+1 coinfor reading to the end
+1
Home / Glossary / Lookalike domain
Glossary · Security

Lookalike domain

In plain language

A web or email address that is one character off from a real one, used to fool you.

The metaphor

Like two near-identical envelopes with return addresses differing by one letter: you only spot the fake if you read the whole address.

Going deeper

How it works

  • Swaps such as rn for m, a zero for an o, or a different ending (.co for .ca).
  • Used for phishing emails, fake login pages and invoice fraud.
  • Attackers may register one for your own domain.
  • Read the whole address before you trust it.

How WILDCARD handles it

Domain Security watches your domain and its registration. Email Security flags lookalike senders.

In practice
  • Invoices arrive from 'acme-corp.ca' in place of 'acmecorp.ca'.
  • A login page at micros0ft.com.
  • A fake email from 'yourcompany.co'.

A question owners ask

Can I stop someone registering a lookalike of my domain? Not entirely. Registering the common variants helps, and filtering catches the rest.

Where WILDCARD handles this
Domain
Security
  • Email deliverability
  • Reputation monitoring
  • Management and renewals
Start with Domain SecurityMeet Domain Security →
Email
Security
  • Real-time email filtering
  • Phishing and impersonation caught
  • External senders flagged
Start with Email SecurityMeet Email Security →
Related terms
AIArtificial IntelligenceBECBusiness Email CompromiseCACertificate AuthorityDKIMDomainKeys Identified MailDMARCDomain-based Message Authentication, Reporting and ConformanceDNSDomain Name SystemDomain nameDomain registrar

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →