Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
FREEDOM251

Freedom251 › Blog › .si domains

How to Protect a Brand from .si Domain Squatting and Impersonation

By Freedom251 Team · · 5 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If someone is using a registered .si domain to impersonate your company, take two steps in parallel: report an active phishing attempt to SI-CERT, and assess whether the domain meets the requirements for a Register.si ARDS complaint. SI-CERT reporting addresses the security incident; ARDS can lead to transfer or deletion of a disputed .si domain, but only if the complainant proves the required elements. Neither route guarantees an immediate takedown.

Choose the response that matches the problem

A misleading .si domain and an active phishing site may be part of the same incident, but they call for different processes. ARDS is for disputes over registered .si domain names. SI-CERT handles incident reports and provides confirmed phishing indicators for defensive use.

As an Amazon Associate I earn from qualifying purchases.

Response track Use it when What it can do
Register.si ARDS A registered .si domain may violate a right you hold, and evidence may show that its holder lacks a legitimate interest and registered or uses it in bad faith. If the complaint succeeds, the decision may order transfer or deletion of that domain.
SI-CERT and your security response A website, email, SMS or messaging-app message is impersonating your brand or trying to obtain credentials or payment. SI-CERT accepts incident reports and publishes confirmed phishing URLs and domains that organizations can use in defensive controls.

These channels do not cover every kind of impersonation. ARDS does not decide disputes about social profiles, spoofed email addresses, phone calls or domains outside .si. Those may require separate action through the relevant platform, provider, registrar, law-enforcement or legal channel.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can you get a .si domain transferred if someone registered it in bad faith?

Possibly. Under Register.si’s ARDS Rules of Procedure, version 5, a complainant must establish all three of the following for a complaint to be upheld:

#1 Best Overall
Sale
ATLKey USB-C Security Key for Passkey & 2FA, FIDO2/U2F Certified with 3-Side Touch & Multi-Color LED, Stores 100 Passkeys, Phishing-Resistant Login for Google, Microsoft, Apple & More, IP68 Waterproof
  • PHISHING-RESISTANT 2FA: Cryptographically binds to real domains, making phishing attacks impossible unlike SMS codes or authenticator apps.
  • 3-SIDE CAPACITIVE TOUCH: Tap the end, left, or right side to authenticate, so it works in any orientation or crowded USB port.
  • MULTI-COLOR LED INDICATOR: Blue means ready, blinking blue means tap now, green means success, and red means error for instant status feedback.
  • IP68 WATERPROOF & BATTERY-FREE: Crush-resistant one-piece construction survives daily carry on a keychain or in a bag for years without any batteries.
  • UNIVERSAL COMPATIBILITY: Works with Google, Microsoft, Apple, GitHub, AWS, and any FIDO2 / U2F / WebAuthn service, storing up to 100 passkeys.
  1. A qualifying right: for example, a trademark valid in Slovenia, a company name in Slovenia’s court register, copyright under Slovenian law, a registered geographic designation, personal-name rights or another recognized right.
  2. No legitimate interest: the domain holder must lack a legitimate interest in the disputed name.
  3. Bad faith: the domain must have been registered or be used in bad faith.

A domain that resembles your brand is not, by itself, proof of all three elements. A trademark alone does not guarantee recovery. If the complaint succeeds, the possible ARDS remedies are transfer of the domain to the complainant or deletion of the domain.

Which rules apply?

Version 5 of the rules applies to complaints initiated on or after 7 October 2025. Proceedings started before that date are governed by the previous version. ARDS is a contractually agreed alternative dispute-resolution procedure; it does not exclude or restrict the judicial protection available under law. Consider whether court action is also appropriate for your circumstances.

Rank #2
Sale
Thetis Nano-A FIDO2 Security Key Hardware Passkey Device with USB Type A, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
  • Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
  • USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
  • FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
  • Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
  • Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.

What evidence do you need to challenge a .si domain?

Build a dated record that connects your claimed right to the specific domain and its registration or use. The Registry’s process asks for supporting evidence, the basis for the complainant’s right and relevant details about the complainant and holder.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Document your right: gather the records that establish the relevant trademark, company name, copyright or other qualifying right.
  • Preserve what the domain does: save dated screenshots, exact URLs, redirects and copies of messages or pages associated with the domain.
  • Record impact and context: retain customer reports and relevant observations that may help show a lack of legitimate interest or bad faith.
  • Keep originals where possible: preserve the source message or URL as well as screenshots, so the evidence retains useful context.

Do not access or alter the site unlawfully while gathering evidence. If the site is currently soliciting credentials or payment, report the incident as well as preserving evidence for any domain dispute.

