advanced

type AnalysisResult struct {
	Variation   Variation
	Similarity  float64
	ThreatScore float64
	Indicators  []string
}

type BitsquattingTechnique struct{}

type DeletionTechnique struct{}

type GeneratorOptions struct {
	Techniques    []string
	MaxVariations int
	TargetTLDs    []string
}

type HomographicTechnique struct{}

type InsertionTechnique struct{}

type RiskAnalyzer struct {
	BaseDomain string
}

type SubdomainPatternTechnique struct{}

type SuffixImpersonationTechnique struct{}

type TLDVariationTechnique struct{}

type Technique interface {
	Name() string
	Generate(domain string, tlds []string) []Variation
	GetRiskLevel() string
	GetConfidence() float64
}

type TechniqueConfig struct {
	Name       string
	Enabled    bool
	Weight     float64
	MaxResults int
}

type ThreatIndicators struct {
	SuspiciousTLD      bool    // .tk, .ml, etc.
	PhishingKeywords   bool    // secure-, login-, etc.
	RecentRegistration bool    // < 30 days
	UnicodeUsage       bool    // Non-ASCII chars
	HighSimilarity     float64 // Levenshtein distance
}

type TranspositionTechnique struct{}

type TyposquattingTechnique struct{}

type Variation struct {
	Domain     string
	Technique  string
	Confidence float64
	Risk       string // "high", "medium", "low"
	BaseDomain string
	Similarity float64
}

type VariationGenerator struct {
	BaseDomain string
	Options    GeneratorOptions
	// contains filtered or unexported fields
}