Back to blog

09 Nov 2026

Defensive Domain Registration: Which Variants Should You Actually Buy?

Defensive domain registration means registering domain variants of your brand so no one else can use them against you. Done well, it blocks the most likely phishing and lookalike domains. Done badly, it becomes hundreds of domains you pay for every year and never use.

Here is a simple priority matrix to decide which variants to buy, which to monitor and which to skip.

Defensive domain registration variants for brand protection
The Goal

What Defensive Registration Is For

The aim is not to own every possible variant. It is to own the ones attackers are most likely to use and customers are most likely to type. Everything else is better handled by monitoring. See typosquatting guide.

Priority Matrix

Which Variants to Register

Priority Variant type Example for "brandname" Action
Must have Main brand in .com, .in, .co.in brandname.com, brandname.in Register and redirect
Must have Key markets you sell in brandname.ae, brandname.co.uk Register
High One-letter typos of the main domain brandnme.com, branndname.in Register the top 5 to 10
High Brand plus risky words if you take payments or logins brandname-login.com, brandnamepay.in Register
Medium Product names customers search productname.in Register if product is strategic
Medium Hyphenated version brand-name.com Register if commonly typed
Low Unrelated new TLDs brandname.xyz, brandname.shop Monitor, buy only if abused
Low Every possible typo Hundreds of combinations Monitor instead
Use Them Right

What to Do With Defensive Domains

  • Point them to your main site with a 301 redirect using domain forwarding
  • Publish SPF -all and DMARC reject so they cannot be used for spoofed email. See our DMARC setup guide
  • Turn on auto-renew and transfer lock
  • Keep them in your main inventory with the label "protection"
Control Costs

How to Keep Defensive Registration Affordable

  • Review the list once a year and drop variants no one has targeted
  • Use monitoring for low-priority variants
  • Bundle renewals under one registrar for better pricing
  • Use the Trademark Clearinghouse for priority in new TLD launches if you operate globally
Real-World Examples

Defensive Registration Done Right

FMCG Brand Cuts 200 Variants to 40

Client: FMCG company, Mumbai

Challenge: A previous agency registered over 200 variants across new TLDs, costing lakhs each year, while key typos were missing.

What we did: Priority review using the matrix, dropped low-value TLDs, added missing typos and .in variants, monitoring for the rest.

Results:

  • Portfolio reduced from 200 to 40 domains
  • Key typo variants now protected
  • Large drop in annual renewal spend

Fintech Blocks Payment Lookalikes Before Launch

Client: UPI payments startup, Bengaluru

Challenge: Launching a consumer app with high phishing risk around "pay" and "login" variants.

What we did: Registered brand in .com, .in, .co.in, top typos and payment-related combos; reject DMARC and redirects on all.

Results:

  • 18 high-risk variants protected before launch
  • No lookalike phishing found on those variants
  • Monitoring flags new combos within 24 hours
Conclusion

Buy Smart, Monitor the Rest

Defensive registration works when it is focused. Protect your main brand in key extensions, the most likely typos and risky combos. Monitor the long tail and act only when needed.

Flying Stars plans and manages defensive portfolios through domain and trademark protection.

Explore More

More Services

Explore Related Blogs



Get the latest news and
blog updates