GhostNet AI. Rapid Triage.
AI-assisted brand‑impersonation monitoring. GhostNet AI scans the live web for phishing sites, typosquats and cloned profiles, captures verifiable screenshots and HTML snapshots, and produces a machine‑readable draft takedown report (JSON) for human review and action.
Discovery
Searches Google and Bing for high-signal brand abuse queries such as login, support, and official site variants to surface suspicious results.
┌─────────────────────────┐
│ SERP DISCOVERY │
│ ┌───────┐ ┌───────┐ │
│ │ BRAND │ │ QUERY │ │
│ └───┬───┘ └───┬───┘ │
│ │ │ │
│ ┌───┴─────────┴───┐ │
│ │ BRIGHT DATA │ │
│ └─────────────────┘ │
│ ┌───────────────────┐ │
│ │ SUSPICIOUS URLs │ │
│ └───────────────────┘ │
└─────────────────────────┘Surfaces
Uses Bright Data Web Unlocker to inspect pages and social profiles that resist normal retrieval, hide behind captchas, or use IP blocking.
Evidence
Captures full-page screenshots and DOM snapshots as timestamped evidence through the Bright Data Scraping Browser to preserve a verifiable chain of custody.
Scoring
Sends the normalized evidence package to Gemini (Google AI) for threat classification, urgency scoring, and structured phishing detection.
12345678910111213
{
"targetUrl": "https://ghostnct.ai/login",
"finalUrl": "https://ghostnct.ai/login",
"pageTitle": "GhostNet AI Secure Login",
"screenshotPath": "screenshots/threat_01.png",
"htmlSnapshotPath": "html/threat_01.html",
"formSelectors": ["form", "input[email]", "input[password]"],
"visibleText": [
"Sign in to your GhostNet AI Dashboard",
"Enter your master access keys below"
],
"status": "captured"
}Pipeline
The central nervous system of GhostNet AI. Handles API routing, asynchronous job execution, and serving the React-based frontend triage dashboard.
TRIAGE FRONTEND
vReact-based Next.js frontend rendering active threat feeds, interactive screenshot and DOM evidence, and DMCA cease-and-desist reports.
NEXT.JS CORE API
vNext.js App Router endpoints orchestrating discovering, scraping, and analyzing pipelines within a strict 120s budget.
INTEGRATION LAYER
vBright Data proxy and scraping services unlocking pages and capturing visual screenshot assets from lookalikes.
AI MODEL LAYER
vGemini 2.0 Flash reasoning agent classifying threat score, urgency tier, and drafting Cease & Desist reporting templates.
PERSISTENCE STORE
vSupabase database layer and file storage buckets preserving immutable files and enforcing row-level tenant security.
Terminal
Explore the system. Type commands to interact with the GhostNet AI Hub.