Purlock
Free tool · Lookalike domain finder

Who is pretending to be you?

Scammers register domains that look almost like yours to send fake invoices and phishing pages. We check dozens of close variations of your domain and show which ones are live.

Try:

Free, with no account needed.

What it checks

What you get from the lookalike domain finder

  • Typos

    Missing, doubled and swapped letters, and the keys next to them.

  • Lookalike letters

    0 for o, rn for m, 1 for l, the swaps that fool people at a glance.

  • Other endings

    Your name on .net, .co, .shop, .xyz and others.

  • Added words

    yourshop-login.com, secure-yourshop.com and others like them.

  • Who can email

    A lookalike with a mail server is what fake invoices come from, so those come first.

  • Yours left out

    Domains on your own name servers are marked as probably yours.

For developers

Three lines from your own code

Every tool is also an API, with one simple answer format. Keep your key on your server.

JavaScript

const res = await fetch("https://www.purlock.com/v1/tools/lookalike-domain-finder?target=example.com", {
  headers: { authorization: `Bearer ${process.env.PURLOCK_API_KEY}` },
});
const report = await res.json();

Prompt for Cursor or Lovable

Add a call to the Purlock Lookalike domain finder API on the server side of this app. Send GET https://www.purlock.com/v1/tools/lookalike-domain-finder?target=VALUE with the header "Authorization: Bearer" and the PURLOCK_API_KEY environment variable. The JSON answer has status ("good", "attention" or "bad"), headline, checks (each with level, title, detail, fix) and data. If the call fails or times out after 3 seconds, carry on as if it wasn't there. Never put the API key in client code.

Free plan: 100 calls a month. Individual: 5,000. Business: 25,000.

FAQ

Questions, answered

What is a lookalike domain?
A domain that's easy to mistake for yours, like yourshpo.com or yourshop-login.com. Scammers use them for fake invoices and login pages. Many are also harmless, or just someone else's business, so take a look before you act.
What can I do about one?
Check what's on it first. If it's copying you, report it to its registrar and host, warn your customers, and tell your staff. You can also buy the likeliest ones yourself, before someone else does.
Does it find every lookalike?
No. It checks the most likely variations, usually dozens per domain. There are endless possible names, so it can't cover them all.

More free tools

Use it from your own code

Get a free API key with 100 calls a month. No card needed.

Get your API key