Free Phishing & Typosquatting Domain Scanner

Enter your domain and instantly see how many lookalike domains exist for your brand. We generate typosquatting, homoglyph, TLD-swap, and combosquatting variations, then live-check each one for registration, DNS, and mail records — so you can see exactly which phishing domains are already out there impersonating you. No account, no email. Results in seconds.

Scan your domain for lookalikes

Enter the domain you want to protect (for example, your company's primary domain).

What is typosquatting?

Typosquatting is the practice of registering domains that are deliberate misspellings or near-matches of a legitimate brand — think gooogle.com or paypa1.com. Attackers use these lookalike domains to host phishing pages, send spoofed email, intercept mistyped traffic, and damage brand trust. Because a single character is all that separates them from the real thing, they are easy to register and dangerously effective.

How the lookalike domain scanner works

The scanner uses the same permutation techniques attackers do, generating candidate domains across several categories and then checking which ones are actually registered and live:

  • Typosquatting — character swaps, omissions, insertions, and transpositions.
  • Homoglyph & IDN attacks — visually identical characters from other alphabets (Cyrillic, Greek) and punycode.
  • TLD swaps — the same name on .net, .io, .co, .org and dozens of other extensions.
  • Combosquatting — your brand plus a keyword, like brand-login or brand-secure.

For every registered variant, the scanner pulls live DNS and WHOIS data: whether it resolves to an IP (an A record), whether it can send or receive email (an MX record), the registrar, and the registration date. Domains with active mail and recent registration dates are the most likely to be weaponized for phishing, so the scanner surfaces the most dangerous ones first.

From a one-time scan to continuous monitoring

This tool gives you a point-in-time snapshot. The problem is that new lookalike domains are registered constantly — the list you see today is not the list you'll have next week. DNS Spy's Phishing Sentinel monitors your domain around the clock, enriches every new variant with hosting, ASN, geolocation, and SSL detail, and alerts your team the moment a new impersonation domain appears.

Phishing Domain Scanner FAQ

Common Questions About Typosquatting & Lookalike Domains

What is a lookalike or phishing domain?
A lookalike domain is one registered to closely resemble a legitimate brand domain — through misspellings (typosquatting), visually similar characters (homoglyphs), different TLDs, or added keywords (combosquatting). They are commonly used for phishing emails, fake login pages, and brand impersonation.
How do I check if someone registered a domain similar to mine?
Enter your domain in the scanner above. It generates hundreds of plausible lookalike variations and live-checks each against DNS and WHOIS, returning the ones that are actually registered along with whether they resolve and can send email.
Is it legal to scan domains I do not own?
Yes. The scanner only performs public DNS and WHOIS lookups — the same information anyone can query. Security researchers and brand owners are welcome to use it for any domain.
Why are only some results shown in detail?
The free scan always shows the full count of detected lookalike domains plus the three most dangerous, fully enriched. Seeing the complete list and turning on continuous monitoring for new variants requires a free DNS Spy trial.
How often are new lookalike domains registered?
Constantly. Attackers register new typosquatting and combosquatting domains daily, often in waves around product launches, marketing campaigns, or major events. A one-time scan is a starting point; continuous monitoring is what catches them as they appear.

Lookalike domains don't stop appearing

DNS Spy's Phishing Sentinel monitors your brand for new typosquatting and impersonation domains around the clock and alerts your team the moment one is registered. Start your free 7-day trial with full access, no credit card required.

No credit card required • 7-day full Enterprise features available • Cancel anytime