Daily Lookalike Domain Threat Intelligence
Monitor newly registered domains that imitate your brand. Detect phishing infrastructure early, score the risk, and stop attacks before they reach customers.
Filters
Monitor Lookalike Domains Targeting Your Brand
The public feed tracks threats targeting major brands. With Detect, you receive real-time alerts the moment attackers register domains impersonating your brand, clients, or partners — often hours before they're used in phishing campaigns.
- Monitor your domains, subsidiaries, and partners
- Instant alerts on new registrations
- Automated takedown & expert assistance
Detected Lookalike Domains
These newly registered domains closely resemble legitimate brands and may be used for phishing, fraud, or malware delivery. Our detection engine continuously analyzes domain registrations, infrastructure signals, and threat intelligence sources and help you block these threats automatically.
| Lookalike | Target | Registrar | Risk | Website | Detected |
|---|---|---|---|---|---|
| checkout.world | checkout.com | - | 25 | Live | Feb 03, 2026 |
| docusignportal.com | docusign.com | Amazon Registrar, Inc. | 10 | Live | Feb 03, 2026 |
| cltl.com | citi.com | GoDaddy Online Services Cayman Islands Ltd. | 25 | Live | Feb 03, 2026 |
| booking-claim.com | booking.com | GoDaddy.com, LLC | 10 | Live | Feb 03, 2026 |
| checkout.to | checkout.com | NAMECHEAP | 50 | Live | Feb 03, 2026 |
| my-docusign.com | docusign.com | OVH, SAS | 40 | Live | Feb 03, 2026 |
| httpbooking.com | booking.com | Media Elite Holdings Limited | 10 | Live | Feb 03, 2026 |
| elti.com | citi.com | CSL Computer Service Langenbach GmbH d/b/a joker.com | 25 | Live | Feb 03, 2026 |
| docusign-verify.com | docusign.com | OVH, SAS | 10 | Live | Feb 03, 2026 |
| booking-secure.com | booking.com | Network Solutions, LLC | 5 | Parked | Feb 03, 2026 |
| eit1.com | citi.com | GoDaddy.com, LLC | 10 | Live | Feb 03, 2026 |
| mail-docusign.com | docusign.com | Gandi SAS | 15 | Offline | Feb 03, 2026 |
| cítí.com (xn--ct-njab.com) BLOCKED | citi.com | NAMECHEAP INC | 100 | Live | Feb 03, 2026 |
| claimbooking.com | booking.com | NAMECHEAP INC | 25 | Offline | Feb 03, 2026 |
| securedocusign.com | docusign.com | GoDaddy.com, LLC | 30 | Offline | Feb 03, 2026 |
| c1ti.com | citi.com | NamePal.com #8018 Inc. | 35 | Live | Feb 03, 2026 |
| chasxe.com BLOCKED | chase.com | Cloudflare, Inc. | 30 | Offline | Feb 03, 2026 |
| cit1.com | citi.com | TurnCommerce, Inc. DBA NameBright.com | 5 | Parked | Feb 03, 2026 |
| checkout.so | checkout.com | Key-Systems | 50 | Live | Feb 03, 2026 |
| cha2se.com | chase.com | Gabia, Inc. | 0 | Offline | Feb 03, 2026 |
| checkout.nz | checkout.com | 1API | 10 | Live | Feb 03, 2026 |
| danskebank.org | danskebank.no | Key-Systems GmbH | 35 | Live | Feb 03, 2026 |
| online-citi.com | citi.com | Key-Systems GmbH | 45 | Parked | Feb 03, 2026 |
| checkout.ml | checkout.com | - | 25 | Live | Feb 03, 2026 |
| mobile-citi.com BLOCKED | citi.com | Name.com, Inc. | 30 | Offline | Feb 03, 2026 |
How exposed are the brands you follow?
See the full picture: which brands attackers target most, which registrars fuel the threat, and how risk scores are shifting over time.
Detection Trends (30 days)
Emerging Threat Signals
Domains often appear harmless at registration, but become dangerous once attackers configure phishing infrastructure. These domains recently showed risk score increases indicating potential weaponization.
-
whatsappmorocco.icu10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)3 minutes ago
-
intuitdocs.com65 → 70 +5+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Parked (5pts)3 hours, 41 minutes ago
-
mail-ebay.com35 → 65 +30+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts)6 hours, 51 minutes ago
-
go-ebay.com35 → 65 +30+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts)6 hours, 51 minutes ago
-
kraken.fyi0 → 5 +5+Website Parked (5pts)23 hours, 54 minutes ago
-
fini0821cloud.online10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)23 hours, 52 minutes ago
-
oneapicloud.com35 → 45 +10+Dangerous Registrar (25pts) +Very Recent Domain (10pts) +Website Live (10pts)23 hours, 52 minutes ago
-
githubsearcher.com45 → 55 +10+Dangerous Registrar (25pts) +Very Recent Domain (10pts) +Website Phishing (20pts)23 hours, 54 minutes ago
-
whatsappgermany.sbs10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)2 days ago
-
apostarconskrill.com10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)1 day, 23 hours ago
Need Professional Domain Protection?
We offers comprehensive brand protection with real-time monitoring, automated takedowns, and expert support.