Free · live registry data · no login
Typosquat & Lookalike Domain Scanner
Which lookalikes of your brand are registered, and by whom.
How it works
Typosquat scanner: which lookalikes of your domain are already registered
Give us your brand domain and we generate the misspellings and lookalikes an attacker would register: dropped and doubled letters, swapped neighbours, 0 for o and rn for m, keyboard slips, added hyphens and the obvious .net/.co/.ng swaps. We then check each one live. The highest-risk variants are run through our registry availability check with prices; the remainder get a DNS lookup to see if they resolve. Registered lookalikes that resolve are the ones to investigate; available ones are cheap to defensively register.
Results appear here after you click Scan lookalikes.
How this works
- 1
Generate lookalikes
Up to 30 variants using omission, transposition, repetition, homoglyphs, keyboard neighbours, hyphens, affixes and extension swaps.
- 2
Check the top 8 live
The highest-risk variants go through our registry availability API with real first-year and renewal prices.
- 3
DNS the rest
Every other variant gets A and MX lookups over DNS-over-HTTPS to show whether it resolves and can receive mail.
Frequently asked questions
- What is typosquatting?
- Registering misspellings or lookalikes of a known domain to catch mistyped traffic, serve ads, or impersonate the brand for phishing. Common forms are dropped letters (gogle.com), swapped letters, homoglyphs like rn for m, and the same name on a different extension.
- Should I buy every variant of my domain?
- No; there are thousands. Buy the handful a real customer might type: your name on .net and .co (and .ng or your country code), the most likely single-letter typo, and the hyphenated form if your name is two words. Redirect them all to your main site.
- A lookalike is registered. What can I do?
- First see what it does. Parked pages and unrelated businesses are usually not worth fighting. If it impersonates you, report it to the registrar's abuse contact and hosting provider, and if you own the trademark you can file a UDRP complaint to have it transferred.
- Why does the tool check only 8 names at the registry?
- Each registry availability check is a real round trip to the registry and the scan would take too long otherwise. The remaining variants get fast DNS lookups, which reliably show whether a name is in active use.
- How much does defensive registration cost?
- Roughly the price of one domain per variant per year. At MailShrine a .com is about $12.99 a year, .net and .co are similar, and the prices shown in the results are live first-year and renewal rates.
Every MailShrine domain includes WHOIS privacy, transfer lock, Anycast DNS with DNSSEC and two business mailboxes.