LookalikeGuardParked vs live lookalike domains
A scan of a well-known brand often finds dozens of registered lookalikes. Most need no action. Triage comes down to what is actually on the domain.
Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.
What we look at
- Redirects to you: often a defensive registration by your own company. Lowers the score.
- Parked, placeholder or for sale: no real content right now (−15). Worth re-checking later, because parked domains can be switched on.
- Empty or erroring: little current risk.
- Live page: a real site is being served. Higher if its title or images show your brand, and much higher if it also has a password form.
We fetch up to 150 resolving lookalikes per scan and compare them with your real site. We don't log in or submit anything.
Real examples from our scanner
Copied from LookalikeGuard scans of public brands run on 2026-10-18, 2026-10-19 (UTC). Data comes from public DNS, RDAP registration records, certificate logs and a fetch of the page. A score is an automated risk signal, not a finding that anyone is doing something wrong: many lookalikes are defensive registrations, unrelated businesses or parked pages. Results change over time. Names of medium and high results are partly hidden for that reason.
| Brand | Lookalike | Score | Techniques | Top reasons |
|---|---|---|---|---|
| basecamp.com | bas••••pos.app | 100 (high) | ct-match, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +8 Contains your brand name (found in certificate logs) +15 Registered in the last 90 days (61 days ago) +5 TLS certificate issued 0 days ago |
| basecamp.com | basec•••••ammar.com | 93 (high) | ct-match, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +8 Contains your brand name (found in certificate logs) -15 Registered 8 years ago (long-standing) +5 TLS certificate issued 0 days ago |
| basecamp.com | basecamp305.store | 3 (info) | ct-match, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +8 Contains your brand name (found in certificate logs) -15 Registered 7 years ago (long-standing) +5 TLS certificate issued 0 days ago +5 Serves a live web page |
| allbirds.com | all•••dsa.shop | 100 (high) | ct-match, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +8 Contains your brand name (found in certificate logs) +5 TLS certificate issued 0 days ago +5 Serves a live web page (page title hidden) |
| allbirds.com | allbi•••••••icial.com | 70 (high) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'official' +25 Registered recently (7 days ago) +5 TLS certificate issued 7 days ago +5 Serves a live web page (page title hidden) |
| allbirds.com | allbirdsnordic.com | 3 (info) | ct-match, ct-seen | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +8 Contains your brand name (found in certificate logs) +5 TLS certificate issued 0 days ago -35 Managed by a corporate brand-protection registrar (e.g. MarkMonitor/CSC), often the brand's own defensive registration |
| gitlab.com | app•••lab.com | 95 (high) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +10 Your name plus the word 'app' +5 Registered within the last year (192 days ago) +5 Serves a live web page (page title hidden) +15 The page prominently shows your brand name |
| gitlab.com | git•••••uth.com | 65 (medium) | combosquat | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +20 Adds a sensitive word: 'auth' +15 Registered in the last 90 days (41 days ago) +5 TLS certificate issued 27 days ago |
| gitlab.com | gitlab.co | 0 (info) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.co) -40 Redirects to your own site (likely a defensive registration you own) |
A simple triage order
- Live page using your brand + login form
- New registration with a mail server
- Live unrelated page with a close name
- Parked: watch only
Monitoring re-checks these daily and alerts when one changes. Related: registration age, MX records.
What it does not do
LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.