Typosquat Monitor
Find fake copies of your domain.
Find out in time when someone registers a domain like yours or starts sending email from it. We warn you before it is used for phishing against your customers or staff.
€1.00 / domain / month + €0.05 / check
Every account gets €5 of usage free each month, shared by all the tools. No card and no time limit: you pay only for what goes over. Sign in with your qzila account to use it.
What it does
- Every day checks hundreds to thousands of addresses like yours: typos, swapped characters (1 for l), other endings (.com, .eu)
- Warns you when someone registers one, by email, Slack, SMS, webhook or Jira
- Tells you which copies are really dangerous: whether they already have a website or can handle email
- Prepares a shareable report with the evidence for the registrar or a lawyer
How this tool bills
Today's list prices in EUR, read from the qzila price list when this page was built. You are billed monthly for what you used.
- Typosquat – monitored domains€1.00 / domain / month
- Typosquat check€0.05 / check
What you would pay
Enter how much you need in a month. Priced with today’s list.
Every account gets a 5 € credit each month, taken off the invoice. All the tools you use share it; the estimate assumes this is the only one.
The API
Every qzila tool is a GraphQL API first; the web UI is one client of it. Anything you can do in the browser you can do from a script, a CI job or the Asign platform.
https://typosquat.tools.qzila.com/graphqlPOST · application/json · { "query": "…" }
Requests are authenticated with your qzila session (the same sign-in as the browser). For automation, sign in once at identity.qzila.com and reuse the session cookie; API keys for service accounts are on the roadmap.
Whatever this tool detects — a verdict flip, a regression, a change, an incident — is emitted as a signal to the qzila alert hub, which forwards it to email, Slack, a webhook or Jira, and to Service Watch, which can also send it as an SMS. Each signal carries the asset it belongs to, so you can correlate it back to your own inventory (or to an Asign asset).
Main operations
upsertMonitormutationWatch a brand domain for lookalikes on a schedule.
mutation { upsertMonitor(input: { domain: "example.com", schedule: DAILY }) { id } }findingsqueryRegistered lookalikes with their DNS and mail status.
query { findings(monitorId: "m_1") { domain registered mailCapable firstSeen } }runMonitormutationSweep now, outside the schedule (queued; the snapshot updates when it lands).
mutation { runMonitor(id: "m_1") }
Send requests to https://typosquat.tools.qzila.com/graphql
Questions about Typosquat Monitor
How do you find similar domains?
From your domain we create hundreds to thousands of variants that a person would mix up at first sight: typos, swapped characters (0 for o, 1 for l), other endings and added words such as -login or -support.
What do I learn about a registered lookalike?
When it was registered, its name servers, whether it resolves to a website and whether it has MX records — a lookalike that can receive mail is the one to worry about.
Can a fake domain be taken down?
Usually, yes. You get a shareable report with the evidence (when and where it was registered, its DNS, mail and a capture of the page) to send to the registrar or a lawyer. We do not file the request for you.
Why would someone register a domain like mine?
To fool your customers or staff. From the fake address they send an invoice with a different account number, a request to “verify your password”, or put up a copy of your e-shop. To the customer it looks like you.
How is it different from Email Security?
Email Security protects your own domain, so nobody sends mail from it. Typosquat Monitor watches the domains that only look like it.
How often is it swept?
Daily per brand domain, with a sweep-now button for when you need the answer today.
Is the free credit a trial?
No. Every month your account gets €5 of usage free, shared by all the tools. If you stay under it, you pay nothing: no card, no time limit.
How am I billed?
Monthly, for what you actually had in the tool during the month, at the public price per unit. Everything lands on one invoice itemised per tool. Remove something and it stops billing the same day.
Where do alerts go?
Every tool reports through one alert hub. You choose per destination: email, Slack, a webhook, SMS or a Jira ticket — and Service Watch shows the same signals on one board.
Where is my data kept?
The tools run on AWS in the EU (Frankfurt), operated by adcore s.r.o., a Slovak company. A few services they rely on sit outside the EU — Stripe for card payments, Google for analytics after your consent, the threat-intelligence lookups behind Safe Check — and the privacy policy lists each one.
Start with one tool. Add more when you need them.
Sign in once and every tool is a click away. You pay monthly only for what you watch. No minimum, no contract. Prices are public on every tool.
- One account for every qzila tool
- €5 free every month, then you pay for what you use
- Alerts by email, Slack, SMS, webhook or to Jira