Details
1. 'Brand Impersonation' changes
We've added a Brand Impersonation option in the left-hand menu, which holds the existing Domain Impersonation query plus three new queries:
- Email Impersonation
- HTML Title Impersonation
- Favicon Impersonation
Email Impersonation
- Brand Impersonation > Email Impersonation
This feature enables customers to find newly seen domains that are used to target organisations using MX records.
The recipe sorts results by risk score, and displays the MX server density, as well as the WHOIS create date of the domain if available.
HTML Title Impersonation
- Brand Impersonation > HTML Title Impersonation
This feature performs a Live Scan to get a domain's HTML title, and locates impersonation domains that are using that title.
Favicon Impersonation
- Brand Impersonation > Favicon Impersonation
This feature performs a Live Scan to get a domain's favicon and locates impersonation domains using that favicon.
2. Web Scanner Enhancements
Enhanced query operators
We've added new operators to the Operator dropdown in the Simple Search tab:
- 'Contains'
- 'Starts with'
- 'Ends with'
- 'One of'
SPQL field descriptions
A description of each SPQL field is now displayed in the Field Name dropdown, along with a tooltip.
New slide-in sections
We've added a My Searches button on the right-hand side of Web Scanner, that contains recent and saved searches, along with some example searches.
Add to feed/collection
Users are now able to add Web Scanner results to a new or existing feed or collection.
3. Live Scan Enhancements
Advanced Scan
- Live Scan > Advanced Scan
Live Scan now has an Advanced Scan option that allows users to emulate a scan using 4 top-level parameters:
- 'Region'
- US
- EU
- AS
- 'User Agent'
- Desktop
- Mobile
- Crawler
- 'OS'
- Windows
- Linux
- MacOS
- iOS
- Android
- 'Browser'
- Firefox
- Chrome
- Edge
- Safari
Dark Web Scan
- Live Scan > Dark Web Scan
We've added a Dark Web Scan tab to the Live Scan screen, that allows users to perform a scan using a .onion URL.
Additional context to result highlights
We've re-factored the Live Scan results page to display a Highlights section at the top, containing various key pieces of information (ASN details, risk scores etc.), a screenshot of the URL, and any feeds that the scanned domain or IP is listed in.
Sharing scan results
We've added a series of buttons that allow users to share Live Scan results on social media.
Pivot from all results
Users are now able to left-click any blue text from within the Live Scan results screen, to open up a contextual menu that adds the result to a Web Scanner query.
Adding results to a feed
Users are now be able to add Live Scan results to a new or existing feed or collection
4. 'Quick Search' menu
A new left-hand Quick Search menu has been added that allows users to search through menu options, including the Advanced Query Builder section
5. IOFA Feed tag support
Each feed on the IOFA Feeds menu now shows the tags associated with that feeds. Users are also able to filter the screen using a Filter By Tags drop-down menu.