Typosquatting & Lookalike Domain Checker

Find the lookalike domains attackers register to phish your customers.

For every domain you own, there are dozens of near-misses one keystroke away — a dropped letter, two swapped letters, a number that looks like a letter, the same name on a different extension. Attackers register these to catch mistyped traffic, send convincing phishing emails, and stand up fake versions of your site. A typosquatting checker generates those lookalikes the way an attacker would and tells you which ones are actually registered, so you can act before your customers get caught.

What it checks
  • Common misspellings — dropped, doubled and swapped letters
  • Adjacent-key typos based on the QWERTY keyboard layout
  • Homoglyphs — look-alike characters such as rn for m or 0 for o
  • Hyphenated and alternate-TLD versions of your domain (.net, .org, .co, .io …)
  • Which generated lookalikes are actually registered, and where they point
  • Newly registered lookalikes since the last check

Why it matters

Lookalike domains are the launchpad for phishing and brand impersonation: a believable misspelling in an email or ad can fool even careful users, and a freshly registered typosquat is often the first visible sign that a campaign against your brand is being set up. Because new lookalikes get registered all the time, a one-off check goes stale quickly — the value is in spotting a new registration early, while there is still time to warn users, file a takedown, or register the domain yourself.

How BrandSentryPro does it

Add your domain as a monitor and BrandSentryPro generates the common lookalike variants, checks which are registered via DNS, and lists each live one with its typo type and where it resolves. It re-checks over time and flags any newly registered lookalike — turning a slow, manual investigation into an automatic early-warning.

Frequently asked questions

What is typosquatting?
Typosquatting is registering domains that are deliberate misspellings or look-alikes of a real one — for example goggle.com for google.com — to capture mistyped traffic or impersonate the brand for phishing and scams.
How do I find typosquatting domains of my brand?
A typosquatting checker generates the likely variants (misspellings, homoglyphs, adjacent-key typos, alternate TLDs) and checks which are registered. BrandSentryPro does this automatically and keeps re-checking, so new lookalikes are flagged as they appear.
What should I do about a registered lookalike domain?
Review where it points and what it hosts. If it is being used to impersonate you, gather evidence and pursue a takedown with the registrar or host. For the most convincing variants, consider defensively registering them yourself so no one else can.

Related checkers

All in one place

Run this check automatically

Add a monitor and BrandSentryPro keeps every check running for you — with alerts the moment something needs attention.

Get started