US 12,218,973 B2
Lookalike domain identification
Abigail Lauren Berger, Lakewood, CO (US); and Jos Dijkstra, Sunnyvale, CA (US)
Assigned to Proofpoint, Inc., Sunnyvale, CA (US)
Filed by Proofpoint, Inc., Sunnyvale, CA (US)
Filed on Jun. 7, 2022, as Appl. No. 17/805,796.
Claims priority of provisional application 63/208,434, filed on Jun. 8, 2021.
Prior Publication US 2022/0394060 A1, Dec. 8, 2022
Int. Cl. H04L 9/40 (2022.01); G06F 9/451 (2018.01)
CPC H04L 63/1491 (2013.01) [G06F 9/451 (2018.02)] 20 Claims
OG exemplary drawing
 
1. A computing platform, comprising:
at least one processor;
a communication interface communicatively coupled to the at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing platform to:
generate a plurality of lookalike domain names for an input domain name, wherein generating the plurality of lookalike domain names comprises removing, from the input domain name, one or more characters before generating the plurality of lookalike domain names;
generate, by applying a hash algorithm to the plurality of lookalike domain names, a dictionary index;
identify a first domain name;
identify, by performing a lookup function in the dictionary index using the first domain name, that the first domain name comprises a lookalike domain name corresponding to the input domain name; and
send, to a user device, one or more commands directing the user device to display a user interface that includes the lookalike domain name, wherein sending the one or more commands directing the user device to display the user interface causes the user device to display the user interface.