Free tool / Lookalike radar
Has someone registered a domain like yours?
A perfect DMARC record stops forgeries of your own domain — not of yourcompany-billing.com. We generate the lookalikes a fraudster would pick and check, live, which ones exist and can receive email.
Public DNS only. Nothing is sent to any of these domains.
hsbc.com
12 lookalikes of hsbc.com can receive email right now.
- Lookalikes checked57
- Registered by others24
- Can receive email12
- Probably yours12
- Your domain renewsin 448 days
hsbc.org
Different ending · .org instead of .com · Network Solutions, LLC
hsbchq.com
Added word · “hq” added · Atak Domain Bilgi Teknolojileri A.S.
sbc.com
Missing letter · “h” left out · CSC Corporate Domains, Inc.
hbc.com
Missing letter · “s” left out · Webnames.ca Inc.
hsc.com
Missing letter · “b” left out · GoDaddy.com, LLC
hsb.com
Missing letter · “c” left out · Network Solutions, LLC
shbc.com
Swapped letters · “hs” swapped · KuwaitNet General Trading co.
hscb.com
Swapped letters · “bc” swapped · GoDaddy.com, LLC
jsbc.com
Typo (next key) · “j” for “h” · Alibaba Cloud Computing (Beijing) Co., Ltd.
hdbc.com
Typo (next key) · “d” for “s” · Tucows Domains Inc.
hsvc.com
Typo (next key) · “v” for “b” · GoDaddy Online Services Cayman Islands Ltd.
hsbx.com
Typo (next key) · “x” for “c” · GoDaddy.com, LLC
hsbc.us
Different ending · .us instead of .com
hsbconline.com
Added word · “online” added · Spaceship, Inc.
hbsc.com
Swapped letters · “sb” swapped
hhsbc.com
Doubled letter · “h” doubled
hssbc.com
Doubled letter · “s” doubled
hsbbc.com
Doubled letter · “b” doubled
hsbcc.com
Doubled letter · “c” doubled
gsbc.com
Typo (next key) · “g” for “h”
habc.com
Typo (next key) · “a” for “s”
hsnc.com
Typo (next key) · “n” for “b”
hsbv.com
Typo (next key) · “v” for “c”
hsbcsupport.com
Added word · “support” added · Zoho Corporation Private Limited
hsbc.net
Different ending · .net instead of .com
hsbc.io
Different ending · .io instead of .com
hsbc.info
Different ending · .info instead of .com
hsbc.biz
Different ending · .biz instead of .com
hsbc.online
Different ending · .online instead of .com
hsbc.eu
Different ending · .eu instead of .com
hsbc.de
Different ending · .de instead of .com
hsbc.uk
Different ending · .uk instead of .com
hsbcpayments.com
Added word · “payments” added · MarkMonitor Inc.
hsbcsecure.com
Added word · “secure” added
hsbcgroup.com
Added word · “group” added
hsbc-online.com
Added word · “-online” added
What to do
- Warn the people who pay you. Tell customers and your bookkeeper that bank details never change by email, and name the domains above. A phone call to a known number beats any reply.
- Register the closest ones yourself. The other endings and the “-billing” style names cost a few euros a year; point them at your site and add
v=spf1 -alland a DMARCp=rejectrecord so they can never send mail. - Report active fraud. If a lookalike sends mail in your name, report it to its registrar’s abuse contact (named above where the registry publishes it) and to your national cybercrime reporting service.
- Make your own domain unforgeable. Run the inbox check for hsbc.com — lookalikes work best when the real domain can be forged too.
Registered doesn’t mean malicious: a lookalike may be parked, for sale, or someone’s unrelated business — an old registration usually is. Registration dates come from each registry’s public RDAP service where it has one. “Probably yours” means it uses the same name servers or mail servers as hsbc.com, or is held at the same brand-protection registrar. We check 57 of the most common variations, not every possible one.