Typosquat Monitor
Lookalike domains, before they phish.
Typical useHear when someone registers a lookalike of your domain, before they use it to phish your customers.
Watch for lookalike domains of your brand and hear when one is registered or starts to send mail — the usual first step of a phishing campaign against your customers or staff.
Free to start on every tool — no card, no time limit. You pay only for what grows beyond the free tier. Sign in with your qzila account to use it.
What it checks
- Thousands of permutations: typos, homoglyphs, TLD swaps, hyphenation
- Registered / resolving / mail-capable status per lookalike
- New findings delivered to Slack, email, SMS, webhook or Jira
- Evidence pack for takedown requests
How this tool bills
Indicative prices, EUR excl. VAT. The current price list is in your account and applies from the day you add something.
Pricing examples
Three typical situations, worked through the way the invoice would show them. Prices are indicative; the current price list is in your account.
- Example 1 · Trying it out1 brand domain
A freelancer or a small company signs in and adds 1 brand domain to see what the tool finds.
Everything you add is within the free tier (1 brand domain free every month), so nothing is billed. There is no time limit — it stays free while you stay within it.
1 − 1 free = 0 × €9.00Monthly bill: €0.00 — free. - Example 2 · A small company5 brand domains
A company adds 5 brand domains — its main systems and a couple it acquired along the way.
The first 1 are covered by the free tier. The remaining 4 are billed at €9.00 each, metered per month.
5 − 1 free = 4 × €9.00Monthly bill: 4 × €9.00 = €36.00/ month. - Example 3 · An agency or a larger estate12 brand domains
An MSP, an auditor or a larger company watches 12 brand domains across several clients or business units.
The free tier still covers the first 1. The other 11 are billed at €9.00 each. Remove something mid-month and it stops counting the same day; set a budget and you are warned before you reach it.
12 − 1 free = 11 × €9.00Monthly bill: 11 × €9.00 = €99.00/ month, itemised on one invoice.
Try your own numbers
The API
Every qzila tool is a GraphQL API first; the web UI is one client of it. Anything you can do in the browser you can do from a script, a CI job or the Asign platform.
https://typosquat.tools.qzila.com/graphqlPOST · application/json · { "query": "…" }
Requests are authenticated with your qzila session (the same sign-in as the browser). For automation, sign in once at identity.qzila.com and reuse the session cookie; API keys for service accounts are on the roadmap.
Whatever this tool detects — a verdict flip, a regression, a change, an incident — is emitted as a signal to the qzila alert hub, which forwards it to email, Slack, a webhook, SMS or Jira, and to ServiceWatch. Each signal carries the asset it belongs to, so you can correlate it back to your own inventory (or to an Asign asset).
Main operations
upsertMonitormutationWatch a brand domain for lookalikes on a schedule.
mutation { upsertMonitor(input: { domain: "example.com", schedule: DAILY }) { id } }findingsqueryRegistered lookalikes with their DNS and mail status.
query { findings(monitorId: "m_1") { domain registered mailCapable firstSeen } }runMonitormutationSweep now, outside the schedule (queued; the snapshot updates when it lands).
mutation { runMonitor(id: "m_1") }
Send requests to https://typosquat.tools.qzila.com/graphql
Questions about Typosquat Monitor
How are lookalikes generated?
From your brand domain: typos, swapped and doubled letters, homoglyphs (rn for m, 1 for l), other TLDs, hyphenations and added words such as -login or -support. Thousands of candidates per domain.
What do I learn about a registered lookalike?
When it was registered, its name servers, whether it resolves to a website and whether it has MX records — a lookalike that can receive mail is the one to worry about.
Can I take a lookalike down?
The finding gives you the evidence for a registrar abuse report or a UDRP complaint. We do not file it for you, but the report is written so a lawyer or registrar can act on it.
How often is it swept?
Daily per brand domain, with a sweep-now button for when you need the answer today.
Is the free tier a trial?
No. It stays free for as long as you stay within it — no card, no time limit. You only start paying when you add more than the free tier covers.
How am I billed?
Monthly, for what you actually had in the tool during the month, at the public price per unit. Everything lands on one invoice itemised per tool. Remove something and it stops billing the same day.
Where do alerts go?
Every tool reports through one alert hub. You choose per destination: email, Slack, a webhook, SMS or a Jira ticket — and ServiceWatch shows the same signals on one board.
Where is my data kept?
In the European Union. qzila is built and operated by adcore s.r.o., a Slovak company; the tools run on EU infrastructure.
Start with one tool. Add the rest when you need them.
Sign in once and every tool is a click away. You pay only for what you watch, per month, with no minimum and no contract — the price list is in your account before you add anything.
- One account across every qzila tool
- Free tier on every tool, then pay-as-you-go
- Alerts to email, Slack, webhook, SMS or Jira