They don't hack you.They impersonate you.
Spamr finds the lookalike domains built to imitate your business, checks which ones can send email, and tells you what to do before a client pays the wrong account.
- Free, no sign-up
- DNS checks only, we never visit the sites
- Full list for the domain owner only
Original acme-properties.com
How your domain can be imitated: аcme-properties.com
A Cyrillic letter instead of the Latin one. Identical on screen.
Type your domain to see it imitated
How a payment gets diverted
No break-in, no malware. Just an address that looks like yours, at the moment your client expects to pay.
- 1
A lookalike is registered
A few euros and two minutes are enough. One letter changes, the rest is your brand.
- 2
A mail server goes live
With an MX record, the domain can send e-mail and receive replies. It is the signal Spamr watches most closely.
- 3
Your client receives “new bank details”
The message lands at the right moment, in your tone, from an address that reads like yours.
- 4
The money goes elsewhere
The transfer reaches the fraudster's account. The replies reach the fraudster's inbox.
- From
- Acme Properties Accounts <accounts@acme-propertles.com>
- To
- tenant@example.com
- Subject
- Updated bank details
Hello, our bank has changed. Please send this month's payment to the account below.
Hundreds of variations. Checked in under a minute.
Every scan rebuilds the domains a fraudster would try, then asks the DNS which ones exist and can send e-mail.
- 01
Generate
Typos on AZERTY and QWERTY keyboards, lookalike characters, other extensions, added words like invoice or payment.
- 02
Check
Registered or not, live mail server, website, creation date. Public DNS and registry data only.
- 03AI analysis
Explain
A risk score from transparent rules, then a plain-language summary written by AI: what we found, why it matters, what to do.
AI explains the results. It never decides them.
Useful to you. Useless to a fraudster.
A detection tool must not become a scouting tool. The public result stays deliberately limited.
Anyone can see the counts and the three most dangerous lookalikes.
- Critical, score 92 out of 100
аcme-properties.com
- High, score 71 out of 100
acme-proprties.com
- High, score 64 out of 100
acme-properties.co
- Owner only
- Owner only
- Owner only
For businesses whose clients send them money
Real estate & property management
Deposits, rent, service charges: regular transfers fraudsters try to redirect.
Law firms & conveyancers
Client funds and completion monies: large amounts, high stakes.
Accountants & small businesses
Supplier invoices and changes of bank details, the classic invoice fraud.
E-commerce
Fake customer service, fake delivery updates, cloned payment pages.
Continuous monitoring from €39 a month
Verified alerts when a new lookalike appears, a monthly report, takedown requests. Opening soon.
Questions
Does Spamr contact the domains it checks?
No. A scan only uses DNS lookups (registration, mail servers, addresses) and the public RDAP registries for creation dates. We never open a page on the domains being checked.
Why not show the full list straight away?
Because it would help a fraudster as much as you. The public result shows how many lookalikes exist and the three most dangerous ones. The full list appears once you prove you own the domain, with a DNS TXT record or a link sent to an address on the domain.
What is a lookalike with a mail server?
A domain that looks like yours and can send and receive e-mail. It is the most important signal: it lets someone write to your clients as if they were you, and receive their replies.
Does the AI decide the risk level?
No. Scores come from fixed rules (mail server, creation date, type of resemblance, parking…). The AI then writes a summary from those results without changing them. If it is unavailable, a standard summary is shown.
What happens to my data?
An unverified scan is deleted after 30 days. We only ask for your e-mail address for ownership verification or the waitlist. Details are in the privacy policy.
Can you take a fraudulent domain down?
Takedown requests to registrars and hosts are part of the monitoring plans, coming soon. Join the waitlist from the pricing page to hear when they open.
Check your domain now.
Free, no sign-up, results in under a minute.