CONNECTING
PricingLogin

Live lookalike domain feed

Greyphish reads every new TLS certificate in the Certificate Transparency logs and every new domain in the ICANN zone files, and flags the ones that imitate a widely impersonated brand: typosquats, homoglyphs and combosquats. These are the latest public detections, written with [.] so they cannot be clicked. A lookalike resembles a brand; it is not necessarily malicious.

Domains scanned
5,623,263,260
Domains per minute
9,593
Brands watched
1,250

Latest detections

  1. snugmug[.]comSmugMug · homoglyph · CT log ·
  2. snowflake-customer[.]appSnowflake · combosquat · CT log ·
  3. orangeapps[.]phOrange · combosquat · CT log ·
  4. applesupport[.]byApple · combosquat · CT log ·
  5. ledger-cold-wallet-use[.]comLedger · combosquat · CT log ·
  6. amazonwebservices[.]com[.]cnAmazon · combosquat · CT log ·
  7. spiritrecovery[.]orgSpirit · combosquat · CT log ·
  8. revolutsupport[.]ukRevolut · combosquat · CT log ·
  9. myhostgator[.]siteHostGator · combosquat · CT log ·
  10. blockchainwebsites[.]comBlockchain · combosquat · CT log ·
  11. quickbookssupportondemand[.]comIntuit · combosquat · CT log ·
  12. amazonwebservices[.]euAmazon · combosquat · CT log ·
  13. mymetlife[.]net[.]cnMetLife · combosquat · CT log ·
  14. mybluehost[.]meBluehost · combosquat · CT log ·
  15. frontiersecure[.]comFrontier · combosquat · CT log ·
  16. cryptoservices[.]onlineCrypto.com · combosquat · CT log ·
  17. coinbasewallet[.]siteCoinbase · combosquat · CT log ·

Weekly figures are in the lookalike domain report. To see the lookalikes of your own domain, check it.