rnicrosoft.com

Looking for Guidance on Blocking Typosquatting and Homoglyph Domains Hi everyone, I’m working on a personal project: an email service called Millionaire.email. I’m currently improving the inbound protections, especially around phishing and impersonation attempts, and I could use some guidance from people with more experience in this area. I’ve started manually blocking domains that use techniques such as: * typosquatting (for example rn instead of m, or numbers replacing letters) * homoglyph tricks (uppercase I vs lowercase l, similar-looking characters) * fake security or account-update themes * brand impersonation patterns A few examples I’ve already added to the blocklist: Microsoft-style lookalikes: rnicrosoft.com, micr0s0ft.com Google-style lookalikes: gmaiI.com, googIe.com Amazon-style lookalikes: arnazon .com General phishing patterns: secure-login-center.com, verify-userinfo.com I’m not trying to promote anything here. I’m simply looking for advice and best practices. I’ve had some misunderstandings in this subreddit before, so I’m approaching this with respect and openness. My question is: What other domain patterns or red flags should I consider blocking to better protect users from phishing or malware? Any insight from this community would be appreciated.