OnINBOX lookalike detection checks inbound emails against the top 1 million domains on the internet, examples include microsoft.com and google.com. We also check for lookalikes against your own domains, those are the domains added to OnINBOX at the user or organizational level as trusted.
OnINBOX also checks for lookalike display names in emails. For example, John Smith is your CEO, and you receive another email from someone called ‘John Smith’ from a different email address.
The above will be flagged up to the end user as someone that looks similar to a trusted contact.