LookalikeGuardCombosquatting checker
Combosquatting is registering your brand name joined to another word: yourbrand-login.com, secure-yourbrand.com, yourbrandpay.net. There is no typo to spot, so the name looks plausible in an email or a text message. That is why it is popular for phishing and fake support pages.
Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.
What the scan checks
- We generate your name joined to these words, before and after, with and without a hyphen, on .com, .net and your own ending: login, secure, support, account, verify, help, billing, pay, app, my, official, shop, auth, portal, service.
- Sensitive words (login, signin, secure, verify, account, auth, billing, pay, wallet, password, update, unlock, recovery) add +20 to the score; other words add +10.
- Certificate Transparency logs reveal combinations we didn't generate ourselves, such as your name with a product or city.
The name alone is not proof of anything. The score rises further only when the domain has infrastructure (a website, a mail server), was registered recently, or its page shows your brand next to a login form. See how scoring works.
Real examples from our scanner
Copied from LookalikeGuard scans of public brands run on 2026-10-18, 2026-10-19 (UTC). Data comes from public DNS, RDAP registration records, certificate logs and a fetch of the page. A score is an automated risk signal, not a finding that anyone is doing something wrong: many lookalikes are defensive registrations, unrelated businesses or parked pages. Results change over time. Names of medium and high results are partly hidden for that reason.
| Brand | Lookalike | Score | Techniques | Top reasons |
|---|---|---|---|---|
| basecamp.com | basecamp-shop.com | 44 (low) | combosquat, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +10 Your name plus the word 'shop' -15 Registered 14 years ago (long-standing) +5 TLS certificate issued 0 days ago |
| basecamp.com | basecampofficial.com | 40 (low) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'official' +5 Registered within the last year (277 days ago) |
| basecamp.com | basecampshop.com | 5 (info) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'shop' -15 Registered 11 years ago (long-standing) -15 Looks parked, placeholder or for sale (no real content right now) |
| allbirds.com | allbi•••••••icial.com | 70 (high) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'official' +25 Registered recently (7 days ago) +5 TLS certificate issued 7 days ago +5 Serves a live web page (page title hidden) |
| allbirds.com | allb•••••shop.com | 65 (medium) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'shop' +25 Registered recently (10 days ago) +5 TLS certificate issued 10 days ago |
| allbirds.com | shopallbirds.com | 5 (info) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'shop' -15 Registered 14 years ago (long-standing) -15 Looks parked, placeholder or for sale (no real content right now) |
| gitlab.com | app•••lab.com | 95 (high) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'app' +5 Registered within the last year (192 days ago) +5 Serves a live web page (page title hidden) +15 The page prominently shows your brand name |
| gitlab.com | git•••••uth.com | 65 (medium) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +20 Adds a sensitive word: 'auth' +15 Registered in the last 90 days (41 days ago) +5 TLS certificate issued 27 days ago |
| gitlab.com | mygitlab.com | 5 (info) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'my' -15 Registered 10 years ago (long-standing) -15 Looks parked, placeholder or for sale (no real content right now) |
What to do with a result
For a high score: check the page in a safe browser, warn your team or customers, and report it to the registrar or host listed in the result. LookalikeGuard does not do takedowns. Related: typosquatting monitor, why mail servers matter.
What it does not do
LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.