Free Lookalike Domain Checker
Check whether common typosquat and lookalike permutations of your domain are already registered.
Need to monitor this across every client domain you manage? ActiScan does bulk scanning, scoring, and white-labeled reporting for MSPs.
How to Use the Lookalike Domain Checker
Enter your domain
No http:// prefix – just the domain itself (e.g. company.com).
Click Check
ActiScan generates common typo/lookalike permutations and checks which ones actually resolve in DNS. Takes a few seconds – dozens of real lookups happen behind the scenes.
Review what's registered
Anything flagged is worth a closer, careful look – not proof of malicious intent by itself.
What Are Lookalike (Typosquat) Domains?
A lookalike domain is a variant of a real domain designed to be mistaken for it – through a typo, a substituted character that looks similar, a different top-level domain, or a small structural change. Attackers register these to send phishing email that appears to come from a trusted brand, or to catch traffic from people who simply mistype the real address.
How this checker works, honestly: it generates a bounded set of realistic permutations across several well-known techniques (character omission, insertion, transposition, adjacent-keyboard-key typos, common ASCII lookalike substitutions, hyphenation, and common TLD swaps), then checks each one for DNS presence only – it never visits a lookalike domain's actual content. This is a representative sample of the most common real-world techniques, not an exhaustive scan of every possible variant.
Next Steps
Checking a suspicious link instead?
Check a specific URL against known phishing databases.
Phishing URL Checker →Want your own domain's authentication checked?
A full scan across every email-security record type, with an A-F grade.
Domain Security Analyzer →Want ongoing monitoring?
ActiScan scans on a schedule and alerts you when something changes.
Start free →Frequently Asked Questions
Is this lookalike domain checker free?
Yes – check any domain for free, no signup required.
Does a registered lookalike mean someone is impersonating me?
Not necessarily – some are defensive registrations by legitimate brand owners, some are unrelated third parties, and some genuinely are set up to impersonate. Registration alone isn't proof; it's a starting point for a closer look at what's actually hosted there.
Does this check what's hosted on the lookalike domain?
No, deliberately – this only checks whether a domain resolves in DNS at all. Actively fetching content from a domain that could be malicious isn't something this tool does.
How comprehensive is the permutation list?
It covers the most common, practical categories – omissions, insertions, transpositions, adjacent-keyboard typos, common ASCII lookalike substitutions, hyphenation, and common TLD swaps – capped to a reasonable number of real DNS lookups per check. It does not cover full Unicode homograph/IDN attacks (e.g. Cyrillic characters that look identical to Latin ones), which need a much larger dataset.
What should I do if I find a registered lookalike?
Look at what's actually there (safely, e.g. via a URL scanner rather than visiting directly) before assuming the worst, and consider defensively registering close variants of your own domain going forward.