How it works

1. Generate variations. Missing, doubled, swapped and neighbouring-key letters; single bit flips; look-alike characters including Unicode (IDN); hyphens; other extensions (.net, .co, .shop and more); and your name combined with words like login, secure, support, verify, pay.
2. Search certificate logs. Public Certificate Transparency logs (via crt.sh) show certificates issued for any domain containing your name, which finds variations we did not generate.
3. Check DNS. Each variation is looked up. Only registered domains are reported.
4. Enrich the top results. Registration date (RDAP), whether the site redirects to you, looks parked, or serves a live page.
5. Score. Each finding gets 0 to 100 from simple, additive rules. Every rule that fired is shown next to the finding.

Many lookalikes are harmless: defensive registrations by the brand itself, unrelated businesses with a similar name, or parked domains. The reasons column is there so you can judge quickly.