Own the critical set
Register high-risk variants you can afford. Track renewals so they never become someone else’s asset.
Brand risk · Lookalike names
Protect your domain name from cybersquatting.
Cybersquatting is registering names that imitate a brand: typos, alternate TLDs and expired variants. To protect yours, register the variants attackers actually use, lock what you own, and watch the rest.
By Muhammad Hamza, Founder of AeptoPublished Updated
What cybersquatting looks like in 2026
Not only “someone parked my exact brand.”
- Attackers and opportunists register near-matches, grab expired variants, or stand up lookalike sites that harvest credentials.
- Brands also self-inflict damage by letting defensive names expire, then discovering them for sale later.
- Portfolio operators need both: keep owned names safe, and watch interesting names. Aepto alerts on status changes; it does not register names for you.
Typos Near-match traffic theft
TLD sprawl Brand on wrong extension
Expiry Defensive names lapse
Hijack Your own name drifts
A practical protection stack
Register, lock, monitor, watch.
Lock and detect
Locks plus Theft Guard on names you already operate.
Watch the rest
Domain Watch for status alerts on names you don’t own.
UDRP and trademark strategy when a bad-faith registration is clear. Outside Aepto’s product.
Inventory, renewals, drift alerts, Watch status, Discovery for naming ideas (not availability guarantees).
Watch the names you do not own yet
Domain Watch tracks lookalike and variant names beside the domains you own, so one list shows both.
Aepto does not register or bid on domains. Watch Max Bid is a personal note for your own planning.
What can you do if someone registers a lookalike?
The main remedy for generic TLDs is the UDRP. It is narrower than most people expect.
3
things a complainant must prove: confusing similarity, no legitimate interest, and bad-faith registration and use
Source: WIPO UDRP guide
Transfer or cancel
are the only outcomes a UDRP panel can order. There are no damages.
Source: WIPO UDRP guide
5 names
you can watch for status changes on the Aepto Free plan with Domain Watch
Which defensive registrations are worth buying?
You cannot buy every TLD. Buy the variants attackers actually use.
| Variant | Buy it? | Why |
|---|---|---|
| Exact brand on your main TLD | Yes | Your primary asset. Lock it and monitor it |
| Common typos on your main TLD | Yes | Typo traffic is the main lure for phishing and parked ads |
| Brand on the 1–2 TLDs customers confuse | Yes | For example .com vs .co, or your country TLD |
| Brand plus a word (brand-login, brand-support) | No | Watch first. Buy if it shows activity |
| Every new gTLD | No | Cost grows fast. Watch the ones that matter instead |
What do you do when a lookalike appears?
Decide in days, not months. Squatters gain leverage while you wait.
- 01
Check what it does
Look at where it resolves and whether it has mail (MX) records. Mail on a lookalike usually means phishing.
- 02
Watch it
Add it to Domain Watch so status changes reach you.
- 03
Decide
Ignore it, try to buy it, or escalate. Write the decision down.
- 04
Escalate with evidence
If bad faith is clear, counsel can file a UDRP complaint. Dated screenshots and history help.
Common questions
What is cybersquatting?
Registering, trafficking in, or using a domain that confuses with someone else’s mark, often to sell it back, divert traffic, or run lookalike sites.
Can Aepto stop cybersquatters from registering names?
No. Registration happens at registrars. Aepto helps you secure what you own, watch names you care about, and detect drift on your inventory.
How does Domain Watch help?
Domain Watch alerts on status changes for names you do not own yet. It does not buy or bid for you. Max Bid fields are personal notes only.
What should brands register defensively?
Core TLDs and high-risk typos where budget allows. Inventory and renewals matter so defensive names do not expire into the wrong hands.
Is legal action part of Aepto?
No. UDRP and counsel are separate. Monitoring and Watch provide operational visibility, not legal outcomes.
What is a practical defensive set?
Core TLDs and high-confusion typos for flagship brands, Watch lists for launches, and fast escalation paths when abuse appears. You cannot register every string on earth.
Protect what you own. Watch what you do not.
Start free. Add Watch and Discovery credits as the list grows.