Send typosquatting MX alerts to on-call engineers before SLAs lapse

Your domain alerts arrive as raw hooks, causing missed typosquatting notices. On-call engineers get concise triage with MX details and an incident link so teams act before SLAs lapse.