Check a domain
What we check
We generate variants of your domain the way scammers do, with the open-source dnstwist engine: missing, doubled and swapped letters, neighbouring keys, look-alike characters from other alphabets, hyphens, other endings such as .xyz or .app, and words scammers add, such as "claim", "airdrop" or "app". Then we ask DNS which of up to 500 variants exist right now.
This free check is a snapshot. It does not see subdomains on free hosts (name.vercel.app), and it does not see a brand-new lookalike that differs more. Learn more in how impersonation scams work.
What to do with the list
- Open nothing directly from the list on a computer with a wallet. Check a domain in a sandboxed browser or with a screenshot service.
- For each fake, find the registrar with our abuse contact lookup and send a takedown request.
- Report the live phishing ones to Google Safe Browsing too, so browsers warn visitors.
- Publish your official links page, so your users can check a link themselves.