Enter your domain and Nameward generates a few hundred lookalikes: missing,
doubled and swapped letters, keyboard typos, look-alike characters (rn for
m, 1 for l), foreign letters that look Latin, other endings (.co,
.net), added words (-invoices, -billing) and numbers (brand1). It
then checks which of them are registered and what they're set up to do.
What the results mean
| Status | What we saw |
|---|---|
| ■ Act now | Registered in the last year and has a mail server: it can send email that looks like it comes from you. |
| ▲ Watch | Registered but parked, or able to send email but older (it may be another business). |
| ● Fine | Uses your own nameservers, so it's probably yours (a defensive registration). |
A brand-new lookalike with a mail server is the classic set-up for invoice fraud: a fake invoice "from" you or a supplier, with new bank details.
What to do with a match
- Act now: warn your finance team and customers, then follow Someone is pretending to be my company.
- Get it taken down: see How to report a lookalike domain.
- Protect your real domain so nobody can send as you exactly: DMARC p=none to p=reject.
What this check can't see
It finds lookalikes we can generate and resolve today. Domains registered tomorrow, or with unusual spellings, need ongoing watching: monitoring re-checks every day and alerts you when a lookalike starts sending email.