Travel

Lufthansa lookalike domains

Greyphish has recorded 90 domains that resemble Lufthansa since February 2026, 5 of them in the last 90 days. Most of them (67%) are typosquats, a keystroke or two away from the real name. .com carries 82% of them, out of 10 endings in all. The busiest week began 8 June 2026, with 20 new ones. 25 certificates for unregistered .ph, .com.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
90
since February 2026
Last 90 days
5
3 in the last 30 days
Endings
10
most on .com (82%)
Typosquats
67%
the most common kind

What kind of lookalikes

Typosquats60 (67%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats25 (28%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs5 (6%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoComboHomoglyph
10
20
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-202103
2026-04-270000
2026-05-044004
2026-05-111001
2026-05-181001
2026-05-251001
2026-06-010000
2026-06-08613120
2026-06-150000
2026-06-220000
2026-06-290000
2026-07-060000
2026-07-130000
2026-07-200000
2026-07-270000
2026-08-030000
2026-08-100000
2026-08-170000
2026-08-240011
2026-08-310000
2026-09-070101
2026-09-142002
2026-09-210000
2026-09-280101
2026-10-050000
2026-10-120000

Endings

The 8 most used of the 10 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com7482.2%
.de88.9%
.ch11.1%
.company11.1%
.eu11.1%
.net11.1%
.org11.1%
.pl11.1%

Where they are registered

For the 75 with a registrar in WHOIS (83% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
CSC1418.7%Brand protection
InterNetX1317.3%Retail
Above.com56.7%Retail
GoDaddy56.7%Retail
Media Elite Holdings56.7%Retail
Dynadot45.3%Retail
PDR34.0%Retail
Cosmotown22.7%Retail

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Lufthansa; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • lufthansasupportusa[.]com
    Combo, Oct 3Not checked
  • lufthasnsa[.]com
    Typo, Sep 20Not checked
  • lfuthansa[.]com
    Typo, Sep 18Not checked
  • lufthansasupport[.]company
    Combo, Sep 7Not checked
  • xn--lufthans-gza[.]com
    Shown in a browser as lufthansá[.]com
    Homoglyph, Aug 25Not checked
  • lufthansa-online[.]pt
    Combo, Jun 9Not checked
  • lufthansa-online[.]eu
    Combo, Jun 9Not checked
  • mylufthansa[.]de
    Combo, Jun 8Not checked
  • lufthansa-service[.]de
    Combo, Jun 8Not checked
  • lufthansaonline[.]de
    Combo, Jun 8Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Lufthansa. Domains listed resemble Lufthansa by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.