Lookalike Domain Finder
Invoice fraudsters register domains that look almost exactly like yours, such as yourcornpany.co.uk with "rn" instead of "m", then email your customers asking them to pay a "new" bank account. Find out which lookalikes of your domain already exist, and which can send email.
- Hundreds of variations
- Spots ones that can send email
- Brand protection
What to do about lookalikes
- One with email (MX records) is the biggest risk: it can send convincing emails as you. Warn your finance team and customers, and report it to the registrar's abuse contact (shown in a WHOIS lookup).
- Tell customers how you'll never change bank details: by email alone. Ask them to phone a known number to confirm any change.
- Register the most obvious variations yourself (your name with .com, .co.uk and .uk is a sensible minimum) and point them at your site.
- Set a DMARC policy of reject on your own domain so nobody can send email as your real address. Build one with the record builder.
Not every match is a threat
- Some lookalikes belong to unrelated, genuine businesses with similar names, or to you already.
- Parked domains are held by domain sellers and usually just show adverts or a "for sale" page.
- Check when a suspicious one was registered: a lookalike registered recently, especially just before a fraud attempt, is a strong warning sign.