Media and Publishing
The Name Is the Asset in Media and Publishing.
News organizations, publishers and broadcasters trade on trust in a name. A lookalike site carrying fabricated stories, a fake subscription page or a spoofed journal borrows that trust at no cost.
The Deepinfo Platform watches for domains that imitate your mastheads, follows the leaked credentials of the people you flag and keeps all your microsites in one inventory.
- Asset discovery: next door, a title the publisher acquired, in its own townhouse, its domain never listed: gazette.example, not in inventory.
- Continuous scanning: on the newsroom’s roof, the live feed’s uplink, a port open that was shut at the last scan: live.news.example, 8443/tcp newly open, high, caught between two scans.
- Risk detection: through the window right of the door, the subscription desk’s payment page: subscribe.news.example, certificate expired, high.
- Risk scoring: through the window left of the door, the server that hosts the journal microsites: journals.news.example runs Apache httpd 2.4.49: CVE-2021-41773, CVSS 9.8, listed in CISA KEV, critical.
- Cyber Threat Intelligence: on the newsroom’s upper floor, an editor’s infected laptop: cms.news.example login, in an infostealer log.
- Brand Risk Protection: on the pavement, a subscription stand that is not yours: news-subscribe.example, lookalike · contains.
- Third-Party Risk Management: past the street lamp, a distribution partner’s van and an advertising partner’s billboard, drawn dashed because they are not yours: logistics-co.example, graded B; marketing-agency.example, graded B, each linked to news.example.
The Exposures Behind Every Masthead.
The name
Worth Imitating
Lookalike outlets, fake subscription and login pages, and predatory journals that copy real titles. Each borrows credibility the original spent years building.
The people
Public by Profession
Journalists, editors and executives work under their own names in public. Their accounts and passwords turn up in breach data and infostealer logs.
The sprawl
Microsites That Never Retire
Titles, shows and campaigns each get a site, and acquired titles bring their own. Few of them are ever switched off.
Find the Lookalike Outlet by Its Address.
Brand Risk Protection matches newly seen domains against your mastheads and titles, down to swapped-in letters from other alphabets. Each suspicious domain stays under watch across DNS, mail, certificate and HTTP, so your team sees when a parked name becomes a live site. Below, one name and what each match type catches.
-
news.example
-
news.test
-
news-login.example
-
nevvs.example, v + v for w
-
nesw-verify.example, swapped “ws”
-
ոews.example, U+0578 ARMENIAN SMALL LETTER VO
resolves as xn--ews-nfe.example
-
ոews-login.example, U+0578 ARMENIAN SMALL LETTER VO
resolves as xn--ews-login-pnk.example
-
nеsw.example, swapped “ws” · U+0435 CYRILLIC SMALL LETTER IE
resolves as xn--nsw-rdd.example
-
secure-nеsw.example, swapped “ws” · U+0435 CYRILLIC SMALL LETTER IE
resolves as xn--secure-nsw-rsi.example
Put the Newsroom’s Exposure on One List.
Executive Threat Monitoring points what Cyber Threat Intelligence collects at the people you flag. In a newsroom, that list usually includes editors and reporters as well as executives.
-
01
Find
Cyber Threat Intelligence lists the accounts on your domains found in breaches and leaked credential data.
-
02
Flag
Mark the editors, reporters and executives among them, so their exposure becomes its own list.
-
03
Filter
Filter by the flag, by title or by department, and read it next to dark web mentions of the names you monitor.
-
04
Close
Work each leaked credential to a recorded state: resolved, risk accepted, ignored or false positive.
Workflows for a Newsroom.
Brand Impersonation Protection
Mastheads and titles watched together.
Phishing Detection and Prevention
Fake subscription, login and payment domains caught when they first appear.
Executive Threat Protection
The exposure of editors, reporters and executives, followed as its own list.
Managed Takedown Services
Removal requests filed with registrars and hosts, with the evidence attached.
Attack Surface Management
Each title’s microsite, and the infrastructure acquired titles bring, in one inventory.
Domain Intelligence and Research
Networks of fake outlets traced through shared IP addresses, name servers and same-time registrations.
Incident Investigation and Response
The infrastructure behind a campaign, traced through the index while it is running.
Third-Party Risk Management
Distribution, streaming and advertising partners scored with the model used for your surface.
The Data Is Yours to Use Too
The index under the platform is also sold as data. Teams that build their own tooling query it through the API or take it as bulk feeds, and Internet Insights shows what it sees each day.
Questions About Deepinfo in Media and Publishing
Can the platform find fake versions of our outlet?
Brand Risk Protection finds the domains behind them. It matches newly seen domains against your mastheads and titles, watches each suspicious one across DNS, mail, certificate and HTTP, and sends confirmed ones to Managed Takedown.
Can rules find fake outlets that already exist?
Yes. Turn on include_ and a new rule also runs against domains registered before it existed, so the first review covers lookalikes registered before you started.
How do we keep our own titles out of the results?
List their domains as ignored domains in the brand protection settings. A name on that list is never reported, whichever rule matches it.
Can we cover journalists, not only executives?
Yes. Any account on your domains can carry the flag, so editors and reporters are followed alongside executives, with their breached accounts and leaked credentials as a list of their own.
Can we trace a network of fake outlets?
Start from one known fake domain. Deep Search & Insights finds the domains that share its IP address, name servers or mail servers, and the ones the same registrant registered within minutes of it. Each pivot is a single query against the index.
See Who’s Publishing Under Your Name.
Book a demo scoped to your mastheads and titles.