Features

Similar Domain Detection

Bad actors register lookalike domains daily — one-character typos, homoglyph swaps, and lookalike TLDs — to phish your customers and impersonate your brand. ZoneWatcher continuously surfaces newly registered domains that resemble yours, so you can act before the lookalike ever sends an email.

Continuous Lookalike Scanning

ZoneWatcher monitors new domain registrations and compares them to the domains you protect. Matches show up on that zone's Similar Domains tab, with the lookalike, a similarity score, and when it was first and last seen. You don't need to subscribe to zone feeds or wire up a homemade fuzzer; the matching runs automatically once your zones are added.

Variations We Catch

Lookalikes don't all look the same, so we test for the families attackers actually use.

Homoglyphs
Cyrillic and Greek letters that render identically to ASCII (e.g. а vs a) and look-alike Latin pairs like rn/m or vv/w.
Typos & Transposition
Single-character insertions, deletions, substitutions, and adjacent-key swaps — the classic typosquatting playbook.
Alternate TLDs
Same root, different TLD — brand.co, brand.app, brand.support — including ccTLDs commonly used for impersonation.
Compound & Hyphenated
Variations that prepend or append intent words (brand-login, secure-brand) and hyphen insertions used in mail-themed phishing.

On the Zone

Open a zone and choose the Similar Domains tab. Each row is a lookalike of that domain, with how close the match is and when it was first and last seen. The list is searchable and sortable.

Available on Protect and Control Plans

Similar Domain Detection is included on the Protect and Control plans. Add a zone, sit back, and let ZoneWatcher surface the lookalikes for you. Start your free trial to see what's already been registered around your brand.

Ready to protect your DNS?

Start your free trial today and get full access to all monitoring features.