Domain Monitoring

Find malicious domains
before they cause damage

Most attacks start with a malicious domain registration. Preemptively detect the domains targeting your organization, and act before they impact you.

How it works

Spot lookalike domains,
as they are registered

Get actionable results on lookalikes impersonating your organization in minutes.

Alerts

Track every lookalike,
act on the ones that matter

Rules keep your team focused on the results that matter. Use built-in rules or write your own to match how you respond.

How rules work

Detection

Detect every lookalike,
wherever it surfaces

Lookalikes surface in different places. Each source watches one of them, and every result lands in the same view.

Permutations

Check thousands of typosquatting combinations and find the ones already registered

Certificate transparency

Spot a lookalike domain as soon as its certificate is issued

Newly registered

Detect newly registered domains that match a variation of a monitored domain, within days

Business context

Look for malicious registrations built on terms specific to your organization, like its products and services

FAQ

Frequently asked questions

Abusive infrastructure,
disrupted

Have I Been Squatted helps security teams detect infrastructure targeting their organization, investigate it with evidence, and coordinate takedowns.