Phishing & Typosquatting Detector
Find lookalike domains that could be used to impersonate your brand for phishing.
Sign in to run this scan
Free to use — we just ask you to sign in so scans stay fair for everyone.
How it works
This tool generates likely typosquat variations of a domain — swapped letters, added hyphens, different TLDs — and checks which ones are actually registered, so you can see your brand's phishing exposure at a glance.
Attackers register these lookalikes to run fake login pages or invoice-fraud emails that look like they come from a trusted brand — catching a new registration early gives you a chance to report or monitor it before it's used against your customers.
Related reading
Frequently asked questions
Should I register every variation this tool finds?
That's rarely practical — the number of possible variations is very large. Focus on registering the handful most likely to be used against you (common single-letter swaps, the most popular alternate TLDs) and monitor the rest periodically instead.
A variation is registered but shows a parking page — is that a threat?
It's lower urgency than an active phishing clone, but worth monitoring — domain squatters sometimes hold a parked lookalike for resale, and it can be repurposed into an active scam at any time without warning.
Related tools
Malware & Blacklist Checker
Detect malware, phishing & blacklist status across 70+ vendors.
IP Reputation Checker
Check IP or domain reputation, ASN and geolocation.
Exposed Files & Git Leak Scanner
Find publicly exposed .env, .git, and backup files on any site.
IP Blacklist (DNSBL) Checker
Check if an IP/domain is listed on Spamhaus, SpamCop & other blacklists.