how do companies that offer notifications about new homograph domains work? i at first thought it's easy, but then read about how zero-width characters are also supported, and now can't think of anything that'd work reliably. could monitor certificate transparency logs, but that only works if scammers get a tls certificate (though it's likely).