Module · XICTRAQ

Competitor tracking & brand protection

Typosquat detection, comprehensive competitor tracking with 22 scan sections and blacklist monitoring. See when someone impersonates your brand or a competitor changes something.

from Business plan

Start 14-day free trial Live demo

No credit card Servers in Germany 3 EU probe nodes 14-day pro trial GDPR compliant

Live status

Competitor tracking & brand protection

ACTIVE

Typosquat detection

Up to 200 domain variants per brand from nine techniques (TLD swap, character transposition, dropped characters, adjacent-key typos, hyphen, homoglyphs, bitflips, prefixes and suffixes) plus daily registry checks via RDAP.

Registration detection

As soon as a variant is registered (DNS A record active), you receive an alert. Your own domains can be marked as legitimate and excluded from warnings.

Competitor tracking (22 sections)

Add manually by URL or auto-discover via industry + postal code (OpenStreetMap). 22 scan sections: uptime, SSL, security headers, SEO, GDPR, tech stack, OG tags, content changes, careers detector, messaging shift, Core Web Vitals, accessibility, ad detection, page weight, email infrastructure and more. Auto-scans with change alerts.

Leaderboard & heatmap

3 dashboard tabs (dashboard, compare, changes) with trends, leaderboard and activity heatmap. Sort by security, performance, GDPR or accessibility. Printable benchmark report (can be saved as PDF) and CSV export.

Last check just now

What it does

Your domain is an asset -- and attackers know it. Typosquatters register variants of your domain name to send phishing emails or intercept traffic. Meanwhile, your competitors change prices, positioning and technologies daily without you noticing. XICTRAQ covers both: we auto-generate up to 200 typosquat variants per brand and scan them for phishing patterns. In parallel we monitor your competitors with 22 scan sections -- from uptime, SSL and security headers through SEO, GDPR, tech stack to careers detector, ad detection and email infrastructure. Competitors can be added manually by URL or auto-discovered via industry + postal code (OpenStreetMap). Auto-scans run at plan-dependent intervals (Agency every 6 hours), changes arrive as a daily digest by email and on your channels. 3 dashboard tabs (dashboard, compare, changes) with trends, leaderboard and activity heatmap plus a printable benchmark report (can be saved as PDF) and CSV export.

Typosquat detection

01 / 06

Registration detection

As soon as a variant is registered (DNS A record active), you receive an alert. Your own domains can be marked as legitimate and excluded from warnings.

02 / 06

Competitor tracking (22 sections)

03 / 06

Leaderboard & heatmap

04 / 06

Blacklist monitoring

XICTRAQ checks the server IP of your website against Spamhaus ZEN, SpamCop, Barracuda and PSBL and alerts on a listing, and the IPs of your mail servers daily against eleven lists. Google Safe Browsing covers the domain. You notice a listing before emails start bouncing.

05 / 06

Change alerts

Every new typosquat registration and every listing of the server IP on your configured channels: email, Slack, Teams, Discord, Telegram, webhook. Competitor changes arrive as a daily digest by email and on your channels, for every competitor with change notifications switched on.

06 / 06

Process

How it works

Add the domain to protect

Enter your main domain. XICTRAQ auto-generates typosquat candidates (up to 200 variants) and kicks off the first registry scan.

Add competitors

Manually by URL or auto-discover via industry + postal code (OpenStreetMap). Auto-scans run at plan-dependent intervals (Agency every 6 hours, Business every 12 hours) across 22 sections. Changes are bundled into a daily digest sent by email and to your channels.

Configure alerts and monitor

Choose the notification channels. A new typosquat registration and a listing of the server IP are reported right away, competitor changes in the daily digest; everything also appears in the dashboard.

FAQ

Frequently Asked Questions

How many typosquat variants are monitored per domain?

Up to 200 variants are generated and monitored per domain. They come from nine techniques: TLD swap, transposed and dropped characters, adjacent-key typos, inserted hyphen, homoglyphs, bitflips plus common phishing prefixes and suffixes. Variants you own yourself are marked as legitimate once — they then drop out of the alerting but stay visible in the list.

What happens when XICTRAQ finds a phishing site?

We alert immediately and include what you need for the next step: the registrar from the registry record (RDAP), SSL status with expiry, a risk score from 0 to 100 and the individual risk factors behind it. That is enough to substantiate a complaint with the responsible registrar. For agency customers we offer takedown support as an add-on service.

Does competitor monitoring violate copyright?

No. We load only publicly accessible competitor pages like a regular browser. We store hashes, screenshots (for evidence, internal use) and extracted structural information. No paywall scraping, no reverse engineering. This aligns with § 44b UrhG (text and data mining for commercial purposes with opt-out via robots.txt).

Which blacklists are checked?

The server IP of your website against Spamhaus ZEN, SpamCop, Barracuda and PSBL, every 6 hours on paid plans and every 24 hours on the Free plan. The IPs of your mail servers daily against Spamhaus ZEN, Barracuda, SpamCop, CBL/Abuseat, PSBL, UCEPROTECT (L1 and L2), GBUdb, SpamRats, s5h.net and Mailspike. The domain is checked against Google Safe Browsing. On a listing of the server IP, the alert names the IP and the lists it appears on.

Can I protect brand names instead of domains?

Typosquat monitoring is domain-based. XICTRAQ does not monitor search engines, social networks or app stores. Newly issued certificates for brand variants are reported by the Certificate Transparency watch (from Business).

How often are competitors scanned?

Automatically via cron: Agency every 6 hours, Business every 12 hours. Additionally you can trigger a manual on-demand scan by click at any time. Each scan checks 22 sections (uptime, SSL, SEO, GDPR, tech stack, content changes, Core Web Vitals, accessibility and more). Changes are bundled into a daily digest sent by email and to your channels.