Telecoms

Rogers lookalike domains

Greyphish has recorded 175 domains that resemble Rogers since February 2026, 40 of them in the last 90 days. They split between combosquats (55%) and typosquats (43%). .com carries 65% of them, out of 25 endings in all. The pace has picked up, with 20 in the last 30 days against 7 in the 30 before. 31 certificates for unregistered .com.ph, .ph, .net.ph names (registry wildcard) are excluded: the registry answers for any name under those endings, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
175
since February 2026
Last 90 days
40
20 in the last 30 days
Endings
25
most on .com (65%)
Serve a website
47%
of 34 checked; 68% publish MX

What kind of lookalikes

Combosquats96 (55%)

The brand spelled correctly with a word added, such as login or support. More

Typosquats76 (43%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Homoglyphs3 (2%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Words most often added to the name in the last 90 days: app (5), account (4), service (3), online (3).

Lookalikes per week

TypoComboHomoglyph
5
9
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-203407
2026-04-271304
2026-05-041203
2026-05-111001
2026-05-181203
2026-05-253306
2026-06-010000
2026-06-080101
2026-06-152305
2026-06-221102
2026-06-292002
2026-07-063306
2026-07-131203
2026-07-200202
2026-07-271102
2026-08-030303
2026-08-102305
2026-08-170303
2026-08-240000
2026-08-310101
2026-09-071001
2026-09-140000
2026-09-210202
2026-09-282417
2026-10-051809
2026-10-120202

Endings

The 8 most used of the 25 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com11465.1%
.ca84.6%
.site74.0%
.net63.4%
.org63.4%
.online52.9%
.info42.3%
.co.uk31.7%

Where they are registered

For the 114 with a registrar in WHOIS (65% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy3530.7%Retail
NameBright54.4%Retail
Tucows54.4%Retail
PDR43.5%Retail
Dynadot32.6%Retail
Key-Systems32.6%Retail
Network Solutions32.6%Retail
Squarespace32.6%Retail

What the live ones do

34 of these lookalikes were registered and checked for a website and mail: 16 (47%) served a website and 23 (68%) publish MX records, so they can receive email. Checks run on the higher-severity matches that resolve, not on every lookalike.

Google Web Risk lists none of the 12 live ones checked against it (0%).

14 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles Rogers; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • rogersdirectusa[.]net
    Combo, Oct 13No site or mail when checked
  • rogersservices[.]com
    Combo, Oct 13Serves a websiteMX records
  • rogersappliances[.]com
    Combo, Oct 11MX records
  • rogerscenterfordentistry[.]com
    Combo, Oct 10MX records
  • rogersi[.]com
    Typo, Oct 9Not checked
  • rogersdirectusa[.]com
    Combo, Oct 9Serves a websiteMX records
  • rogerswebsite[.]com
    Combo, Oct 8Serves a websiteMX records
  • getrogers[.]com
    Combo, Oct 7No site or mail when checked
  • rogers-5gmobile-account[.]com
    Combo, Oct 7Serves a websiteMX records
  • rogersappliancerepair[.]shop
    Combo, Oct 7Serves a websiteMX records

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with Rogers. Domains listed resemble Rogers by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.