Developer tools

Redis lookalike domains

Greyphish has recorded 32 domains that resemble Redis since February 2026, 4 of them in the last 90 days. Most of them (69%) are typosquats, a keystroke or two away from the real name. .io carries 72% of them, out of 7 endings in all.

Data as of . Public sources only.

Lookalikes seen
32
since February 2026
Last 90 days
4
0 in the last 30 days
Endings
7
most on .io (72%)
Typosquats
69%
the most common kind

What kind of lookalikes

Typosquats22 (69%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats8 (25%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs2 (6%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoCombo
1
2
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboTotal
2026-04-20101
2026-04-27202
2026-05-04000
2026-05-11011
2026-05-18000
2026-05-25000
2026-06-01101
2026-06-08000
2026-06-15101
2026-06-22000
2026-06-29000
2026-07-06101
2026-07-13000
2026-07-20000
2026-07-27000
2026-08-03000
2026-08-10101
2026-08-17101
2026-08-24101
2026-08-31101
2026-09-07000
2026-09-14000
2026-09-21000
2026-09-28000
2026-10-05000
2026-10-12000

Endings

The 7 most used of the 7 top-level domains these lookalikes sit under.

EndingLookalikesShare
.io2371.9%
.com412.5%
.app13.1%
.be13.1%
.co.uk13.1%
.de13.1%
.net13.1%

Where they are registered

For the 24 with a registrar in WHOIS (75% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy937.5%Retail
Namecheap312.5%Retail
Realtime Register28.3%Retail
Alibaba Cloud14.2%Retail
CommuniGal Communication14.2%Retail
Dynadot14.2%Retail
Hostinger14.2%Retail
Key-Systems14.2%Retail

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Redis; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • reeis[.]io
    Typo, Sep 2Not checked
  • rudis[.]io
    Typo, Aug 26Not checked
  • relis[.]io
    Typo, Aug 20Not checked
  • rediy[.]io
    Typo, Aug 10Not checked
  • redes[.]io
    Typo, Jul 8Not checked
  • redir[.]io
    Typo, Jun 19Not checked
  • redia[.]io
    Typo, Jun 7Not checked
  • redisservice[.]de
    Combo, May 12Not checked
  • redos[.]io
    Typo, Apr 28Not checked
  • redisio[.]com
    Typo, Apr 27Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Redis. Domains listed resemble Redis by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.