Lookalike Domain Analysis

Detailed risk assessment for billtd.com

Back to Report
Domain Information
Lookalike Domain
billtd.com
Legitimate Domain (Target)
td.com
North American banking
Registrar
ONLINE SAS
Website Status
Offline
Detection Date
February 04, 2026 18:25
Domain Creation Date
November 19, 2025
RDAP Takedown Status
Active
Discovery Method
Fuzzer
DNS Records
Nameservers
ns1.o2switch.net., ns2.o2switch.net.
MX Records (Mail Servers)
mail.billtd.com.
SPF Record (Email Authentication)
v=spf1 ip4:109.234.162.95 +a +mx +include:spf.jabatus.fr ~all
Risk Score Breakdown

This risk score shows how dangerous this lookalike domain is. Higher scores indicate more active threats. Each indicator below adds points to the score (max 100).

Talos Blacklist

Not on Talos blacklist

+0
Dangerous Registrar

Registrar 'ONLINE SAS' not on dangerous list

+0
Dangerous Email Provider

MX record 'mail.billtd.com.' not on dangerous list

+0
MX Records Configured

Email servers configured: mail.billtd.com.

+15
SPF Records

SPF authentication configured with sending directives

+15
Website is Live

Website status: Offline

+0
Website is Parked

Website status: Offline

+0
Website is Phishing

Website status: Offline

+0
Domain Age

Domain registered 121 days ago (older than 90 days)

+0
Total Score: 35 / 100
2 of 9 factors active
Threat Level
35 / 100
Medium Risk

Moderate risk detected. Monitor closely for changes that increase threat level.

Key Threat Signals
  • Talos Blacklisted No
  • Website Active No
  • Email Capability Enabled
  • Email Authentication Configured
  • Taken Down No
Related Threats

Other domains attacking td.com

Remove This Threat

Our specialist team removes malicious domains in 24-48 hours.

Start Takedown Process
Daniel Hovasse
Need Help?
Contact our expert
Daniel Hovasse
Detect Lookalike Domains

Find domains that impersonate your brand. Scan for lookalike domains that could be used for phishing or fraud.

Scan for Lookalikes