Brand Exploit Protect - Frequently Asked Questions

This article contains frequently asked questions about Brand Exploit Protect.

Q:	Is there a way to monitor social media platforms?
A:	Currently, there is no way to monitor social media platforms. If you do find a malicious account on a social media platform, contact our Support Team, and we will take the required action. See the Raising a Mimecast Support Case page for further details. We have the ability to remove and take down fake accounts. To take down a fake account, we require proof of any malicious intent proving that it is more of a threat than regular phishing sites.
Q:	Is there any feature that provides dark web monitoring?
A:	We consider the dark web to be "post phishing", so we don't monitor it. This means that if your information is already on the dark web, your credentials have already been leaked and compromised. Our proactive approach enables us to stop these attacks before they hit the surface, meaning the hacker won't have the opportunity to extract the credentials.
Q:	Is this solution only relevant to domains that have a logon page?
A:	Having a logon page is the best fit and allows you to benefit from all components of the solutions, but it is not imperative to have one. If brand visibility is crucial to your business and you'd like to have a digital presence and visibility of the domains that you do not own, this solution is recommended for you.
Q:	What do the URL statuses mean on the dashboard?
A:	All the statuses are listed on the Brand Exploit Protect: The Dashboard page.
Q:	Is taking down a website legal, and if so what is the process?
A:	Taking down a website is legal. To do so, we contact the authorities responsible for hosting the website (e.g. the hosting provider, registrar, or registrant) and provide them with full forensic evidence to prove there is malicious intent.
Q:	Is it possible to take down a domain that is a lookalike, but has no content on it?
A:	No. To take down a domain, we must provide proof that it is malicious. If there is a logo / logon page, we can perform a phishing takedown. If you see your content, pictures, or videos on a lookalike website, we can initiate a DMCA takedown for copyright infringement.
Q:	What can I do if I own a trademark and someone else is using it?
A:	If your trademark is used on a domain not owned by you and there is no malicious content on it, there is no legal action we can take. However, our ability to continuously monitor millions of domains allows us to notify you as soon as something malicious is found, and proceed to remove it.
Q:	We have received a malicious message from a lookalike domain. However, there is no website. Is it possible to take down this domain?
A:	Yes. If you provide us with the original message that was sent out (including headers) we can initiate a takedown on that domain. If one of your customers is on the receiving end, we require you to contact them and ask them to send us the original email as an attachment. It is not sufficient if you send the email on its own, as we need the headers to perform a takedown.
Q:	Do we have SLA for our take downs?
A:	We don't have SLA's for our take-down services, as the process is also dealt with by third party authorities. Our average take downtime is three hours, and in some cases much less. We are also working to block the website in different browsers and anti-virus applications, to ensure your customers won't be scammed.
Q:	Is the take down process reversible?
A:	No. Once we have started the take down process, it cannot be reversed. You must discuss with all relevant parties that the domain does not belong to you or someone you are affiliated with. It is crucial that you clarify this information as any omission can be costly and irreversible.

See Also...

• Brand Exploit Protect Guides
• Brand Exploit Protect - Scratching