Catch Lookalike Typosquat Domains with Bright Data, GPT & Slack

Catch lookalike typosquat domains before they impersonate your brand—automatically

This n8n workflow runs every morning to discover likely typo-squatted and lookalike domains, verifies what’s live using Bright Data Web Unlocker, judges the pages with OpenAI (GPT-5.6), and posts only meaningful updates to Slack.

What this workflow does

• Daily scheduled discovery (07:00): the workflow starts every day at 07:00 on a schedule.
• Generates lookalike candidates: creates a capped list of candidates from your brand name (typos, homoglyphs, hyphens, keyword suffixes, and alternate TLDs), then builds a Google query.
• Finds additional candidates via Bright Data SERP: uses Bright Data SERP to pull Google results, filters out major platforms and non-brand-like hosts, and appends new candidate domains.
• Tracks history in an n8n Data Table: reads the previous sweep, adds your real domain as a reference row, and prepares each candidate with prior state and verdict.
• Verifies live status with Bright Data Web Unlocker: fetches the real domain and each candidate, classifying domains as unregistered, parked, live, or serving your own pages (based on response size and content similarity).
• Uses OpenAI GPT-5.6 to extract evidence-backed verdicts: for live, non-mirroring pages, GPT-5.6 determines whether content meaningfully impersonates your brand.
• Updates results and notifies only changes: compares new verdicts to the prior sweep, upserts the latest results into the Data Table, and sends a single consolidated Slack message covering impersonating domains, mirror-like domains, and cleared cases.

Use cases

• SaaS brand protection teams monitoring new typosquat registrations and phishing-like “brand copy” pages.
• Automation engineers building domain risk detection pipelines in n8n.
• Security-minded operators who want daily, evidence-backed findings with minimal alert fatigue.

Technical details

• Integrations: Bright Data SERP, Bright Data Web Unlocker, OpenAI GPT-5.6, Slack, n8n Data Table.
• Workflow nodes: if, set, code, no op, merge, slack.