Who has registered a copycat of your domain?
Type your business domain. We check the typo and look-alike versions a scammer would use, and show you which ones already exist — and which can send email pretending to be you.
Nothing is saved. We only look up public domain records.
Why lookalike domains cost businesses the most
The most expensive fraud in Australian business isn't a hack — it's a real invoice with one thing changed. A scammer registers a domain that reads almost the same as your supplier's, emails a copy of a genuine invoice with new bank details, and waits. The wording is right, the logo is right, the amount is right. Only the account number is wrong.
Because the email comes from a domain that genuinely exists and genuinely passes email checks, spam filters usually let it through. The person paying it has no reason to be suspicious — the address looks like the one they've used for years.
Knowing which lookalikes exist is the cheapest early warning you can get. It costs nothing, takes seconds, and tells your accounts team exactly which addresses to distrust.
Questions
What is a lookalike domain?
A lookalike domain is a web address registered to imitate a real business — for example smithsteeel.com.au instead of smithsteel.com.au. Scammers use it to email your customers or suppliers from an address that looks genuine, usually to redirect an invoice payment to their own bank account.
How does this checker work?
We generate the typo, look-alike character and alternate domain-ending variants a scammer would realistically register against your domain, then check which ones actually exist and which are set up to send and receive email. Nothing is stored and no sign-up is needed.
A lookalike of my domain is registered — what should I do?
Registered alone is common (domain investors park names). The dangerous ones are those with mail records, because they can send email that appears to come from your business. Warn your accounts team and your customers, add the domain to your email block list, consider registering the closest variants yourself, and check every payment instruction against verified bank details before you pay.
Does this prove someone is attacking my business?
No. It shows exposure, not an active attack. It tells you which lookalikes exist today so you can watch for them and stop a redirected invoice before the money leaves.
How the scam works and how to stop a payment before it leaves.
Check if a work email or password has appeared in a known breach.