Detect reference
This page provides settings configuration and detailed matching algorithm specifications.
Settings
Section titled “Settings”Load the settings menu from the hamburger (≡) menu on the top left side of the web interface.
Changed domains timeframe
Section titled “Changed domains timeframe”Under General, edit the Changed Domains Timeframe setting to control the scope of the domains listed as changed.
Email alert configuration
Section titled “Email alert configuration”Under Alert Configuration, configure email updates for discovered domains. Set the frequency, level of detail, and other options like adding email recipients.
Matching algorithm details
Section titled “Matching algorithm details”This section provides detailed examples of each matching algorithm type. All examples use the hypothetical monitor term domaintools.
Variation exact matching algorithms
Section titled “Variation exact matching algorithms”Iris Detect applies variation exact matches to terms length 4 and greater. It creates specific variations of the term based on the following algorithms. All examples use the monitor term domaintools:
| Algorithm | Minimum term length | Description | Example domains |
|---|---|---|---|
| Affixes | 4 | Append country code TLDs, gTLDs, and common phishing affixes | domaintoolscn, Domaintools-account |
| Character Flips | 4 | Identify terms with bits/characters flipped to other keyboard characters (bitflips) | domaintoolq (s became q), domainvools (t became v) |
| Character Swaps | 4 | Identify terms with swapped adjacent characters | domiantools (a and i swapped), dmoaintools (o and m swapped) |
| Character Substitutions | 4 | Substitute ascii and/or unicode lookalike characters (leetspeak) | domaint00ls, Domaintoolz |
| Duplicate Character Reductions | 4 | Replace consecutive duplicate characters with a single character | domaintols (duplicated o removed) |
| Duplicate Characters | 4 | Identify duplicate characters | domainttools (t duplicated), dommaintools (m duplicated) |
| Homoglyphs | 4 | Identify domains registered using international character sets | Ԁomainτools (d and t internationalized), domaintools (o internationalized) |
| Homophones | 4 | Use common misspellings for words that sound similar | domanetools (main became mane), domaintulles (tools became tulles) |
| Hyphen Addition/Removals | 4 | Add a single hyphen or remove existing hyphens | domain-tools, Domaintool-s |
| Miskeyed Replacements/Additions | 4 | Swap characters with nearby keyboard characters that could be miskeyed | domainrools, domaintrools |
| Prefix + Suffix | 4 | Append and prepend common prefix and suffix combinations (circumfixes) | wwwdomaintoolscom, www-domaintools-com |
| Prefixes | 4 | Add common prefixes to your term | imagesdomaintool, Wwwdomaintools |
| Single Character Removals | 4 | Remove a single character | omaintools, Dmaintools |
| Substrings | 4 | Return results that have the term as a substring of the domain | secureaccountdomaintoolswebsite, Researchdomaintools |
| Suffixes | 4 | Affix common domain suffixes to your term | domaintoolscom, Domaintoolsnet |
Variation substring match examples
Section titled “Variation substring match examples”Examples of variation substring matches:
account-domaint00ls.com(character substitution variation with “00” is contained in the domain)domantoolsisgreat.com(single character removal variation is contained in the domain)secure-dommaintools.com(duplicate character variation is contained in the domain)