Site clone detection
Add one script line to your site and learn when someone copies a page and opens it on another domain. The signal can be forged, so we alert only after opening that page ourselves.
The fake sites in the texts and emails your customers receive usually start as a new domain with your company or service name in it. DechoNet finds those domains when their certificate is issued, opens their front page itself, alerts you as soon as one poses as your brand and prepares what you need to report it.
We watch certificate issuance (CT logs) and also look at newly registered domains, spelling variants and public phishing lists for domains carrying your brand name or service keywords. Up to 5 brands, each with several Korean and English names and keywords.
We open the front page of up to 50 found domains per brand a day and mark whether it poses as your brand and asks for sign-in or payment details, only shares the name, or does not load. The reading of the page is an AI opinion for reference; whether a domain is yours is decided by the domains you have verified.
When impersonation is confirmed or DechoNet judges a domain dangerous, you hear within an hour instead of the next day, by email and by webhook if you set one. Everything else comes in one daily summary.
For each domain we gather the registrar and hosting abuse contacts and draft a report in Korean and English. The front-page result, the reasons for the verdict, registration and hosting details and the observation record hashes download as one file to attach.
Mark a report as sent and we keep checking the domain until it actually goes down, recording how long it took.
Domains found, confirmed and reported in the month, time to takedown, what is still up and a six-month trend, ready to print or save as PDF.
Add one script line to your site and learn when someone copies a page and opens it on another domain. The signal can be forged, so we alert only after opening that page ourselves.
A page under your company name where customers check whether a link in a text is really yours. Only your verified domains count as official, and your company name and address are published after review.
Domains you confirm as impersonation are stored as dangerous in DechoNet’s verdict store, so everyone using the phishing link check, link check pages or the MCP connection gets the same warning. You can confirm only domains DechoNet saw posing as your brand or judged dangerous.
Until payments open, it starts as a trial: ask and we turn brand protection on for your account.