Free security tool
Find registered domains that look like yours, from missing letters to look-alike characters and other extensions, and see which of them can receive email.
Instant result, no email needed.
CloudSpex generates common variations of your domain (missing, doubled or swapped letters, neighbouring keys, look-alike characters such as 0 for o or rn for m, hyphens, and other extensions) and checks in DNS which are registered. A registered look-alike may be a defensive registration, an unrelated business or a phishing domain; the ones that accept email (MX) deserve the closest look. The list of variations is not exhaustive.
To see who controls a look-alike, use the Domain Expiry Checker or the ASN & RPKI Lookup.
A look-alike that can receive email can also be used to send convincing phishing and invoice fraud: replies to it reach the attacker.
For the most likely ones (other extensions, obvious typos) it is a cheap defence. Registering every variation is not practical.
Report phishing to the registrar's abuse contact and the hosting provider, and use your DMARC reports to see whether it sends mail claiming to be you.
Add your domain to CloudSpex to monitor your own domain's DNS and email security continuously.
Start Monitoring Free