How nebty works

nebty runs the same cycle for every brand you protect: it finds impersonation, checks it, scores it, shows it to you, and helps you take it down.

1. Discover

nebty looks for impersonation in several places at once:

• New TLS certificates. Websites need a certificate, and certificates are logged publicly. nebty watches these logs for names that resemble your brand, often before the site goes live.
• Likely lookalike names. nebty generates names that someone could register to imitate your brand, and checks them across many domain endings.
• Search, social media and ads. Search results for your brand keywords, impersonation profiles on social networks and LinkedIn, and ads in the Meta Ad Library. Each of these channels has its own list in the dashboard.

2. Scan

Every domain is checked regularly: does it resolve, does it receive mail, does it answer with a website? Riskier domains are checked more often.

3. Assess

For domains that show a website, nebty takes a screenshot. An AI model compares it with your own website, and a second AI check reads the page. When the AI is unsure, a nebty analyst reviews the case.

4. Score

All this evidence becomes the Risk Score (0 to 10) and the AI Verdict of the domain. The high band is reserved for confirmed impersonation. See How the Risk Score works.

5. Review

You review the findings in the dashboard. Mark your own domains with This is us, flag false positives, and turn on Alerts for new results in Settings to hear about new or rising risks.

6. Take down

For a genuine threat, you request a takedown with one click. nebty’s analysts contact the registrar, host or platform and track the case until it closes. After it closes, nebty scans the domain again to confirm the result. See Request a takedown.

Next

• Product overview: the monitoring channels at a glance.
• Review your first finding.