Lookalike domains — catching brand impersonation

Signals

· New CT certs on name variants

· Freshly registered DNS

· Landing cloning branding

Response: documentation, registrar abuse, SPF/DMARC hardening — not vigilante action.