Module lookalike 

Senders who borrow a name: “lnfos PrimeVlDEO info@unrelated.example”.

A signature proves the domain, not the name shown before it. Phishing writes a brand or a public service in the display name, often with lookalike letters (l for I, 0 for O, rn for m, Cyrillic а for a), and sends from any domain. Names are compared by their skeleton, as Unicode’s confusable detection does (UTS #39 §4): both sides are reduced to one prototype per family of lookalike letters. A brand named by a sender outside its own domains is an impersonation. A brand whose name is also an everyday word or a place (BrandWords::everyday: Orange, Apple, La Poste…) is borrowed only when its name stands alone, or beside the words of a service (“Apple Support”, “Amazon.com”), so that “Orange County Library” or “Apple Pie Bakery” borrow nothing; any other brand counts anywhere in a name (“Crédit Agricole Nord de France”, “PayPal Kundendienst”).

Structs

Impersonation

A display name claiming a brand, or one of your own domains, that its address does not belong to.

Functions

borrows 🔒

Whether a name claims an everyday brand: its words are there, one after the other or run together, and every other word of the name is a word of a service (service, skeletons: “Support”, “Service client”, “Infos”), a number (“Microsoft 365”), or a label of the brand’s own domains (“Amazon.com”, “PayPal.fr”). The brand’s name standing among other words (“Orange County Library”, “Apple Pie Bakery”, “Café de la Poste”) is someone else’s name. raw: the name’s words as written; words: their skeletons.

claims_own 🔒

A name made of nothing but your domain and service words: “janedoe”, “Mail Admin janedoe.example”. Your own name in full (“Jane Doe”) is not your domain run together, and a name with any other word is someone’s.

impersonation

Whether a sender’s display name claims a brand, or one of own (your domains), from outside its domains. brands: the brands and public services, by the words of their name, and their domains (a sender in one of them or below it is genuine), and the words of a service, which a fake name wraps a brand or a domain in (“PayPal Service”, “janedoe.example Mail Admin”; words::BrandWords). A brand is claimed when its words are in the name (names); an everyday one, when its name stands alone or beside such words only (borrows).

names 🔒

Whether the brand’s words appear in the name: one after the other, or run together.

own_domains

The domains of your own addresses that can be impersonated: not those of mail providers millions share (shared, words::BrandWords::shared), where an address makes the domain nobody’s own.

prototype 🔒

skeleton 🔒

One prototype per family of lookalike letters, lowercase and without accents: “PrimeVlDEO” and “Prime Video” share “prlmevldeo”.

words 🔒

Words of a name, split on everything that is not a letter or a digit.

words_of_brand 🔒