// Free tool

Typosquat & look-alike domain finder

Enter your domain and we generate the look-alike versions a scammer would register, misspellings, swapped letters, look-alike characters and other extensions, then check which ones someone has actually registered and pointed at a live server. The mail-capable ones are flagged, because those are set up to impersonate your email. Runs from public DNS. Nothing is stored.

--

Searching…

Generating look-alikes and checking DNS.

How to read this. We generate the most common look-alike variants of your domain and report the ones that resolve to a live address right now, the registered, active impersonation surface. A Mail tag means the look-alike can also send or receive email, which is how invoice fraud and business-email-compromise scams are run. Two honest caveats: a resolving look-alike is not automatically malicious (you may own some defensively, and parked or for-sale domains resolve too), so confirm who controls each one; and we check a bounded, prioritised set of variants, not the full universe of possibilities. Only check domains you own or are authorised to assess. To investigate a specific result, drop it into our Link Safety Checker or Email Security Checker.
// What this means for your business

Your customers can't tell your domain from a clever fake

A single registered look-alike is enough to fool a customer into paying the wrong invoice or handing over a password. Knowing which ones exist is the start; monitoring for new ones, locking down your real domain, and training your team to spot the fakes is the ongoing work. That is the kind of brand and email protection we run for small Canadian businesses.