Security Glossary
Protected Root Domain
A protected root domain is one registrable root domain — like example.com or example.co.uk — that Impersona.io monitors for brand impersonation threats. All subdomains are included automatically.
What Counts as a Protected Root Domain
A protected root domain is the registrable root of your domain — the part you registered with a domain registrar:
example.com— one protected root domainexample.io— a separate protected root domainexample.co.uk— one protected root domain (country-code SLD)mycompany.de— one protected root domain
Subdomains Are Included
When you protect a root domain, all subdomains are monitored automatically:
login.example.com— included under example.comapp.example.com— included under example.comsupport.example.com— included under example.comapi.staging.example.com— included under example.com
You do not need separate plans or slots for subdomains. Impersona.io detects lookalike domains that target any subdomain pattern of your protected root.
Separate Roots Count Separately
If you own multiple root domains for the same brand, each counts as a separate protected root:
mycompany.comandmycompany.io= 2 protected root domainsbrand.comandbrand.deandbrand.co.uk= 3 protected root domains
Choose a plan that includes enough slots for all your root domains. Growth supports up to 3, Scale supports up to 10.
How Protection Works
When you add a protected root domain to Impersona.io:
- You verify ownership via DNS TXT record or email verification
- We generate lookalike permutations (typosquats, homoglyphs, combosquats)
- We monitor Certificate Transparency logs for new certificates matching your brand
- We check newly registered domains daily
- Threats are analyzed and scored with evidence packs
- You receive alerts for high-confidence findings
Frequently Asked Questions
What is a protected root domain?
A protected root domain is one registrable root domain such as example.com, example.io, or example.co.uk. It is the domain you own and want to monitor for brand impersonation threats.
Are subdomains included?
Yes. When you protect example.com, subdomains like login.example.com, app.example.com, and support.example.com are included automatically. You do not need separate plans for subdomains.
Do separate root domains count separately?
Yes. If you own both example.com and example.io, these are two separate protected root domains. Each requires its own slot in your plan.
What about country-code TLDs like .co.uk?
Country-code second-level domains like example.co.uk are treated as single protected root domains. The registrable root is example.co.uk, not co.uk.
Related Terms
Start protecting your root domain
Run a free brand check to see what threats target your domain today.