Daily Lookalike Domain Threat Intelligence
Monitor newly registered domains that imitate your brand. Detect phishing infrastructure early, score the risk, and stop attacks before they reach customers.
Filters
Monitor Lookalike Domains Targeting Your Brand
The public feed tracks threats targeting major brands. With Detect, you receive real-time alerts the moment attackers register domains impersonating your brand, clients, or partners — often hours before they're used in phishing campaigns.
- Monitor your domains, subsidiaries, and partners
- Instant alerts on new registrations
- Automated takedown & expert assistance
Detected Lookalike Domains
These newly registered domains closely resemble legitimate brands and may be used for phishing, fraud, or malware delivery. Our detection engine continuously analyzes domain registrations, infrastructure signals, and threat intelligence sources and help you block these threats automatically.
| Lookalike | Target | Registrar | Risk | Website | Detected |
|---|---|---|---|---|---|
| loginsalesforce.com BLOCKED | salesforce.com | GoDaddy.com, LLC | 70 | Live | Feb 03, 2026 |
| payoneer.services | payoneer.com | - | 40 | Live | Feb 03, 2026 |
| sdhwab.com | schwab.com | Dominet (HK) Limited | 5 | Offline | Feb 03, 2026 |
| salesforcesecurity.com | salesforce.com | GoDaddy.com, LLC | 10 | Live | Feb 03, 2026 |
| scihwab.com BLOCKED | schwab.com | GMO Internet, Inc. | 30 | Offline | Feb 03, 2026 |
| payoneer.ro | payoneer.com | Tool Domains Ltd | 0 | Offline | Feb 03, 2026 |
| salesforceonline.com | salesforce.com | GoDaddy.com, LLC | 10 | Live | Feb 03, 2026 |
| salesforceuser.com | salesforce.com | GoDaddy.com, LLC | 15 | Offline | Feb 03, 2026 |
| payoneer.no | payoneer.com | - | 0 | Offline | Feb 03, 2026 |
| payoneer.cm | payoneer.com | Netcom.cm Sarl | 0 | Offline | Feb 03, 2026 |
| proton.vn | proton.me | - | 0 | Offline | Feb 03, 2026 |
| payoneer.org | payoneer.com | Dynadot Inc | 25 | Live | Feb 03, 2026 |
| proton.us | proton.me | Name.com, Inc. | 25 | Live | Feb 03, 2026 |
| netflix.qa | netflix.com | - | 20 | Phishing | Feb 03, 2026 |
| proton.services | proton.me | - | 15 | Offline | Feb 03, 2026 |
| payoneer.me | payoneer.com | Alibaba Cloud Computing (Beijing) Co., Ltd. | 35 | Live | Feb 03, 2026 |
| proton.pm | proton.me | GANDI | 30 | Offline | Feb 03, 2026 |
| netflix.ps | netflix.com | - | 20 | Phishing | Feb 03, 2026 |
| proton.org | proton.me | Amazon Registrar, Inc. | 30 | Offline | Feb 03, 2026 |
| schwabupdate.com | schwab.com | Gname.com Pte. Ltd. | 0 | Offline | Feb 03, 2026 |
| proton.no | proton.me | - | 35 | Parked | Feb 03, 2026 |
| saplogin.com | sap.com | IONOS SE | 30 | Offline | Feb 03, 2026 |
| payoneer.world | payoneer.com | - | 45 | Offline | Feb 03, 2026 |
| activesalesforce.com | salesforce.com | Cloudflare, Inc. | 10 | Live | Feb 03, 2026 |
| supportsalesforce.com | salesforce.com | Cloudflare, Inc. | 15 | Offline | Feb 03, 2026 |
How exposed are the brands you follow?
See the full picture: which brands attackers target most, which registrars fuel the threat, and how risk scores are shifting over time.
Detection Trends (30 days)
Emerging Threat Signals
Domains often appear harmless at registration, but become dangerous once attackers configure phishing infrastructure. These domains recently showed risk score increases indicating potential weaponization.
-
globalcloudstudio.com65 → 70 +5+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Parked (5pts)5 hours, 9 minutes ago
-
notice-whatsapp.com10 → 35 +25+Dangerous Email Provider (10pts) +MX Records (15pts) +Very Recent Domain (10pts)5 hours, 22 minutes ago
-
noreply-whatsapp.com10 → 35 +25+Dangerous Email Provider (10pts) +MX Records (15pts) +Very Recent Domain (10pts)5 hours, 22 minutes ago
-
message-whatsapp.com40 → 55 +15+Blacklisted (30pts) +MX Records (15pts) +Very Recent Domain (10pts)5 hours, 22 minutes ago
-
canvasignup.com10 → 20 +10+Very Recent Domain (10pts) +Website Live (10pts)13 hours, 35 minutes ago
-
whatsapp-mex.vip0 → 20 +20+Blacklisted (30pts) +Very Recent Domain (10pts)4 hours, 56 minutes ago
-
verizon-promotion.com10 → 40 +30+MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts)4 hours, 56 minutes ago
-
notionpersistence.com65 → 70 +5+Dangerous Registrar (25pts) +MX Records (15pts) +SPF Records (15pts) +Very Recent Domain (10pts) +Website Parked (5pts)1 day, 4 hours ago
-
mastercardis.top35 → 45 +10+Blacklisted (30pts) +Dangerous Registrar (25pts) +Very Recent Domain (10pts)4 hours, 51 minutes ago
-
pay-checkouttrusty.store30 → 35 +5+MX Records (15pts) +SPF Records (15pts) +Website Parked (5pts)4 hours, 42 minutes ago
Need Professional Domain Protection?
We offers comprehensive brand protection with real-time monitoring, automated takedowns, and expert support.