Combosquat domain
Real brand name plus extra words (support, secure, login, billing) on a domain the brand does not own.
How to spot it
- Brand name joined to words like secure/login/verify with hyphens
- The part just before the ending is not the brand alone
What to do
The brand owns brand.tld. brand-secure-login.tld is a different owner.
What the real thing looks like
- Real brand subdomains such as login.brand.tld
- A real vendor billing portal on its own domain
Try an example
A practice example with fictional companies. Answer it, then see the tells.
Test yourself on eight more
The free quiz mixes scams with legitimate messages, like real life. No sign-up.