Rank #3
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-A Type TrustKey T110
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

If you cannot identify the holder

Register.si describes a process for requesting disclosure of .si domain-holder information for justified purposes, including exercising legal rights or preparing an ADR complaint. Holder information is not described as an unrestricted public lookup. Use the Registry’s official disclosure process and explain the legal purpose of the request.

How to file a Register.si ARDS complaint

The ARDS complaint process is electronic. One complaint can cover several disputed domains only if they have the same holder.

Rank #4
48-Inch Heavy Duty Cable Lock with Keys for Bikes, Scooters & Motorcycles
  • 48-INCH FLEXIBLE STEEL CABLE – Provides ample reach to secure your scooter, motorcycle, e-bike, or bicycle to a rack, pole, or fixed object.
  • DURABLE STEEL ALLOY CONSTRUCTION – Built with a tough steel alloy cable that adds a reliable layer of theft deterrence for your vehicle.
  • PROTECTIVE PVC OUTER COVERING – The soft PVC coating shields painted and finished surfaces from scratches and scuffs during use.
  • KEY-OPERATED LOCK – Simple, hassle-free keyed locking mechanism with no combination to memorize, making securing your ride quick and easy.
  • COMPACT & PORTABLE DESIGN – Lightweight and easy to store under a scooter seat, in a top case, backpack, or gear bag for on-the-go security.
  1. Confirm the applicable rules and fee. Check the current Register.si ARDS rules and fee information before filing; the version and charges can change.
  2. Prepare the complaint details. Include the complainant and holder information, disputed domain name or names, the right you rely on, the remedy requested—transfer or deletion—and supporting evidence.
  3. Submit the complaint and fee. The Registry’s administrator checks formal completeness within five days after receiving both the complaint and fee. If the complaint is complete, the disputed name is blocked during the procedure.
  4. Track the response and decision stages. The holder has 21 days from blocking to respond. The decision is due within 14 days of the arbiter’s appointment, although the rules allow an extension in exceptional cases.
  5. Review the outcome and next steps. The ARDS rules provide no appeal within the procedure. A successful complaint may result in transfer or deletion; court protection remains available under law.

Register.si says legal representation is not mandatory and describes the process as digital. Its published guidance estimates about two to three months from filing through implementation; that is an estimate, not a guaranteed completion time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What does an ARDS complaint cost?

The listed fee for a single-arbiter case involving one to five domain names is €700 including VAT. For that same range, the listed supplement for a three-arbiter panel is an additional €700 including VAT. Fees differ for six or more domains; for more than ten, the fee is determined by the administrator. Verify the live fee schedule and applicable VAT treatment with Register.si before filing.

Best Value
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-C Type TrustKey T120
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T120. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T120 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-C port : Insert the T120 security key into the USB-C port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How do you report a fake website pretending to be your company?

If the site is phishing or otherwise attempting to deceive people into sharing credentials or making payments, treat it as a cybersecurity incident even if you are also considering ARDS. SI-CERT’s national phishing reporting point became operational on 1 October 2026.

  • Send phishing emails, links to phishing pages, or screenshots of SMS and messaging-app messages to [email protected].
  • Send other incident reports to [email protected].
  • Include the relevant message, link or screenshot and the context needed to understand what happened.

Reporting an incident does not, by itself, establish that an ARDS complaint will succeed or that the domain will be removed. Keep your security and legal response moving on their respective tracks.

How can organizations use SI-CERT’s phishing lists?

SI-CERT publishes confirmed phishing URL and domain lists for organizational defensive use. Security teams can use the indicators in systems such as SIEM, email security, EDR/XDR or DNS response policy zones (DNS RPZ). SI-CERT says entries are confirmed by its staff.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

These indicators are time-sensitive: phishing sites can have short lifetimes. Use the current lists, refresh them rather than treating old copies as permanently accurate, and remove stale entries from controls when appropriate.

Practical response checklist

  1. Preserve the domain, relevant URLs, redirects, messages, screenshots and customer reports with dates.
  2. If people are being targeted through phishing, report the material to SI-CERT at the appropriate address.
  3. Identify the right you can assert and assess evidence for each of ARDS’s three required elements.
  4. If holder details are not visible, use Register.si’s disclosure process for a justified legal purpose.
  5. Check the applicable ARDS rules and fees, then prepare the electronic complaint and requested remedy.
  6. Have security teams consider current SI-CERT indicators in their defensive controls while the domain dispute proceeds.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

.si domainsbrand protectiondomain disputesphishingRegister.siSI-CERT

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.