Skip to content
Cloudflare Docs

Brand Protection

Beta

Brand Protection gives you the ability to search for new domains that may be attempting to impersonate your brand. Common misspellings (cloudfalre.com) and concatenation of services (cloudflare-okta.com) are often registered by attackers to trick unsuspecting victims into submitting private information such as passwords. Our system allows you to save search queries that run continuously and alert you if any new domains match those queries.

To start searching for new domains that might be trying to impersonate your brand:

  1. Log in to your Cloudflare dashboard ↗ and select your account.

  2. Go to Security Center > Brand Protection.

  3. In String query, provide a name for your query. You can add multiple brand phrases on the same query, and the results will generate matches for all of those. Once you entered the string queries, select Search matches.

  4. In the Character distance, select from 0-3. The number of characters the results can differ from your domain.

  5. You can select Save query to monitor it in the future and perform other actions, such as delete, clone and set up alerts, according to your Paid plan limits.

  6. To export all matches from a saved query, select your Query name > select the three dots > Export matches.

In the section Monitor Strings, you can check all the string queries that you selected to monitor. You can delete, clone, or create notifications for a string query. Refer to Brand Protection Alerts to set up notifications.

Logo queries

To set up a new logo query:

  1. Go to Security Center > Monitor Logos and select Add logo.
  2. Add a name for your query and upload your logo. Only the .png, .jpeg, and .jpg file extensions are supported.
  3. Select Save logo.

The browser will return to the Monitor Images overview page, where you can access your query and configure notifications.

Investigate a query

In this section, the dashboard displays:

  • Domain overview.
  • WHOIS that provides details about the date the domain was created, registrant and nameservers.
  • Domain history that provides information on the domain category and when it was last changed. Refer to Investigate threats for more details.
  • URL Reports that provides information on any reported URL.

To investigate a string query:

  1. Go to the Monitor Strings or Monitor Logos section to view all your queries.
  2. Select a monitored query to inspect all the domains that matched your query.
  3. Next to the domain, select Domain or URL. This will trigger a search on the Investigate section in a separate tab. URL scanner will also be triggered from Brand Protection through Security Center > Investigate. You will also have access to a report which will be generated automatically. The report will display screenshots of the matched domain, and the registrar of your domain.

Brand Protection Alerts

Brand Protection works with Cloudflare’s ANS (Alerts Notification Service) to provide configurable alerts when new domains are detected.

Any matches that are found during the new domain search are then inserted into an internal alerts table which triggers an alert for the user. This allows you to receive real-time notifications and take immediate action to investigate and potentially block any suspicious domains that may be attempting to impersonate your brand.

Brand Protection Alerts

 Who is it for?

Customers who want a summary of activity related to Brand Protection.

Other options / filters

You can set up Brand Protection Alerts on individual monitored queries. For more details, refer to Brand Protection Alerts.

Included with

Professional plans or higher.

What should you do if you receive one?

Investigate and potentially block any suspicious domains that may be trying to impersonate your brand.

Brand Protection Digest

 Who is it for?

Customers who want a summary of activity related to Brand Protection.

Other options / filters

You can set up Brand Protection Digest on individual monitored queries. For more details, refer to Brand Protection Alerts.

Included with

Professional plans or higher.

What should you do if you receive one?

Investigate and potentially block any suspicious domains that may be trying to impersonate your brand.

Logo Match Alerts

 Who is it for?

Customers who want to receive a notification when the Brand Protection system detects a new domain which is using the uploaded logo and might be infringing copyright.

Other options / filters

You can select the query that you want to be alerted on.

Included with

Enterprise plans.

What should you do if you receive one?

Review the domains and URLs that are potentially impersonating your brand.

To set up a Brand Protection Alert:

  1. Go to Monitor Strings and locate the query for which you would like to create notifications.

  2. Select alerts. This should redirect you to the Add Notification page, where you can configure what you want to be notified about, and how.

  3. Create a notification name, add a description (optional), and select the monitored queries. You can also add a Webhook, and a notification email. You can add multiple email addresses.

  4. Select Save.

Manage your notifications in the All notifications tab. You can disable, edit, delete, or test them.

Limitations

  • While this product is in beta, all Enterprise customers and Cloudforce One subscribers have access to Brand Protection. Enterprise customers are entitled to one saved query per Enterprise zone on their account.
  • You may only use the Brand Protection search tools to search for domains that may be attempting to impersonate your brand or a brand that has authorized you to conduct such search on its behalf.