Free typosquat checker
Enter your domain and we will generate its lookalike permutations (typos, homoglyphs, swapped letters, TLD swaps and more) and check which ones are registered right now. Lookalikes with a working mail server are flagged, because a domain set up for email is the kind used to send mail that impersonates you. No signup, no credit card.
What this tool checks
- Permutation generation: the same 13-technique engine our paid platform uses (combosquatting, homoglyphs, IDN homoglyphs, character swaps, omissions, repetitions, insertions, bitsquatting, TLD swaps and more).
- Registration check: live DNS resolution to see which permutations exist right now.
- Mail capability: whether each lookalike has a working mail server (MX), a sign it is set up for email that could carry phishing or invoice fraud. A null MX, which declares that a domain accepts no email, does not count.
The free check is a snapshot of resolving domains only. The full platform also tracks dormant registrations (registered but serving no DNS, verified against the registry), certificate history and live TLS, page content and clone scores, risk scoring, and change history. Learn more about the threat in what is typosquatting, or if you already found something, read what to do when someone registers a lookalike of your domain.
Frequently asked questions
Is this really free?
Yes. No account, no email, no credit card. We limit scans per visitor to keep the service fast for everyone.
Why do some registered lookalikes not appear?
The free check tests the most convincing permutations and only reports domains that resolve in DNS. Registered but dormant domains, and the long tail of permutations, are covered by the full platform's registry-verified scans.
A lookalike of my domain has mail servers. What now?
Treat it seriously: a lookalike with a working mail server is set up for email that could impersonate your brand. Follow the steps in our guide, someone registered a lookalike of my domain: document evidence, report to the registrar and host, warn staff, and put the domain under monitoring.