Streaming and media

SoundCloud lookalike domains

Greyphish has recorded 95 domains that resemble SoundCloud since February 2026, 11 of them in the last 90 days. Most of them (77%) are typosquats, a keystroke or two away from the real name. .com carries 97% of them, out of 4 endings in all. The pace has picked up, with 6 in the last 30 days against 2 in the 30 before. 20 certificates for unregistered .ph names (registry wildcard) are excluded: the registry answers for any name under that ending, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
95
since February 2026
Last 90 days
11
6 in the last 30 days
Endings
4
most on .com (97%)
Typosquats
77%
the most common kind

What kind of lookalikes

Typosquats73 (77%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Homoglyphs13 (14%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Combosquats9 (9%)

The brand spelled correctly with a word added, such as login or support. More

Lookalikes per week

TypoComboHomoglyph
3
5
Apr 20
Jun 15
Aug 10
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboHomoglyphTotal
2026-04-204105
2026-04-270000
2026-05-041001
2026-05-110000
2026-05-181001
2026-05-250000
2026-06-011001
2026-06-080000
2026-06-151001
2026-06-222002
2026-06-291001
2026-07-060011
2026-07-130000
2026-07-200000
2026-07-270011
2026-08-030101
2026-08-100101
2026-08-170000
2026-08-240011
2026-08-310000
2026-09-070011
2026-09-140202
2026-09-210000
2026-09-282002
2026-10-051102
2026-10-120000

Endings

The 4 most used of the 4 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com9296.8%
.ir11.1%
.net11.1%
.xyz11.1%

Where they are registered

For the 86 with a registrar in WHOIS (91% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy1214.0%Retail
Media Elite Holdings1214.0%Retail
Above.com1112.8%Retail
Gransy78.1%Retail
Dynadot67.0%Retail
EPAG Domainservices44.7%Retail
Key-Systems44.7%Retail
NameBright44.7%Retail

What the live ones do

Google Web Risk lists none of the 3 live ones checked against it.

3 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles SoundCloud; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • zoundcloud[.]com
    Typo, Oct 9Not checked
  • getsoundcloud[.]com
    Combo, Oct 6No site or mail when checked
  • roundcloud[.]com
    Typo, Sep 30Not checked
  • xsoundcloud[.]com
    Typo, Sep 29Not checked
  • soundcloudapp[.]xyz
    Combo, Sep 19No site or mail when checked
  • soundcloudapp[.]com
    Combo, Sep 17Serves a website
  • s0undcloud[.]com
    Homoglyph, Sep 9Not checked
  • soundc1oud[.]com
    Homoglyph, Aug 30Not checked
  • soundcloudhelp[.]com
    Combo, Aug 13Not checked
  • soundclouddirect[.]com
    Combo, Aug 9Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with SoundCloud. Domains listed resemble SoundCloud by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.