Free tool

Lookalike Domain Finder

Is someone registering domains that look like yours to phish your customers? Find out in seconds.

Read-only and passive. We only query public records: no login, no port scanning, no exploitation.

What this checks

Generates variants of your domain name by dropping a letter, swapping two neighbouring letters, doubling a letter, and swapping letters for similar digits (o for 0, i or l for 1, e for 3, a for 4, s for 5, b for 8).
Adds the same name on other endings: .com, .net, .org, .co.zw, .co, .io and .app.
Adds two common add on forms: yourname-tech and getyourname.
Checks up to 30 variants and reports which ones are registered, based on whether they publish name servers.

Why it matters

Phishing often uses a domain one character away from the real one, so an invoice from the wrong address looks right at a glance. Customers, parents and suppliers who receive mail from a near copy of your name may pay money or share passwords before anyone notices. Knowing which lookalikes exist lets you warn people, monitor them, or register the most dangerous ones yourself.

How to read the result

A registered lookalike is not automatically malicious. It may belong to an unrelated organisation or be parked by a domain reseller.
Variants that are registered recently, have MX records, or host a copy of your site deserve the closest attention.
Not registered means no name servers answered for it today. It could still be registered tomorrow.
The list is a sample of common patterns, not every possible variant.

How to fix what it finds

Look up each registered lookalike with the DNS and WHOIS tools to see who controls it and whether it can send email.
Register the most convincing variants of your own name, especially on .co.zw and .com, and redirect them to your real site.
Publish an enforcing DMARC policy on your real domain, so it at least cannot be spoofed directly.
Tell staff and customers which domains you genuinely use, and report abusive lookalikes to the registrar's abuse contact.

Want it fixed for you, or tested properly? See what a test would cost or book a free 30 minute call.

Questions people ask

What is typosquatting?

It is registering a domain that is a common misspelling or near copy of a real one, to catch mistyped visits or to make phishing emails look genuine.

Can I get a lookalike domain taken down?

If it is used for phishing or fraud, report it to the registrar's abuse contact with evidence such as the email headers. Disputes over trademark use can go through the registry's dispute process.

Should I buy every variation of my domain?

No, that is rarely practical. Focus on the few that are most convincing to your customers, usually your name on the other main endings and one character typos.