When a Cloned Website token is placed on your websites, you will get notified when it is hosted on another domain, which will include legitimate domains sometimes used during development. To ignore alerts coming from legitimate domains, you must add them to the "Ignore List" of the Canarytoken.
Follow the steps below to add a legitimate website to a Cloned Website Canarytoken "Ignore List":
Step 1: Log in to your Console
Step 2: Select the Canarytokens tile
Step 3: Search for your Canarytoken
Enter the URL name of the Cloned Website Canarytoken you want to update the ignore list on, and select it from the results list
Step 3: Enter Ignored URL
To add a specific URL to the ignore list, enter it in the "Ignore list" area. For specific URLs they must include http:// or https://. Ignore entries can be either URLs or a regex value. Press Enter and click Save.
The URL has to include the "http:// or https://", and you have to press "Enter" after inputting the URL for this to work correctly, for example:
https://dev.inyoni-corp.com
Step 4: Using a Regex Entry(Optional)
If you have many subdomains you would like to add to the ignore list, on both http & https, then using a regex entry is a more suitable approach, for example:
^https?://.*\.example\.com
This will exclude entries like https://staging.example.com and http://pre-prod.test.example.com from alerts.
There is no need to escape forward slashes in the regex
Add the entry, press Enter, then press Save to apply the changes.
Now you shouldn't be receiving any more alerts from those legitimate domains.
Step 5: Toggle local Canarytoken alerts (Optional)
When a Cloned Website Canarytoken is downloaded and run on a local system instead of being hosted on a public server, we automatically block any alert triggers. If you do want to receive these alerts, you can toggle them on a per-Canarytoken basis in the ignore list settings for the Canarytoken.