Typosquatting

How it works

• The attacker registers misspellings of a real domain: a missing letter, a swapped letter, a different ending.
• Mistyped web visits land on a fake site that collects passwords or payments.
• The same domain sends email that looks almost right, so readers miss the difference.
• It is a kind of lookalike domain. Your DMARC note doesn't cover it, because the email is not from your real domain.

How WILDCARD handles it

Managed Domain locks down your real domain so the fakes are the only ones that fail. Email Security flags lookalike senders. Phishing Training teaches your team to read the whole address.

• A client types yourbusines.ca and lands on a copy of your payment page.
• An invoice arrives from accounts@yourbusiness.co instead of .ca.
• A login link points to rnicrosoft.com, with r and n standing in for m.

A question owners ask

Should I buy the common misspellings of my domain? The two or three most likely ones, yes. You can't buy them all, which is why training and filtering cover the rest.