Keeper lookalike domains

What kind of lookalikes

Words most often added to the name in the last 90 days: get (12), app (8), wallet (4).

Lookalikes per week

Endings

The 8 most used of the 49 top-level domains these lookalikes sit under.

Where they are registered

For the 97 with a registrar in WHOIS (28% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

What the live ones do

56 of these lookalikes were registered and checked for a website and mail: 35 (63%) served a website and 25 (45%) publish MX records, so they can receive email. Checks run on the higher-severity matches that resolve, not on every lookalike.

Google Web Risk lists none of the 17 live ones checked against it (0%).

27 were tracked while live and 1 has since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Keeper; it is not necessarily malicious, and none of these is a claim about who registered it or why.

• app-keeper[.]com[.]br
  Combo, Oct 14MX records
• securekeeper[.]top
  Combo, Oct 14Not checked
• get-keeper[.]co
  Combo, Oct 13Serves a website
• mykeeper[.]link
  Combo, Oct 13Serves a website
• keeperappliance[.]com
  Combo, Oct 12Not checked
• truekeeper[.]net
  Combo, Oct 12No site or mail when checked
• keeperweb[.]xyz
  Combo, Oct 11No site or mail when checked
• getkeeper[.]xyz
  Combo, Oct 11No site or mail when checked
• getkeeper[.]nl
  Combo, Oct 8Serves a website
• getkeeper[.]de
  Combo, Oct 8Serves a website

Further reading

• What combosquatting is, with examples
• Homoglyph and punycode domains, explained
• How to find lookalike domains of your own company
• What to do about a lookalike domain
• The weekly lookalike domain report, across all monitored brands