Free lookalike domain checker · typosquatting check · no sign-up
Who is pretending to be you?Find look-alike domains of your company in 30 seconds.
Checking look-alikes of
What to do next
Cross off the domains your company already owns.
Tell finance and support: emails from these domains are not you. Add them to your email filters.
Domains are one layer. Fake social profiles, support numbers and phishing pages are the next.
Look-alike senders reach your team by email.
T-Frame is a free Chrome extension that checks Gmail, Outlook and WhatsApp Web messages, shows the risk and why, and warns before a dangerous link opens. Install it for the people who pay invoices and answer customers.
Free. Install, sign up with your email, done.
T-Frame works on your computer, in Chrome.
Get the full AI Fraud Exposure Report
Trusterity checks look-alike domains, fake social profiles, cloned support numbers, phishing pages and leak exposure — and monitors them for you.
What we look for
Look-alike letters
0 for o, 1 for l, rn for m — kestre1bank.com.
Typos & swaps
Missing, doubled and swapped letters, and neighbouring keys.
Other endings
.co instead of .com, .net, .online, .support and more.
Extra words
yourcompany-login, secure-yourcompany, yourcompany-invoice.
Website?
Does the look-alike point to a live web server?
Email?
Can it send and receive email? That's what invoice fraud needs.
Train the people who get these emails
Questions
What is a look-alike domain?
A domain name that is visually or phonetically close to a real one — kestre1bank.com instead of kestrelbank.com, or yourcompany-support.com. Criminals use them for phishing emails, fake invoices and fake login pages.
How does this check work?
It generates a few hundred common variations of your domain (swapped and missing letters, look-alike characters, other endings, added words like “login” or “support”) and asks public DNS which of them are registered, have a website, or can send and receive email.
Why does email (MX) matter most?
A look-alike domain that can send email is ready for invoice fraud and CEO fraud: messages from it pass basic checks and look almost right to a busy person.
What should I do if I find one?
Check whether your company already owns it. If not, warn your finance and support teams, add it to email filters, and consider a takedown request through the registrar or hosting provider. Trusterity can investigate and monitor these for you.
Is my search stored?
No. The check runs in your browser. Only the generated domain names are sent to public DNS resolvers.
Is this a free typosquatting checker?
Yes — completely free, no sign-up, no limit on searches. It checks typosquatting, homoglyph, TLD and combosquatting variants and lets you download the results as CSV.