newly registered domain root label and any brand in the Darkmon - Brand Names list for the NRD to be flagged as a typosquatting candidate. Defaults to 2. Lower (1) for stricter brand-protection, raise (3) for broader recall.

Outputs

  • Typosquats — NRD entries flagged as typosquats with their best-match brand and distance.

Commands used

dmontip-get-nrd

Flowchart

yes Start Start Fetch newly registered domains - dmontip-get-nrd Fetch newly registered do... dmontip-get-nrd Score each NRD against the brand list - DarkmonScoreNRDs Score each NRD against th... DarkmonScoreNRDs Filter unseen typosquats - DarkmonFilterUnseen Filter unseen typosquats DarkmonFilterUnseen Open typosquatting incidents - DarkmonCreateIncidents Open typosquatting incidents DarkmonCreateIncidents Notify brand-protection team - Darkmon - Generic Notify Notify brand-protection team Darkmon - Generic Notify Done Done Is Darkmon integration available? - IsIntegrationAvailable Is Darkmon integration av... IsIntegrationAvailable Done Done