Glossary
Attacks
Combosquatting
Registering the brand name plus an extra word — brand-support, brand-login, brand-billing. The brand is spelled correctly, so typo-based defences miss it entirely and the space is effectively unbounded.
Defined in M3AAWG best practice.
Where this appears
The lessons that use this term, and what each is for.
Domain Security FundamentalsCombosquatting, and why it is harderExplain why brand-plus-word domains defeat the defences that work against typos.Domain Abuse & ImpersonationGenerating the spaceProduce the complete permutation set for a brand, and say how large it is before you cut it.Domain Abuse & ImpersonationCutting it to what mattersReduce a permutation space of thousands to a watchlist you would actually act on.Domain Abuse & ImpersonationFour outcomesPlace any suspicious domain into one of four categories from the evidence available.Brand ProtectionThe arithmetic against registering everythingShow why a register-everything policy cannot be completed, and what it displaces.