Daily Lookalike Domain Threat Intelligence
Monitor newly registered domains that imitate your brand. Detect phishing infrastructure early, score the risk, and stop attacks before they reach customers.
Filters
Monitor Lookalike Domains Targeting Your Brand
The public feed tracks threats targeting major brands. With Detect, you receive real-time alerts the moment attackers register domains impersonating your brand, clients, or partners — often hours before they're used in phishing campaigns.
- Monitor your domains, subsidiaries, and partners
- Instant alerts on new registrations
- Automated takedown & expert assistance
Detected Lookalike Domains
These newly registered domains closely resemble legitimate brands and may be used for phishing, fraud, or malware delivery. Our detection engine continuously analyzes domain registrations, infrastructure signals, and threat intelligence sources and help you block these threats automatically.
| Lookalike | Target | Registrar | Risk | Website | Detected |
|---|---|---|---|---|---|
| active-verizon.com | verizon.com | Dynadot Inc | 10 | Offline | Mar 21, 2026 |
| ups-parcel.com BLOCKED | ups.com | Cloudflare, Inc. | 65 | Offline | Mar 21, 2026 |
| tmobile-support.com | t-mobile.com | Unstoppable Domains | 20 | Live | Mar 21, 2026 |
| active-tmobile.com | t-mobile.com | Dynadot Inc | 10 | Offline | Mar 21, 2026 |
| tdgateway.com | td.com | OwnRegistrar, Inc. | 40 | Live | Mar 21, 2026 |
| staampowered.com | steampowered.com | - | 10 | Live | Mar 21, 2026 |
| santandersupport.com BLOCKED | santander.com | Sav.com, LLC | 40 | Offline | Mar 21, 2026 |
| santander-security.com BLOCKED | santander.com | Sav.com, LLC | 40 | Offline | Mar 21, 2026 |
| myxflnity.com BLOCKED | xfinity.com | Cloudflare, Inc. | 65 | Offline | Mar 21, 2026 |
| 4minuteworkday.blog | workday.com | Automattic Inc. | 30 | Phishing | Mar 21, 2026 |
| smartworldpay.com | worldpay.com | HOSTINGER operations, UAB | 40 | Parked | Mar 21, 2026 |
| theworkdayrecruiters.com | workday.com | TUCOWS.COM, CO. | 35 | Live | Mar 21, 2026 |
| workdayexhale.com | workday.com | GoDaddy.com, LLC | 20 | Live | Mar 21, 2026 |
| plutoworkday.com | workday.com | Cloudflare, Inc. | 65 | Offline | Mar 21, 2026 |
| italy-whatsapp.sbs | whatsapp.com | Global Domain Group LLC | 10 | Offline | Mar 21, 2026 |
| whatsappautomaticreply.com | whatsapp.com | HOSTINGER operations, UAB | 45 | Live | Mar 21, 2026 |
| mm-whatsapp.com | whatsapp.com | TUCOWS.COM, CO. | 35 | Live | Mar 21, 2026 |
| whatsappcn6.com | whatsapp.com | GMO Internet, Inc. | 20 | Live | Mar 21, 2026 |
| erowhatsapp.tech | whatsapp.com | HOSTINGER operations, UAB | 40 | Parked | Mar 21, 2026 |
| whaatsapp.top | whatsapp.com | Dynadot LLC | 10 | Offline | Mar 21, 2026 |
| whatsappnails.com | whatsapp.com | NameSilo, LLC | 70 | Parked | Mar 21, 2026 |
| doubaoaiqqwechatonline.top | wechat.com | NameSilo, LLC | 35 | Offline | Mar 21, 2026 |
| ssdwechat.net | wechat.com | Hongkong Kouming International Limited | 10 | Offline | Mar 21, 2026 |
| whatsapp999.com | whatsapp.com | GMO Internet, Inc. | 20 | Live | Mar 21, 2026 |
| whatsappai.website | whatsapp.com | Dynadot Inc | 20 | Live | Mar 21, 2026 |
How exposed are the brands you follow?
See the full picture: which brands attackers target most, which registrars fuel the threat, and how risk scores are shifting over time.
Detection Trends (30 days)
Emerging Threat Signals
Domains often appear harmless at registration, but become dangerous once attackers configure phishing infrastructure. These domains recently showed risk score increases indicating potential weaponization.
-
paypaird.com15 → 35 +20+MX Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts)4 hours, 13 minutes ago
-
paypaired.com15 → 35 +20+MX Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts)4 hours, 13 minutes ago
-
klarnaco.com80 → 100 +20+Blacklisted (30pts) +Dangerous Email Provider (10pts) +Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Parked (5pts)4 hours, 13 minutes ago
-
icloudlocation.online40 → 55 +15+Dangerous Registrar (25pts) +Very Recent Domain (10pts) +Website Phishing (20pts)4 hours, 10 minutes ago
-
icioud-localizado.sbs35 → 50 +15+MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts)1 day, 4 hours ago
-
docusign.ink35 → 45 +10+Dangerous Registrar (25pts) +Very Recent Domain (10pts) +Website Live (10pts)4 hours, 11 minutes ago
-
coinbasesupportes.com40 → 70 +30+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Parked (5pts)4 hours, 10 minutes ago
-
checkout-almagemea.online40 → 45 +5+Website Live (10pts) -Website Parked (5pts)4 hours, 7 minutes ago
-
quanlybooking.com10 → 50 +40+MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Live (10pts)1 day, 4 hours ago
-
spaceconnectbooking.com10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)4 hours, 3 minutes ago
Need Professional Domain Protection?
We offers comprehensive brand protection with real-time monitoring, automated takedowns, and expert support.