Lookalike Domain Checker

About this tool

Scammers often register domains that look like a trusted brand on screen but use letters from other alphabets — Cyrillic а instead of Latin a, Greek ο instead of o, and similar tricks. Browsers may display them almost identically; in DNS they appear as punycode (xn--…). This tool takes your domain and generates plausible lookalike hostnames by swapping confusable characters. Use it to brainstorm domains worth monitoring or blocking.

What you get

• A list of lookalike domains derived from the hostname you enter
• Which character was substituted and where
• Punycode form when the variant contains non-ASCII characters
• Copyable list of all variants (one per line)

Often yes, in principle — domains with non-Latin letters are called IDN (Internationalized Domain Names) and are stored in DNS as punycode (xn--…). That is how a hostname can look like a familiar brand on screen while resolving differently behind the scenes.

• Mixed-script blocking — inserting one Cyrillic or Greek letter into an otherwise Latin name is often rejected (e.g. Latin paypal + Cyrillic а)
• Confusable bundling — if you own example.com, visually similar IDN variants may be reserved for you or blocked for others
• TLD differences — some zones allow broad IDN, others ASCII-only; rules vary between .com, .ru, country codes, and new gTLDs

So the list here is a theoretical threat model, not a shopping list of domains you can buy today. Variants may still matter for brand monitoring, security awareness training, and spotting tricks in links, email, or subdomains — even when direct registration is blocked.

• Does not check WHOIS or whether a variant is already registered
• Does not catch typosquatting (paypa1.com) — only Unicode homoglyphs
• Does not generate every theoretical combination — focused on single- and double-character swaps

How to use

Enter the brand domain you want to protect (e.g. example.com). Review the variants and copy the list for your security checklist or registrar monitoring.