# DomainGuard > 24/7 domain and brand monitoring with rapid takedowns. DomainGuard detects lookalike domains, phishing infrastructure, and brand abuse so security teams can respond before customers are deceived. DomainGuard is a B2B cybersecurity platform combining managed external monitoring (Owl, Shield, Guardian, and an API integration) with security consulting (penetration testing, application security, social engineering and dark-web research, cloud assessment, detection-coverage validation, and retainer advisory). Founded by industry practitioners; the platform serves enterprises that operate high-value brands, domains, or trademarks. ## Solutions - [Owl](https://guardyourdomain.com/solution/owl/): Core domain monitoring. Continuous detection of lookalike domains, automated phishing site takedowns, and certificate transparency tracking. - [Shield](https://guardyourdomain.com/solution/shield/): Brand and identity surface. Detects impersonation across app stores, social media, search ads, the dark web, and key-employee accounts. - [Guardian](https://guardyourdomain.com/solution/guardian/): External attack-surface monitoring. Continuous discovery and alerting on internet-facing assets including subdomains, exposed services, certificates, and tech stack. - [API Integration](https://guardyourdomain.com/solution/api-integration/): Programmatic access to DomainGuard threat intelligence for SOAR, SIEM, and custom tooling. ## Consulting - [Penetration Testing](https://guardyourdomain.com/consulting/penetration-testing/): External, internal, and gray-box network and infrastructure testing. - [Application Security](https://guardyourdomain.com/consulting/application-security/): Web, mobile, and API application security assessments. - [Social Engineering and Dark Web](https://guardyourdomain.com/consulting/social-engineering-dark-web/): Phishing simulations, vishing, and dark-web exposure research. - [Cloud Assessment](https://guardyourdomain.com/consulting/cloud-assessment/): Configuration and architecture review for major cloud providers. - [DetectCheck](https://guardyourdomain.com/consulting/detectcheck/): Detection-coverage and logging validation engagements. - [Retainer Services](https://guardyourdomain.com/consulting/retainer-services/): Prepaid security advisory hours. ## Threats - [Lookalike domains](https://guardyourdomain.com/threats/lookalike-domains/): The foundational technique: typosquatting, homoglyphs, combosquatting, and doppelganger domains, how attackers weaponize them, and how to detect and stop them during the staging window. - [Freemail phishing](https://guardyourdomain.com/threats/freemail-phishing/): Registering a free Gmail username shaped like a company's domain, so the sender reads as yourcompany.com@gmail.com, plus the wider use of free or compromised webmail accounts to run business email compromise. Leaves no domain to register, monitor, or take down, and passes gmail.com email authentication so the impersonated company's own DMARC never applies. - [Fake Cloudflare verification](https://guardyourdomain.com/threats/fake-cloudflare-verification/): A ClickFix-family lure dressed as a Cloudflare bot-check; walks the victim through pasting an attacker-supplied command into PowerShell or the macOS Terminal, which then downloads and runs a hidden binary. Covers how to tell the fake check from a real one and what to do if the command was already run. - [Google Ads phishing](https://guardyourdomain.com/threats/google-ads-phishing/): Buying paid-search ads on brand keywords to outrank the legitimate site and route the click to a lookalike phishing page. Documented since 2008, still widely abused. - [T-Mobile SMS Phishing (Smishing)](https://guardyourdomain.com/threats/t-mobile-smishing/): Technical breakdown of a real-time OTP and credit card harvesting kit. - [ClickFix BSOD (Fake Blue Screen of Death)](https://guardyourdomain.com/threats/clickfix-bsod/): Analysis of high-pressure social engineering using MSBuild proxy execution. - [Malicious AI Chrome Extensions (Prompt Poaching)](https://guardyourdomain.com/threats/malicious-chrome-extensions/): Technical breakdown of DOM scraping and prompt exfiltration by deceptive browser extensions. ## Threat research and guides - [How to take down a phishing site](https://guardyourdomain.com/blog/phishing-site-takedown/): Step-by-step guide covering ICANN/WhoIs lookups, registrar abuse reports, hosting-provider reports (including Cloudflare-proxied sites), and Google Safe Browsing, APWG, and SmartScreen reporting. Free, takes about 15 minutes. - [Trends in phishing and fraud](https://guardyourdomain.com/blog/trends-in-phishing-fraud/): Industry trend analysis from DomainGuard takedown data. - [DNS danger zone](https://guardyourdomain.com/blog/dns-danger-zone/): Risks and abuse patterns rooted in DNS misconfiguration and stale records. - [Video call platforms as scammer tools](https://guardyourdomain.com/blog/video-call-platforms-are-scammer-tools/): How threat actors weaponize free Zoom, Webex, and Teams accounts to run fake job interviews. - [Catching threats at inception](https://guardyourdomain.com/blog/catching-threats-at-inception/): Why early detection beats post-incident response. - [Fake university scam](https://guardyourdomain.com/blog/fake-university-scam/): Investigation of a ring of 18 fake universities on .education and .university domains, a checklist for verifying whether a university website is real, and the full list of identified domains. - [NFT support scam](https://guardyourdomain.com/blog/nft-support-scam-nftishing/): Case study of NFT marketplace impersonation. - [Vishing scam with deepfakes](https://guardyourdomain.com/blog/vishing-scam-deepfakes/): Voice-based social engineering using AI-generated audio. - [FOSS domain monitoring tooling](https://guardyourdomain.com/blog/foss-domain-monitoring/): DomainGuard open-source contributions and tooling notes. - [What the Helm](https://guardyourdomain.com/blog/what-the-helm/): Deployment and security notes from working with Helm. ## About - [About DomainGuard](https://guardyourdomain.com/about/): Leadership, mission, and approach. - [Contact](https://guardyourdomain.com/contact/): Reach the team for product demos, takedowns, or consulting engagements. ## Optional - [Blog index](https://guardyourdomain.com/blog/): All threat research and guides. - [RSS feed](https://guardyourdomain.com/blog/index.xml) - [Sitemap](https://guardyourdomain.com/sitemap.xml)