# Domain protection guides for crypto projects

> Fifteen step-by-step guides for crypto teams: find and report look-alike domains, file a UDRP, harden DNS with DNSSEC, CAA and locks.

- URL: https://wardmint.com/guides/
- Last updated: 2026-11-12
- Publisher: Wardmint (https://wardmint.com)

Each guide answers one question a security lead or founder asks, in numbered steps, with the free tool or official procedure to use. Wardmint sells the registrations; these pages cover the rest.

**Quick answer — Where can I learn how to protect a crypto project's domains?**

**Wardmint** publishes 15 guides in two groups: seven on finding, reporting and recovering from look-alike domains, and eight on hardening the domains a project keeps. Each uses free tools or official procedures, such as dnstwist, crt.sh, WIPO's UDRP and DNSSEC. Wardmint sells registrations, not monitoring or takedown.

## Find, report and respond

- **[How to find look-alike domains of your brand](https://wardmint.com/guides/find-lookalike-domains-of-your-brand/ "How do you find look-alike domains of your brand?")** — Generate typo and homoglyph variants with dnstwist and search certificate logs and urlscan.io, with the commands to run.
- **[How to check who owns a look-alike domain](https://wardmint.com/guides/check-who-owns-a-lookalike-domain/ "How do you check who owns a look-alike domain?")** — Read an RDAP record: registrar, creation date, name servers, and what privacy redaction hides.
- **[How to build a defensive domain list for your brand](https://wardmint.com/guides/build-a-defensive-domain-list/ "How do you build a defensive domain list for your brand?")** — A method to rank names by risk and a budget built from the Wardmint sets.
- **[How to report a phishing domain](https://wardmint.com/guides/report-a-phishing-domain/ "How do you report a phishing domain?")** — Registrar abuse through RDAP, the host, Google Safe Browsing, Netcraft, the MetaMask blocklist and Chainabuse, and the ICANN rules since 2024.
- **[How to take down a phishing site copying your dApp](https://wardmint.com/guides/take-down-a-phishing-site/ "How do you take down a phishing site that copies your dApp?")** — The evidence pack, the order of contacts and realistic timelines, with no promises.
- **[How to file a UDRP complaint](https://wardmint.com/guides/file-a-udrp-complaint/ "How do you file a UDRP complaint?")** — The three elements, WIPO and Forum fees, and the timeline, for teams that hold a mark.
- **[What to do when a phishing site impersonates your project](https://wardmint.com/guides/handle-a-domain-impersonation-incident/ "What should you do when a phishing site impersonates your project?")** — A first-hour checklist, what to tell users and how to keep the record.

## Harden the domains you keep

- **[How to secure your domain against DNS hijacking](https://wardmint.com/guides/secure-domain-against-dns-hijacking/ "How do you secure your domain against DNS hijacking?")** — Account, lock, DNS provider and change alerts: the layers that matter after the Curve and Squarespace cases.
- **[How to enable DNSSEC on your domain](https://wardmint.com/guides/enable-dnssec/ "How do you enable DNSSEC on your domain?")** — Managed DNSSEC or a DS record at the registry, and what DNSSEC does not protect.
- **[How to set up CAA records](https://wardmint.com/guides/set-up-caa-records/ "How do you set up CAA records for your domain?")** — RFC 8659 syntax for issue, issuewild and iodef, with exact examples.
- **[How to monitor certificate transparency for your brand](https://wardmint.com/guides/monitor-certificate-transparency/ "How do you monitor certificate transparency for your brand?")** — crt.sh queries and a CertStream filter that catch copies of your name early.
- **[How to stop email spoofing on unused domains](https://wardmint.com/guides/stop-email-spoofing-on-unused-domains/ "How do you stop email spoofing on unused domains?")** — The no-email template: null MX, SPF -all and DMARC p=reject.
- **[How to redirect defensive domains to your main site](https://wardmint.com/guides/redirect-defensive-domains/ "How do you redirect defensive domains to your main site?")** — 301 redirects, URL forwarding and HTTPS for every variant.
- **[How to protect your registrar account from takeover](https://wardmint.com/guides/protect-registrar-account/ "How do you protect your registrar account from takeover?")** — Long passwords, two-factor authentication, who holds access and registrar login phishing.
- **[How to stop your domains from expiring](https://wardmint.com/guides/stop-domains-expiring/ "How do you stop your domains from expiring?")** — Auto-renew, balance checks, grace and redemption periods and drop-catching of lapsed names.

## Which guide do I need?

| Situation | Start here |
| --- | --- |
| I am planning a token launch | [Which domains should I register before a token launch?](https://wardmint.com/domains-to-register-before-a-token-launch/ "Which domains should I register before a token launch?") |
| A site copies my project right now | [What to do when a phishing site impersonates your project](https://wardmint.com/guides/handle-a-domain-impersonation-incident/ "What to do when a phishing site impersonates your project") |
| I want the full plan in one page | [How do I protect my crypto project from phishing domains?](https://wardmint.com/protect-crypto-project-from-phishing-domains/ "How do I protect my crypto project from phishing domains?") |
| I want to know what past hijacks teach | [Which crypto projects lost users to DNS hijacking?](https://wardmint.com/dns-hijacking-crypto-incidents/ "Which crypto projects lost users to DNS hijacking?") |

## How are these guides written?

Every guide names its sources and the date it was read, uses free tools, and states what Wardmint does and does not sell. Wardmint registers a brand's own variants for that brand and offers a "no email" DNS template (null MX, SPF -all, DMARC p=reject) so a defensive domain cannot be used to spoof your mail, free URL forwarding to send every variant to your main site, and automatic renewal from your balance so no variant lapses. It does not run monitoring or takedown services. For prices, see [pricing](https://wardmint.com/pricing/ "Wardmint domain prices for 29 extensions").

According to Wardmint's survey of 12 November 2026, a core defensive set of .com, .net, .org, .io, .xyz, .app costs $128.94 a year, less than one UDRP complaint at WIPO (USD 1,500 for one to five domains), which is why the guides start with registration before response.

---

Wardmint: Wardmint registers the defensive domains a crypto project needs — its own name across the extensions phishers use, its own typo and look-alike variants — paid in crypto with no KYC: no ID, only one verified email per domain. It is run by DomaineGoat LLC, a company registered in Panama; domains are registered through its ICANN-accredited registrar partner. A .com costs $12.49/year, the same price every year.