Platform

All-in-one
active defense feed pipeline

Domain protection, threat and email intelligence, and coordinated response in one platform built for security teams.

Get startedTalk to us

Domain protection

Your domains, protected

Catch malicious domains before they cause harm. Continuous monitoring, deep analysis, custom rules, and defensive registration keep your attack surface covered.

Domain monitoring

Continuous coverage with prioritised alerts when risky or abusive domains appear.

Defensive domain registrations

Register high-risk typos and TLD variants before adversaries do, with portfolio tracking and renewal guardrails built in.

Horizontally scrolling lookalike domain names.
exampzle.com exalmple.com examuple.com eqample.com examplde.com exampzle.com exalmple.com examuple.com eqample.com examplde.com exampzle.com exalmple.com examuple.com eqample.com examplde.com exampzle.com exalmple.com examuple.com eqample.com examplde.com
eqxample.com examplae.com euxample.com ecxample.com exampsle.com eqxample.com examplae.com euxample.com ecxample.com exampsle.com eqxample.com examplae.com euxample.com ecxample.com exampsle.com eqxample.com examplae.com euxample.com ecxample.com
exlample.com exampleo.com examprle.com exkample.com exbample.com exlample.com exampleo.com examprle.com exkample.com exbample.com exlample.com exampleo.com examprle.com exkample.com exbample.com exlample.com exampleo.com examprle.com exkample.com
exoample.com exaumple.com exampble.com examplue.com exa-mple.com exoample.com exaumple.com exampble.com examplue.com exa-mple.com exoample.com exaumple.com exampble.com examplue.com exa-mple.com exoample.com exaumple.com exampble.com examplue.com
examhple.com exgample.com exaxmple.com examople.com examtple.com examhple.com exgample.com exaxmple.com examople.com examtple.com examhple.com exgample.com exaxmple.com examople.com examtple.com examhple.com exgample.com exaxmple.com examople.com
ezxample.com exabmple.com exampl0e.com exampl8e.com ezxample.com exabmple.com exampl0e.com exampl8e.com ezxample.com exabmple.com exampl0e.com exampl8e.com ezxample.com exabmple.com exampl0e.com exampl8e.com ezxample.com exabmple.com exampl0e.com

Deep analysis

DNS, certificates, and infrastructure signals in context so you can decide fast.

Rules & alerts

Define custom rules and receive instant alerts for critical domain events.

Reports & integrations

Export evidence and summaries for stakeholders, and connect monitoring to the rest of your stack via API.

Threat intelligence

Deep insights across every signal

Comprehensive data collection and analysis to uncover threats hiding in plain sight.

Horizontally scrolling rule engine field names.
permutation dns_ns favicon.url sitemap.broken_link.target_url business_intel.source_urls redirect_chain.kind registration_metadata.registrar_iana_id domain_status.status origin_x509.issuer_dn origin_x509.is_ca certificate_transparency.last_seen_ts
kind dns_mx favicon.content_type sitemap.broken_link.link_text business_intel.company_name_count classification.phishing registration_metadata.registrar_abuse_contact domain_status.tags origin_x509.fingerprint_sha256 origin_x509.path_len certificate_transparency.labels.tld
created_on dns_caa favicon.sha256 sitemap.broken_link.status_code business_intel.phone_number_count classification.malware registration_metadata.status_codes domain_status.zone origin_x509.serial origin_x509.policy_oids certificate_transparency.labels.etld1
levenshtein_distance dns_tlsa favicon.dhash sitemap.broken_link_count business_intel.address_count classification.impersonation registration_metadata.url domain_status.scope origin_x509.not_before origin_x509.ocsp_uris certificate_transparency.labels.domain
tags dns_srv sitemap.url sitemap.external_link.target_host business_intel.source_url_count geolocation.asn.number registration_metadata.server page_rank.domain origin_x509.not_after origin_x509.crl_dp certificate_transparency.labels.registrable_domain
metadata.origin dns_naptr sitemap.title sitemap.external_link.target_url ports.port geolocation.asn.name registration_metadata.nameservers page_rank.status_code origin_x509.san_dns redirect_chain.certificate.issuer certificate_transparency.labels.subdomain
metadata.sources.kind dns_ptr sitemap.status_code sitemap.external_link.link_text ports.address geolocation.country registration_metadata.dnssec_status page_rank.error origin_x509.san_dns_count redirect_chain.certificate.subject_name screenshot_url
metadata.sources.provider dns_dnskey sitemap.depth sitemap.external_link.source_host ports.finding_count geolocation.continent registration_metadata.delegation_signer page_rank.page_rank_integer origin_x509.san_ip certificate_transparency.name whois
dns_a dns_ds sitemap.parent_url sitemap.external_link_count ports.unique_port_count registration_metadata.registration_date registration_metadata.privacy_proxy page_rank.page_rank_decimal origin_x509.ttl_days certificate_transparency.is_precert
dns_aaaa smtp sitemap.entry_count business_intel.company_names ports.unique_address_count registration_metadata.expiration_date registration_metadata.icann_complaint_link page_rank.rank origin_x509.key_alg certificate_transparency.log_id
dns_cname http_banner sitemap.broken_link.kind business_intel.phone_numbers redirect_chain.url registration_metadata.updated_on registration_metadata.reseller page_rank.last_updated origin_x509.key_size_bits certificate_transparency.index
dns_txt technologies sitemap.broken_link.page_url business_intel.addresses redirect_chain.status registration_metadata.registrar domain_status.domain origin_x509.subject_dn origin_x509.sig_alg_oid certificate_transparency.occurrences_count

Email Intelligence

Connect Microsoft 365 and Google Workspace via APIs directly into the tenant mail environment. Correlate sender domains with domain risk scoring, enforce blocks from known malicious senders, and close the loop from inbox to infrastructure. No mail routing or MX record changes; deployable in minutes.

Screenshots & live interaction

Automatic screenshots capture visual evidence, and a live, isolated browser session allows risk-free inspection of malicious sites.

Certificate Transparency

Trace certificate issuance over time with transparency logs and full history on every lookup you run.

GeoIP & ASN data

See ASN, hosting provider, and geography together so infrastructure context never lives in a silo.

Port scanning

Map listening services and open ports next to DNS and TLS so attack surface stays in one place.

Website crawling

Crawl rendered pages, links, and site structure so you see what visitors experience end to end.

Business intelligence

Layer org context and enrichment signals so credible impersonation stands apart from routine noise.

Takedown & response

Disrupt abuse from detection to resolution

Coordinate takedowns with clear evidence, extend protection into the browser, and keep abuse workflows auditable end to end.

Takedowns

Request and coordinate takedowns with clear evidence, from registrars and hosts through to escalation when you need it.

Browser protection

Coming soon

Warn users when they reach lookalike or flagged domains in the browser, with policy controls your security team can tune.

Abuse center

Coming soon

Centralize abuse reporting, evidence, and registrar or host outreach so takedown workflows stay auditable from first notice to resolution.

Fortify your brand security today

Join cybersecurity professionals who trust Have I Been Squatted to protect their brands from threats.

Get started now