Details

1. 'Brand Impersonation' changes

We've added a Brand Impersonation option in the left-hand menu, which holds the existing Domain Impersonation query plus three new queries:

• Email Impersonation
• HTML Title Impersonation
• Favicon Impersonation

Email Impersonation

• Brand Impersonation > Email Impersonation

This feature enables customers to find newly seen domains that are used to target organisations using MX records.

The recipe sorts results by risk score, and displays the MX server density, as well as the WHOIS create date of the domain if available.

HTML Title Impersonation

• Brand Impersonation > HTML Title Impersonation

This feature performs a Live Scan to get a domain's HTML title, and locates impersonation domains that are using that title.

Favicon Impersonation

• Brand Impersonation > Favicon Impersonation

This feature performs a Live Scan to get a domain's favicon and locates impersonation domains using that favicon.

2. Web Scanner Enhancements

Enhanced query operators

We've added new operators to the Operator dropdown in the Simple Search tab:

• 'Contains'
• 'Starts with'
• 'Ends with'
• 'One of'

SPQL field descriptions

A description of each SPQL field is now displayed in the Field Name dropdown, along with a tooltip.

New slide-in sections

We've added a My Searches button on the right-hand side of Web Scanner, that contains recent and saved searches, along with some example searches.

Add to feed/collection

Users are now able to add Web Scanner results to a new or existing feed or collection.

3. Live Scan Enhancements

Advanced Scan

• Live Scan > Advanced Scan

Live Scan now has an Advanced Scan option that allows users to emulate a scan using 4 top-level parameters:

• 'Region'
  • US
  • EU
  • AS
• 'User Agent'
  • Desktop
  • Mobile
  • Crawler
• 'OS'
  • Windows
  • Linux
  • MacOS
  • iOS
  • Android
• 'Browser'
  • Firefox
  • Chrome
  • Edge
  • Safari

Dark Web Scan

• Live Scan > Dark Web Scan

We've added a Dark Web Scan tab to the Live Scan screen, that allows users to perform a scan using a .onion URL.

Additional context to result highlights

We've re-factored the Live Scan results page to display a Highlights section at the top, containing various key pieces of information (ASN details, risk scores etc.), a screenshot of the URL, and any feeds that the scanned domain or IP is listed in.

Sharing scan results

We've added a series of buttons that allow users to share Live Scan results on social media.

Pivot from all results

Users are now able to left-click any blue text from within the Live Scan results screen, to open up a contextual menu that adds the result to a Web Scanner query.

Adding results to a feed

Users are now be able to add Live Scan results to a new or existing feed or collection

4. 'Quick Search' menu

A new left-hand Quick Search menu has been added that allows users to search through menu options, including the Advanced Query Builder section

5. IOFA Feed tag support

Each feed on the IOFA Feeds menu now shows the tags associated with that feeds. Users are also able to filter the screen using a Filter By Tags drop-down menu.