Brand protection · checked 13 October 2026
Lookalike domain check
Criminals register domains one letter away from yours, like yourc0mpany.com, yourcompany-billing.com or yourcompany.co, then email your customers "new bank details" or ask staff to log in. Our check tries the most common tricks and tells you which ones are taken.
What we try
- Lookalike characters: 0 for o, 1 or l for i, rn for m, vv for w.
- Other endings: .net, .co, .io, .shop, .online and more.
- Typos: a missing, doubled or swapped letter, or a neighbouring key.
- Added words: -login, -secure, -support, -billing, -pay.
Registered doesn't always mean dangerous
Many lookalikes are parked by domain investors, or owned by you or an unrelated business. The warning signs are a lookalike that can receive email (it has mail servers), one registered recently, or one that copies your website.
What to do about a bad one
- Tell staff and key customers which domain to distrust, and to confirm any change of bank details by phone.
- Report it to the registrar's abuse contact (shown in a WHOIS/RDAP lookup) and, if it hosts a copy of your site, to the web host.
- If it uses your trademark, a UDRP complaint can transfer it to you.
- Consider registering the most obvious lookalikes yourself; they cost about $10 a year each.