AI ClicksScan · Detect · Secure
Brand Protection Scanner

Who's impersonating
your domain?

Phishing and brand-impersonation campaigns start with a lookalike domain — a swapped letter, a homoglyph, a different TLD. This scan generates the high-value permutations of your domain, resolves them via DNS, and flags the ones that are registered and serving a live site so you can act before your customers are targeted.

Run brand scan Email spoofing check
7
Permutation types
24–60
Variants tested
DNS + HTTP
Check
A–F
Grade scale

How it works

From permutation to takedown

Permutation Engine

  • Character omission, transposition, repetition
  • Adjacent-key typos
  • Homoglyph swaps (o→0, l→1, rn→m)
  • TLD swaps (.com→.co/.io/.net…)
  • Brand-abuse variants (-login, -secure, app…)

Exposure Check

  • DNS resolution of each permutation
  • Registered-vs-available status
  • Live-site probe on registered lookalikes
  • High-risk variant flagging

Response Actions

  • Takedown targets (live lookalikes)
  • Defensive-registration candidates
  • Certificate-transparency monitoring
  • DMARC p=reject to block email spoofing

Live scanner

Paste your domain to find registered lookalikes. Deep mode tests more permutations.

Brand Protection Scan· brand protection checks only
Deep scan: Pro plan →
Create free account·Sign in·3 free instant scans left today

Paste a URL above and hit Scan →

Brand Protection Scan · Instant scan returns in ~5 seconds

TLS · DMARC · DNSSECAI content detectionBlockchain intelligenceGEO / llms.txt