06/17/2026
The lookalike domain attack works because attackers do the homework you didn't.
If your domain is yourbiz.com, somewhere right now there's almost certainly:
• yourbiz.co (different TLD)
• yourbiz-llc.com (added word)
• y0urbiz.com (number-for-letter)
• yourbis.com (one-letter typo)
All cost \$10 to register. None of them are illegal. All of them are usable to send fake invoices that look exactly like yours.
What we do for clients:
1. Buy the obvious 5–10 lookalikes and park them. Cheaper than a lawsuit.
2. Configure SPF/DKIM/DMARC strict so even close-match spoofs get bounced.
3. Monitor for new registrations of variants on your name.
Included in Managed Inbox. Not included anywhere else we've audited.