Stronghold WP

Domain Watch

Watches addresses similar to yours that someone could use to impersonate you (phishing).

What it looks like

A look-alike domain with a password field and your institution’s name goes to the top of the list in red.
A look-alike domain with a password field and your institution’s name goes to the top of the list in red.
The alert e-mail: what we found and what to do — report it to the registrar, the hosting company and CERT, and warn your users.
The alert e-mail: what we found and what to do — report it to the registrar, the hosting company and CERT, and warn your users.

Screenshots from a test installation with sample data.

What it does

  • Builds similar addresses on its own: other endings, typos and look-alike characters
  • Your own list of up to 500 domains with priorities, also from a spreadsheet
  • Notices a similar domain being registered, a new certificate and a site going live
  • Recognises your marks and a password field on someone else’s site
  • Checks again before sending an alert — no false alarms
  • E-mail alert with advice on what to do and where to report it
  • Once a day it rates your domain’s e-mail setup (SPF, DMARC) and gives ready-made records to enter

Specification

Version1.3.10
RequiresWordPress 6.4+ · PHP 8.1+ · Stronghold WP 1.4.0+
ServerDNS queries and HTTPS connections from the server; WordPress scheduler (WP-Cron)
Who changes the settingstechnical caretaker; other administrators — view only
External connectionspublic certificate registers and DNS; one fetch of a suspicious domain’s home page — only once enabled
Datasettings, domain list and log in the WordPress database
Dashboard languagesPolish, Ukrainian, English
Updatestogether with Stronghold WP, from the update channel
Request access
All add-ons