WEB DATA UNLOCKED - SECURITY & COMPLIANCE

GhostNet AI. Rapid Triage.

AI-assisted brand‑impersonation monitoring. GhostNet AI scans the live web for phishing sites, typosquats and cloned profiles, captures verifiable screenshots and HTML snapshots, and produces a machine‑readable draft takedown report (JSON) for human review and action.

Next.js///React///TypeScript///Tailwind CSS///Bright Data SERP API///Web Unlocker///Scraping Browser///Gemini-2.5-Flash///PostgreSQL///Next.js///React///TypeScript///Tailwind CSS///Bright Data SERP API///Web Unlocker///Scraping Browser///Gemini-2.5-Flash///PostgreSQL///
01
High-signal search

Discovery

LIVE

Searches Google and Bing for high-signal brand abuse queries such as login, support, and official site variants to surface suspicious results.

discovery@ghostnet:~
node v20.11.0
Discovery Boot Sequence
_
System Parameters
>Engine:Bright Data SERP
>Scope:Global Search Engine
>Speed:< 200ms
>Target:Typosquats / Lookalikes
Architecture Schematic

    ┌─────────────────────────┐
    │      SERP DISCOVERY     │
    │   ┌───────┐ ┌───────┐   │
    │   │ BRAND │ │ QUERY │   │
    │   └───┬───┘ └───┬───┘   │
    │       │         │       │
    │   ┌───┴─────────┴───┐   │
    │   │   BRIGHT DATA   │   │
    │   └─────────────────┘   │
    │  ┌───────────────────┐  │
    │  │  SUSPICIOUS URLs  │  │
    │  └───────────────────┘  │
    └─────────────────────────┘
02
Web Unlocker

Surfaces

LIVE

Uses Bright Data Web Unlocker to inspect pages and social profiles that resist normal retrieval, hide behind captchas, or use IP blocking.

US_PROXY
EU_PROXY
SG_PROXY
WAF_BYPASS
CAPTCHA
ANTI_BOT
IP_ROTATE
RAW_HTML
Bypass Success99.9%
Residential IPs72M+ Active
Crawl Latency1.2s avg
CAPTCHAs Solved100%
ToolWeb Unlocker
BypassCAPTCHAs, WAFs
FingerprintAuto-Rotating
Success Rate99.9%
03
Scraping Browser

Evidence

LIVE

Captures full-page screenshots and DOM snapshots as timestamped evidence through the Bright Data Scraping Browser to preserve a verifiable chain of custody.

Evidence Inspector
Snapshot ID#snap_1022
Screenshot Filescreenshot_01JY0G5L2.png
HTML Snapshothtml_01JY0G5L2.html
File Size312 KB
Captured DOM Elements15 nodes
01
Tool
Scraping Browser
02
Storage
Supabase (Postgres)
03
Format
PNG / HTML / JSON
04
Integrity
Timestamped Chain
04
Gemini Analysis

Scoring

LIVE

Sends the normalized evidence package to Gemini (Google AI) for threat classification, urgency scoring, and structured phishing detection.

Scraped Evidence BundleStage 1/5
12345678910111213
{
  "targetUrl": "https://ghostnct.ai/login",
  "finalUrl": "https://ghostnct.ai/login",
  "pageTitle": "GhostNet AI Secure Login",
  "screenshotPath": "screenshots/threat_01.png",
  "htmlSnapshotPath": "html/threat_01.html",
  "formSelectors": ["form", "input[email]", "input[password]"],
  "visibleText": [
    "Sign in to your GhostNet AI Dashboard",
    "Enter your master access keys below"
  ],
  "status": "captured"
}
Pipeline Info
SourceBinary
Modelgemini-2.5-flash
DetectionPhishing / Fraud
Scoring0-100 (Confidence)
Latency~4.5s
05
Next.js Core

Pipeline

LIVE

The central nervous system of GhostNet AI. Handles API routing, asynchronous job execution, and serving the React-based frontend triage dashboard.

L4

TRIAGE FRONTEND

v

React-based Next.js frontend rendering active threat feeds, interactive screenshot and DOM evidence, and DMCA cease-and-desist reports.

Tailwind CSS, Framer Motion, HTML Canvas, client-side PDF exports
L3

NEXT.JS CORE API

v

Next.js App Router endpoints orchestrating discovering, scraping, and analyzing pipelines within a strict 120s budget.

API Routing, request schema validation, deadline scheduling, event dispatch
L2

INTEGRATION LAYER

v

Bright Data proxy and scraping services unlocking pages and capturing visual screenshot assets from lookalikes.

Bright Data SERP API, Web Unlocker crawler, Scraping Browser automation
L1

AI MODEL LAYER

v

Gemini 2.0 Flash reasoning agent classifying threat score, urgency tier, and drafting Cease & Desist reporting templates.

Structured JSON schema output, system prompt locking, validation parser
L0

PERSISTENCE STORE

v

Supabase database layer and file storage buckets preserving immutable files and enforcing row-level tenant security.

PostgreSQL, Brands/Threats tables, Evidence S3 storage bucket
Pipeline Parameters
SCAN_TIMEOUT120s (budget)
CANDIDATE_LIMIT8 (discovered)
BRIGHTDATA_ZONESERP_zone_01
GEMINI_MODELgemini-2.5-flash
SUPABASE_URLactive
TENANT_IDtenant_demo
ACTIVE_SCANS1
PIPELINE_STATUSOPERATIONAL
FrameworkNext.js App Router
RuntimeEdge + Node.js
StylingTailwind CSS
HostingVercel Serverless
>_
INTERACTIVE

Terminal

LIVE

Explore the system. Type commands to interact with the GhostNet AI Hub.

ghostnet-ai ~ interactive
Welcome to GhostNet AI Terminal v1.0.0
Type "help" for available commands.
 
$