DomainSpoof findings data licence Copyright (c) BreachScout DomainSpoof. The records in these files are DomainSpoof's findings. Each one starts from DomainSpoof's own detection: a new certificate in the public Certificate Transparency logs, or a registered lookalike of a brand's domain that our DNS sweeps or our daily comparison of registry zone files found. DomainSpoof checks the hostname and publishes it when an independent source corroborates it: a reporting source that lists it, or a listed address it resolves to. Each record names that source. You may copy, use and share the records for non-commercial purposes, with this attribution: "Data: BreachScout DomainSpoof (domainspoof.org)", and a link to https://domainspoof.org/data. Commercial redistribution, resale, or inclusion in a commercial product or feed needs a written agreement with BreachScout DomainSpoof: contact us at https://domainspoof.com/contact. This licence covers DomainSpoof's own work. Each source named in a record is credited in manifest.json under "credits" and keeps its own terms. The files carry no source's raw records or URLs. Lookalikes found in registry zone files (found_by "zone_file") come with the zone-data conditions at https://domainspoof.org/terms#zone-data. The records are provided as is, without warranty. A finding states what DomainSpoof observed and when. Corrections are made at https://domainspoof.com/corrections and remove the finding from the files.