UpGuard lets you monitor for cybersecurity risks related to typosquatting by automatically identifying permutations of your domain(s) that may be at risk of typosquatting. Typosquatting is a form of cybersquatting where someone buys a similar domain name to those owned by your brand or copyright and targets users who incorrectly type in the domain in their website, rather than using a search engine. They may also use typosquatted domain as part of phishing or spear phishing attacks.

Once you start monitoring a domain for typosquatting, UpGuard will identify possible permutations of the domain, provide context on the type of typosquatting, as well as outline any A Records, NS Records, MX Records, and detection date.

If you own domains that are similar to the domain you are monitoring, there is a good chance that the permutations list will include those domains. You may also believe that a specific permutation doesn't present a risk.

In these situations, you can simply ignore the domain which will stop UpGuard from monitoring it. You can ignore domains whether they are registered or unregistered.

To ignore a domain, click the eye icon to the right of the date detected column.

Clicking on the eye will bring up a modal that asks you to provide a reason for ignoring the domain:

  • Owned by us: This domain has been registered by us, and is therefore not a risk.

  • Legitimate website: This is a legitimate website for another organization.

  • Risk accepted: We do not believe this permutation is likely to be used to impersonate our organization, and therefore accept the risk.

When you are happy with your reason, click Apply.

Clicking apply will move the domain to the Ignore tab, which is to the right of the unregistered tab underneath the page title.

If you want to start monitoring a domain again, click on the eye to bring up a modal to confirm that you want to start monitoring the domain.

If you see a domain that has an incorrect reason, click the paper and pencil to the left of the eye. This will bring up the same modal you saw when you ignored the domain.

Did this answer your question?