Lookalike Monitoring

A lookalike is a domain that could be confused for yours. Attackers use them to send mail that passes every check, because the domain is theirs. We find them and tell you when one changes.

How it works

1. 1 We make the names

   Every variation of your domain that a person could mistake for it: a letter swapped, a hyphen added, a character from another alphabet, another ending.

2. 2 We ask the registry

   Each name is checked against the registry that holds it. A name is called registered only when the registry says so.

3. 3 We keep the history

   Each pass is compared with the last. You learn that a name is new, and also when a quiet one starts to serve a site or take mail.

4. 4 We tell you what matters

   A name that can send mail ranks above one that has been parked for ten years, and each one says why.

What it costs

A free account watches one domain each week, with no card. Paid levels read more endings, more often. See the prices.

Read more

• How we find the names that copy yours
• I have a suspicious lookalike. Now what?
• How we know a name is live
• How the risk score works