A lookalike domain is treated as a phishing signal

The requirementstatement

A domain that imitates a better-known brand through misspelling, homoglyphs or an added word is screened as a phishing indicator.

Severityseverity: HighHIGHRejected by at least one carrier or provider, and a common cause of failure at the rest.
When it bitesphase: Gates approvalapprovalGet this wrong and the brand or campaign is refused at registration.
What is checkedobject: brand.website domain string
Where it liveslayer: WebsiteWEBSITE
How Ekas settles itdetectability: External recordEXTERNAL_DATA; The fact that settles it lives in a register we cannot query, such as the IRS file, a postal database, or another provider’s tenant. Reported as a warning with the evidence to check, not as a pass.
What the fix involvesfailureClass: Wait on someone elseTERMINAL_EXTERNAL; Needs an external system or a waiting period, such as IRS propagation, a vetting result, or a carrier queue.
Who requires itauthorities: Twilio
When it appliesapplicabilityText: Applies to every 10DLC registration.

Why this rule existsrationale

Impersonation domains are the standard vehicle for credential phishing over SMS, so screening the name itself is cheap and catches attacks before any content exists to judge. Legitimate businesses collide with it innocently — a reseller whose domain contains the manufacturer's name, a regional franchise — and the rejection reads as an accusation rather than a score.

How to fix itremediation

Where the domain contains another company's brand, be able to show the relationship — an authorised-reseller page, a franchise agreement named on the site. Where it does not, expect a slower vet and make the brand record and the site agree on the business name exactly.

Provider rejection codescodes

The code you get back when this rule is what failed, and whether that provider lets you resubmit.

Provider	Code	Resubmit
Twiliogen2	30960	Yes

Check this yourselfattestation

No tool can settle this one for you. Here is the check, and what wrong looks like.

Does this domain contain, or closely resemble, another company's brand name?

1Read the domain as a stranger would and name the brand it resembles — misspellings, homoglyphs and an added word all count.
2Where the resemblance is a real relationship, publish it: an authorised-reseller page or a franchise agreement named on the site.
3Where it is coincidence, expect a slower vet and make the brand record and the site agree on the business name exactly.

What wrong looks like: A reseller whose domain carries the manufacturer's name is screened as a phishing indicator, and the rejection reads as an accusation rather than as a score.

Notesnotes

The catalog flags this as unverified: no primary source names homoglyph domains as a rule, and the nearest hooks are Twilio's obfuscated-URL language and codes 30960/30961. Recorded as a heuristic, not as a quoted requirement. We run no similarity screen, so the user should judge their own domain against the brands it resembles.

Rules you will hit next

Other website rules at the same severity. A registration is judged as a whole, not rule by rule.

WEB-018The site must be readable in EnglishHighHIGH WEB-019The site must stay live for the whole vetting window, not just at submissionHighHIGH WEB-026The site must look established rather than erected for the registrationHighHIGH WEB-028A campaign landing page is not the brand websiteHighHIGH WEB-030E-commerce brands need a published catalogHighHIGH WEB-032The business name must be visible on the page, not only in the markupHighHIGH

All website rules

WEB-084 is one of 93 website rules in the 915-rule 10DLC registry. Free to cite under CC BY 4.0.