Look-alike domains
What do I do about a domain that looks like ours?
A look-alike domain is a name registered to pass for yours, often to ask your clients to pay a new account.
Last read from the sources at the foot of this page.
01
Which questions do these pages answer?
One question a page, each with the source it rests on and the date we read it.
- What a look-alike domain is
- Letter swaps in look-alike domains
- Added or missing letters
- A hyphen or extra word
- Your name under another ending
- Letters from another alphabet
- Your name inside another address
- Display name versus address
- Spotting a look-alike email
- DMARC and look-alike domains
- Does a look-alike have mail?
- Who registered a look-alike?
- Defensive registrations
- Thread hijacking
- Report a look-alike to its registrar
- When a registrar does not act
- The UDRP for look-alike domains
- Uniform Rapid Suspension for look-alikes
- Report a look-alike website to its host
- Microsoft 365 impersonation protection
- Google Workspace look-alike domain setting
- External sender tags
- The call-back rule
- A client got an email from a look-alike
- New bank details from a supplier
- Report look-alike fraud to the authorities
- Tell clients how you ask for payment
- After a payment to a look-alike
- CIRA dispute policy for .ca look-alikes
Sources
Where does this come from?
- ICANN: Uniform Domain-Name Dispute-Resolution Policyicann.orgRead 14 October 2026
03 · Check my firm
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Received
A person reads your firm from outside and emails your outside reading within 72 hours, from [email protected].
What happens next
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
While you wait: the 72 hours · 34 seconds, no sound
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/