For businesses
Imitation starts with a name. This check builds the domains somebody would register to look like you — misspellings, swapped letters, your own name with a login word in front of it — and asks public DNS whether each one already answers. Then it reads your own records and shows you what they leave open.
For every candidate we ask public DNS for the address records and for the mail records, and for your own domain we read the TXT record at the domain and at _dmarc. A name with an address can serve a page; a name with a mail record can receive email. Both are facts the registrant published themselves — we read them, we do not guess them.
There is no database behind this and no key from another company. The lookups go from your browser to public DNS resolvers, Cloudflare and Google, and this site never sees the question you asked. A resolver learns one candidate name and one record type, both of which are already public.
We register nothing, buy nothing and report nothing on your behalf. Any name that turns out to be an honest neighbour is left exactly as it was.
No check can list what does not exist: a name nobody has registered yet is invisible to everybody, including us, and a name registered after this report was generated will not be in it. It also cannot tell you who registered a name, when, or with what intention — a registered look-alike is not by itself a crime. Impersonation that never uses a domain at all, such as a free mailbox with your name on it, does not appear here, which is why the email and link checkers are worth as much as this page. And the most convincing imitation of all is not a whole domain: it is a page on a host under somebody else's domain, with your name sitting in the address of the link. Nothing here can find that, because finding it would mean guessing a name we do not know — a search engine or a certificate log can, which is why we point you at them instead of pretending to cover it.
An address answering only tells you a server is there. Whether the page is copying your own site, asking for card details, or harmless takes a second check.
Check what a site servesBrand watch
Four steps, in the order that gets a result. The first one is free, takes an afternoon, and does not depend on anybody else answering an email.
Publishing a policy that ends in reject does not stop somebody registering a similar name, and it does stop their mail from reaching the inboxes of people who trust you. It is free, it is one record, and it takes effect as soon as it is published. Everything else on this page depends on a registrar or a host deciding to act, which is why this one goes first.
A complaint that reads they took my name gets a form reply, because a registered domain is not by itself illegal. Name the domain, say what it answers with, say that it carries mail records for a domain you own, and ask for it to be investigated. The registrar is in the public record for that domain, and the address it points at is in the report above.
Invoice fraud does not need your customers to be careless, only busy. Accounts payable is where a bill gets paid after a glance at a domain that looks right. Tell them the domain you will always use, that anything else is not you, and that a change of bank details is confirmed by phone with a number they already have.
Save this page as a PDF and repeat the check every month or two. The valuable fact is not the list you have today, it is the difference between this list and the next one: a name that answered nothing and later has mail records is somebody getting ready.