Lookalike domains and your legal name
Register the obvious typos. Monitor the rest. Tell finance what your real sending domain is.
ITSIGN Administrator · May 28, 2025 · 2 min read
If you are ITSIGN, someone will try 1tsign or itslgn. If you are a law firm with a long name, they will drop a hyphen.
Buy the cheap lookalikes. Monitor the rest. Put the real domain in the invoice footer in a way staff already know.
DMARC helps receivers reject forged mail from your domain. It does not stop a lookalike. Both matter.
Related reading
Email retention, PIPEDA, and the mailbox you never deleted
Keeping everything forever is not a strategy. It is a larger breach waiting for a number.
2 min read
When the phish comes from a vendor you trust
Their tenant, your payment. Callback still wins. So does knowing who is allowed to change details.
2 min read
Turn off IMAP and POP before someone else uses them
Legacy protocols skip modern MFA. They are still on in tenants that were migrated in a hurry.
2 min read
Want this applied to your environment?
A short conversation, an honest assessment of your current setup, and a clear proposal. No obligation and no pressure.