Service
Website and app forensics
Fraudulent platforms are rarely built only once. We examine a site or application to determine who operates it, where it is hosted, how it is constructed, and which other properties share the same characteristics.
Open a caseReport in four to seven business days
What the work involves
- 01
Reconstruct domain registration and DNS history, including records that have since been changed.
- 02
Analyse hosting, TLS certificate issuance history and content delivery configuration.
- 03
Fingerprint the application: templates, analytics identifiers, third-party integrations and payment endpoints.
- 04
Pivot on shared identifiers to surface related properties run by the same operator.
- 05
Document intellectual property misuse where a legitimate brand has been cloned.
What this cannot do
Privacy services, offshore registrars and resilient hosting exist to frustrate this work. In some matters the accurate finding is that attribution stops at a service provider, and the useful outcome is a takedown rather than a name.
Typical matters
Identifying the operator of a fraudulent platform
Brand and trademark misuse
Phishing infrastructure targeting your customers
Establishing the scale of an operation before deciding whether to act
Also relevant