Free tool
Has someone registered a copy of your domain?
Fake invoices often come from a domain one letter off from the real one. Type yours and we try well over a hundred typo and look-alike versions, then show which are already registered and which are set up to send or receive email. It only reads public DNS; nothing is loaded from any of the domains.
Why it matters
An enforced DMARC policy stops anyone sending from your exact domain. It does nothing about yourbusines.com. That’s why invoice and wire scams so often come from a domain one letter off.
What we try
Other endings (.com, .net, .org, .co and more), missing, doubled and swapped letters, neighboring keys, look-alike characters like rn for m and 0 for o, and a missing dot after www.
What to do with it
Register the obvious ones and point them at your real site, lock each with a reject DMARC policy so they can’t send mail, and tell customers the one address you really use.
Pair it with the email forgery check, which tells you whether someone can send from your exact domain. We set both up for clients as part of email security.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.