CONNECTING
PricingLogin

Live lookalike domain feed

Greyphish reads every new TLS certificate in the Certificate Transparency logs and every new domain in the ICANN zone files, and flags the ones that imitate a widely impersonated brand: typosquats, homoglyphs and combosquats. These are the latest public detections, written with [.] so they cannot be clicked. A lookalike resembles a brand; it is not necessarily malicious.

Domains scanned
5,547,512,730
Domains per minute
13,406
Brands watched
1,250

Latest detections

  1. bookingconfirmation-id746789[.]comBooking · combosquat · CT log ·
  2. kindledirectepublishers[.]comAmazon · combosquat · CT log ·
  3. office-business-center[.]deMicrosoft · combosquat · CT log ·
  4. snugmug[.]comSmugMug · homoglyph · CT log ·
  5. udemny[.]comUdemy · homoglyph · CT log ·
  6. ledger-com-app[.]liveLedger · combosquat · CT log ·
  7. amazonwebservices[.]euAmazon · combosquat · CT log ·
  8. elasticapp[.]ioElastic · combosquat · CT log ·
  9. mycreative[.]helpAdobe · combosquat · CT log ·
  10. mybluehost[.]meBluehost · combosquat · CT log ·
  11. supportcrypto[.]inCrypto.com · combosquat · CT log ·
  12. app-ledger-co[.]comLedger · combosquat · CT log ·
  13. true-frontier[.]comFrontier · combosquat · CT log ·
  14. supportrogers[.]comRogers · combosquat · CT log ·
  15. amazonwebservices[.]com[.]cnAmazon · combosquat · CT log ·
  16. cryptowalletsolutions[.]xyzCrypto.com · combosquat · CT log ·
  17. getsprint[.]appSprint · combosquat · CT log ·
  18. myhostgator[.]siteHostGator · combosquat · CT log ·
  19. schwabonlineconnect[.]comCharles Schwab · combosquat · CT log ·
  20. turbotax-online[.]ccIntuit · combosquat · CT log ·
  21. auth0app[.]comAuth0 · combosquat · CT log ·

Weekly figures are in the lookalike domain report. To see the lookalikes of your own domain, check it.