Skip to content

Domain Monitoring

Domain Monitoring finds look-alike and fraudulent domains that trade on your brand, from typosquats to new registrations that copy your name. It lives on the Domains tab of a brand in nebty.

The Domain Monitoring table listing domains with their Risk Score, AI Verdict and status

Every domain nebty finds appears as a row with:

  • Domain: the domain name itself.
  • Risk Score: 1 to 10, with Low (1 to 3), Medium (4 to 7), and High (8 to 10) bands.
  • AI Verdict: Suspicious, Benign, or Unknown.
  • HTTP status: whether the site currently resolves and responds.
  • Takedown badge: shows if a Takedown is already open for that domain.

The table is sortable and filterable, so you can bring the highest-risk domains to the top or narrow the list down to a single status. You can also select multiple rows at once and bulk-mark them as This is us or flag them, instead of working through domains one at a time.

Opening a domain takes you to its detail view, with three tabs:

  • Overview: the Risk Score, AI Verdict, and when the domain was first detected.
  • DNS: the domain’s DNS records.
  • History: how the domain’s scans have changed over time.

The detail view also includes an Inspect action, a live preview of what the site currently shows, and a Request Takedown action for when you have decided the domain is a genuine threat. In the public demo, Inspect returns a placeholder image rather than a live capture; on a real brand it fetches a current screenshot of the site.

A high-risk domain detail view for a look-alike login page
Open a domain detail in the demo(opens the public demo with sample data)

A high Risk Score combined with a Suspicious AI Verdict is the clearest signal that a domain deserves your attention. From there:

  • This is us: the domain is yours. nebty excludes it from monitoring.
  • Flag as False Positive: the AI Verdict looks wrong; this is not impersonation.
  • Request Takedown: open the domain detail and use this action once you have decided it is genuine impersonation.
Open Domain Monitoring in the demo(opens the public demo with sample data)