GhostNet AI — Phishing & Impersonation Detector

GhostNet AI is an autonomous threat intelligence system built for security and brand protection teams. Every day, attackers register typosquatted domains, clone legitimate websites, and create fake social media profiles to defraud customers and steal credentials — and most companies only discover this after the damage is done. GhostNet AI flips that timeline. Given a company's brand name, official domain, and social handles, the system automatically deploys a multi-stage detection pipeline powered by Bright Data's live web infrastructure. First, the SERP API runs targeted searches across Google and Bing — queries like "[brand] login", "[brand] customer support", and "[brand] official site" — surfacing results that do not belong to the real company. Second, the Web Unlocker accesses social platforms and domain registrar data to identify fake profiles and typosquatted domain variations (character swaps, added words, homoglyph substitutions). Third, the Scraping Browser captures full-page screenshots of each suspicious URL as timestamped evidence. Every detected threat is passed to Claude, which scores it on threat type (phishing, fraud, brand dilution), confidence level, and urgency. Claude then auto-drafts a takedown report per threat — including the evidence screenshot, the relevant abuse contact or registrar email, and a ready-to-send cease-and-desist notice. The result is a live threat dashboard that any security or legal team can act on immediately, turning a process that previously took days of manual searching into a sub-two-minute automated workflow. GhostNet AI is built for the Security and Compliance track, addressing the real enterprise problem of brand impersonation at scale — with live web data as its core intelligence layer.