TLD swap checker
The simplest lookalike keeps your exact name and changes the ending: yourbrand.co instead of yourbrand.com. People rarely notice the ending, especially on phones.
Free, no account needed. A scan takes 15 to 60 seconds. You get a shareable result link.
What the scan checks
- Your name on common alternative endings, .com, .net, .org, .co, .io, .app, .shop, .store, .online, .site, .xyz, .info, .biz and .us, plus the short version of two-part endings like .co.uk.
- For each registered one: website, mail server, registration age, and whether it redirects to you (often your own defensive registration).
- Same name, other ending scores +12 before the other signals.
Many TLD swaps are owned by unrelated businesses with the same name. That's normal. The reasons column shows which ones look set up to imitate you.
Real examples from our scanner
Copied from LookalikeGuard scans of public brands run on 2026-10-18, 2026-10-19 (UTC). Data comes from public DNS, RDAP registration records, certificate logs and a fetch of the page. A score is an automated risk signal, not a finding that anyone is doing something wrong: many lookalikes are defensive registrations, unrelated businesses or parked pages. Results change over time. Names of medium and high results are partly hidden for that reason.
| Brand | Lookalike | Score | Techniques | Top reasons |
|---|---|---|---|---|
| basecamp.com | basecamp.xyz | 44 (low) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +12 Your exact name on a different extension (.xyz) -5 Registered 3 years ago +5 TLS certificate issued 7 days ago |
| basecamp.com | basecamp.site | 42 (low) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.site) +5 Registered within the last year (139 days ago) |
| basecamp.com | basecamp.info | 0 (info) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.info) -15 Registered 16 years ago (long-standing) -35 Managed by a corporate brand-protection registrar (e.g. MarkMonitor/CSC), often the brand's own defensive registration |
| allbirds.com | al••••ds.shop | 57 (medium) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.shop) +5 Serves a live web page +15 The page prominently shows your brand name |
| allbirds.com | allbirds.online | 27 (low) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.online) +5 Registered within the last year (353 days ago) -15 Looks parked, placeholder or for sale (no real content right now) |
| allbirds.com | allbirds.org | 7 (info) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.org) -15 Registered 13 years ago (long-standing) -15 Looks parked, placeholder or for sale (no real content right now) |
| gitlab.com | gitlab.xyz | 37 (low) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +15 Has mail servers (MX), so it can send or receive email +12 Your exact name on a different extension (.xyz) -15 Registered 10 years ago (long-standing) |
| gitlab.com | gitlab.app | 32 (low) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.app) -5 Registered 2 years ago |
| gitlab.com | gitlab.co | 0 (info) | tld-swap | +10 Domain is registered (has DNS) +15 Resolves to an IP address, so a website can be live +12 Your exact name on a different extension (.co) -40 Redirects to your own site (likely a defensive registration you own) |
Related: combosquatting, misspellings.
What it does not do
LookalikeGuard is monitoring and early warning. It does not take down domains, send legal notices, or give legal advice. Scores are automated and can be wrong in both directions: a high score is a reason to look, not proof of abuse. Many lookalike domains are parked, owned by unrelated businesses, or registered defensively by the brand itself; you can mark those as yours or dismiss them.