Skip to content
Get incident response
Kytheos

Free tool

Lookalike domain finder

Find registered domains that imitate yours and see which are set up to send email or host a website. Criminals use them to phish your customers and staff.

We generate the names a criminal would register and look each one up in public DNS. Nothing is sent to the lookalike domains. Results are kept for ten minutes so repeat searches are fast, then discarded.

How it works

Generate

Other endings, brand plus a word (login, secure, support), look-alike characters, missing, swapped or doubled letters, neighbouring keys, and foreign letters that look the same.

Look up

Each name is checked in public DNS: whether it exists, whether it points at a website (IPv4 or IPv6) and whether it can receive email.

Rate

High when it can do both, medium for one, low when it is registered with neither. Each finding shows the records we saw.

We cannot see who owns a domain. Some lookalikes may be yours or a partner's, registered to protect the brand. If a lookup fails we say how many names were not checked, and we never count them as safe.

All free tools