sus.botdocs

Security finding

A look-alike of the domain is registered

Security Warning Severity: Medium

Part of the audit Domain and DNS. Finding id: security.typoDomains.

What it costs you

A visitor who mistypes your address, or clicks a link in a forged mail, lands there. A page that uses your name can ask for the login or payment details meant for you.

What to do

Check who holds the name. Register the closest look-alikes yourself and redirect them to the real site.

What it checks

  • Look-alike domain registered by someone else
  • Look-alike domain looks malicious

How to fix it

Report the look-alike

  1. Open [domain] in a private window and look at what it shows.
  2. If it copies your site or asks for logins: report it to the abuse contact of its registrar and its host, and warn your customers if mail was sent from it.
  3. If it uses your trademark, a domain dispute procedure can transfer the name to you. That is slower than the abuse report.

How to check: The typo domain list shows [domain] as yours, or it no longer serves a page with your name.

Check the holder, then decide

  1. Look up who holds [domain]. If it is you or a partner, mark it as yours.
  2. If it is for sale at a normal price, buying it is usually cheaper than disputing it later.
  3. Otherwise leave it; this rule reports again when it starts serving a page with your name.

How to check: The typo domain list shows [domain] as yours, or the finding is dismissed.