Onlooker Blog

Updates and research notes from the ONLabs team.

2026-08-11

When 100 phishing alerts were not 100 registered domains

Our team investigated a burst of more than 100 brand-matching .ph certificate alerts and uncovered wildcard-like parking infrastructure rather than a mass registration campaign.

Read article →

2026-06-15

From analytics tags to attack surface: understanding browser-side supply-chain risk

How third-party JavaScript, tag managers, and embedded browser-side services become part of your supply chain, and how teams can monitor them as external risk changes.

Read article →

2026-06-01

Domain typo squatting: small change, real risk

How lookalike domains turn tiny spelling changes into credible phishing infrastructure, and how an Onlooker investigation tracked one targeting a podcaster.

Read article →

2026-05-28

What your DNS records say about your business

A practical Onlooker walkthrough for turning DNS records into vendor, email, infrastructure, and exposure intelligence.

Read article →