Rebuilding the Brand Catalog
Our brand catalog brings together suspected impersonation found in public scans, with a page for each brand and links to the scans behind its detections. We've rebuilt it to make the evidence clearer, the listings fairer, and the data easier to explore.
How we detect brand phishing
Each scan can collect thousands of data points across network requests, scripts, forms, cookies, and page text. The total depends on what the website loads.
Brand attribution currently uses five evidence types: page titles, screenshot text, site icons (favicons), AI findings, and matches to previously attributed pages. Each draws on multiple observations, so the number of individual data points used varies by scan.
We check these against domain ownership and phishing clues, including credential forms, suspicious URLs, and known kits. AI analysis helps assess the page's claimed identity and what it asks visitors to do.
Clearer decisions about what gets listed
A brand name appearing on a website does not, by itself, prove impersonation. The catalog withholds a host from a brand's page when both our rule engine and AI analysis rate it harmless. Each brand page discloses how many hosts were withheld and why.
When the engines disagree, both verdicts remain visible. A low-risk rule verdict can sit alongside an AI finding of a phishing page, so readers can inspect the scan and judge the evidence.
Evidence you can check
Each listing shows why the brand matched, both verdicts, and the scan behind them. We label weaker matches so their limits are visible.
Every row also has a Report as wrong link with the host, brand, and scan already attached, making it easier to flag an incorrect listing.
Easier to browse and use
The gallery now opens with brands that have detections. Search, sector filters, sorting, and pagination help you find relevant results, and brand pages let you browse beyond the old 100-host limit. CSV downloads, JSON exports, and daily detection timelines make the data available for your own analysis.
Explore a few brands
- Microsoft and DocuSign: sign-in and shared-document lures targeting work accounts.
- MetaMask and Trust Wallet: wallet impersonation targeting crypto users.
- Facebook: fake support and account-security pages.
- Roblox: login lures targeting gaming accounts.
Open the brand catalog for current counts and recent detections. If a listing looks wrong, use its report link so we can review the scan.