Question 1

What does the Phishing Radar tool check?

Accepted Answer

Phishing Radar scans for phishing sites, typosquat domains, and lookalike URLs targeting your domain. It detects newly registered domains that impersonate your brand, active phishing pages harvesting credentials from your employees or customers, and infrastructure (IPs, hosting providers) associated with phishing campaigns. The scan returns active threats ranked by risk level.

Question 2

How do attackers create convincing phishing sites?

Accepted Answer

Attackers clone legitimate websites using automated tools, then host copies on lookalike domains (e.g. paypa1.com, login-yourbank.com) or compromised legitimate sites. They obtain cheap or free SSL certificates to show the padlock, making victims believe the site is legitimate. Modern phishing kits can bypass MFA by relaying credentials in real time. Phishing Radar monitors newly registered domains and certificate transparency logs to detect these sites as soon as they appear.

Question 3

What should I do if Phishing Radar finds active phishing sites targeting my domain?

Accepted Answer

Immediately report identified phishing URLs to the hosting provider for takedown, submit them to Google Safe Browsing and Microsoft SmartScreen for browser-level blocking, notify your employees or customers if the phishing pages are targeting their credentials, and if credentials may have been captured, enforce a password reset for affected accounts. Document the infrastructure details (IP, hosting provider, registrar) for potential law enforcement reporting.

Question 4

How often should I run a phishing domain scan?

Accepted Answer

Phishing infrastructure is ephemeral — sites often go live and offline within 24–72 hours. Running a scan at least weekly helps catch active campaigns targeting your brand. During product launches, mergers, or high-profile events, increase frequency as these create additional phishing opportunities. Continuous monitoring through SOCRadar's platform provides real-time alerting rather than point-in-time scans.

Question 5

Is Phishing Radar free to use?

Accepted Answer

Yes. Phishing Radar is completely free and requires no account or registration. Enter your domain and receive a full phishing exposure report including detected lookalike domains, active phishing URLs, and risk indicators. Continuous automated monitoring with real-time alerts is available through the SOCRadar platform.