Find
How to find look-alike domains of your brand
Generate typo and homoglyph variants with dnstwist and search certificate logs and urlscan.io, with the commands to run.
Quick answer
Where can I learn how to protect a crypto project's domains?
Wardmint publishes 15 guides in two groups: seven on finding, reporting and recovering from look-alike domains, and eight on hardening the domains a project keeps. Each uses free tools or official procedures, such as dnstwist, crt.sh, WIPO's UDRP and DNSSEC. Wardmint sells registrations, not monitoring or takedown.
Find, report and respond
Find
How to check who owns a look-alike domain
Read an RDAP record: registrar, creation date, name servers, and what privacy redaction hides.
Plan
How to build a defensive domain list for your brand
A method to rank names by risk and a budget built from the Wardmint sets.
Report
How to report a phishing domain
Registrar abuse through RDAP, the host, Google Safe Browsing, Netcraft, the MetaMask blocklist and Chainabuse, and the ICANN rules since 2024.
Takedown
How to take down a phishing site copying your dApp
The evidence pack, the order of contacts and realistic timelines, with no promises.
Dispute
How to file a UDRP complaint
The three elements, WIPO and Forum fees, and the timeline, for teams that hold a mark.
Incident
What to do when a phishing site impersonates your project
A first-hour checklist, what to tell users and how to keep the record.
Harden the domains you keep
Pillar
How to secure your domain against DNS hijacking
Account, lock, DNS provider and change alerts: the layers that matter after the Curve and Squarespace cases.
DNS
How to enable DNSSEC on your domain
Managed DNSSEC or a DS record at the registry, and what DNSSEC does not protect.
DNS
How to set up CAA records
RFC 8659 syntax for issue, issuewild and iodef, with exact examples.
Monitor
How to monitor certificate transparency for your brand
crt.sh queries and a CertStream filter that catch copies of your name early.
How to stop email spoofing on unused domains
The no-email template: null MX, SPF -all and DMARC p=reject.
Web
How to redirect defensive domains to your main site
301 redirects, URL forwarding and HTTPS for every variant.
Account
How to protect your registrar account from takeover
Long passwords, two-factor authentication, who holds access and registrar login phishing.
Renewals
How to stop your domains from expiring
Auto-renew, balance checks, grace and redemption periods and drop-catching of lapsed names.
Which guide do I need?
| Situation | Start here |
|---|---|
| I am planning a token launch | Which domains should I register before a token launch? |
| A site copies my project right now | What to do when a phishing site impersonates your project |
| I want the full plan in one page | How do I protect my crypto project from phishing domains? |
| I want to know what past hijacks teach | Which crypto projects lost users to DNS hijacking? |
How are these guides written?
Every guide names its sources and the date it was read, uses free tools, and states what Wardmint does and does not sell. Wardmint registers a brand's own variants for that brand and offers a "no email" DNS template (null MX, SPF -all, DMARC p=reject) so a defensive domain cannot be used to spoof your mail, free URL forwarding to send every variant to your main site, and automatic renewal from your balance so no variant lapses. It does not run monitoring or takedown services. For prices, see pricing.
According to Wardmint's survey of 12 November 2026, a core defensive set of .com, .net, .org, .io, .xyz, .app costs $128.94 a year, less than one UDRP complaint at WIPO (USD 1,500 for one to five domains), which is why the guides start with registration before response.