Domain impersonation — registering a domain that looks like yours to deceive your customers — is a growing problem. Attackers register variants of legitimate domains and use them for phishing, fraud, or brand abuse.

How impersonation domains work

  • Typosquatting — yourdomian.com, yourdomain.cm
  • Adding words — yourdomain-support.com, yourdomain-login.com
  • Different TLD — yourdomain.net when you own .com
  • Combosquatting — yourdomain-help.com, yourdomainofficial.com
  • Homograph attacks — replacing letters with similar-looking Unicode characters

These domains are then used to send phishing emails, create fake login pages, or impersonate customer support.

Why you should care

  • Your customers receive convincing phishing emails from a URL close to yours
  • Fake login pages harvest credentials or payment information
  • Your brand reputation suffers even though you did nothing wrong

How to check

threatprobe.app's Full report checks hundreds of permutations of your domain and flags any that are registered. This requires domain ownership verification to confirm we're scanning on your behalf.

What to do if you find impersonators

  1. Document everything — screenshot the domains and their content
  2. Report phishing pages to Google Safe Browsing and the registrar
  3. File a UDRP complaint — the standard mechanism for reclaiming domains registered in bad faith
  4. Alert your users through your own legitimate channels if a campaign is active

Check for domains impersonating yours →