New registrations across 1,570 TLDs, checked daily against your brand. Each lookalike is visited before it reaches you: parked or live, asking for passwords, able to send mail. You or your AI agent get the verdict and the facts behind it.
Your first scan looks back over the past month of registrations. No sales calls, unless you want one.
A lookalike domain costs a few dollars to register. What it trades on is your name: customers who believe they are dealing with you hand over passwords and payments, and the trust they lose is yours. Size is no protection; a smaller brand usually just has nobody watching.
Connect any AI agent with one URL. Your agent reads new domain matches, DNS records, and risk scores, and can triage the inbox and track self-guided takedowns as you file them.
https://notolens.com/mcpConnect Cursor, Claude Desktop, or any client supporting remote MCP servers. Included on every plan. notolens never dismisses a match on its own; triage changes only when you or your agent ask.
What came in overnight? Triage it for me.
One needs you today. notolens-login.com copies your sign-in page.
notolens-login.com
Sign-in form posting off-site
9/10
n0tolens.io
Mail active (MX), typo variant
6/10
notolnes.net
Parked with Sedo
2/10
Watch the mail one, dismiss the parked one. Options on the phishing site?
Done. Possible next steps: anti-phishing lists, registrar and hosting abuse reports, each with verified contacts and steps.
Filed the reports. Track it as a takedown.
Takedown started, reports logged. Mark it succeeded once the site is down.
A lookalike name is where the work starts. notolens records 50+ signals on every match, from registration and site to mail and hosting, then the AI assessor weighs them together.
Who registered the name, through which registrar, and when.
notolens opens the site in a real browser, captures a screenshot, and reads the page the way a visitor would.
Whether the name can send mail that looks like it comes from you.
Who serves the site, and whether it is a parking page or a site of its own.
The AI assessor reads every fact together, scores the risk from 0 to 10, and writes down why. A failed check reads as inconclusive, never as low risk.
New registration
notolens-login.com
Registration
Website
Hosting
Adds "login" to the brand name and runs a live sign-in form that sends passwords to a Telegram bot. Mail is set up with no DMARC enforcement.
Illustrative record with sample data.
Some lookalikes go straight to collecting credentials. Others sit parked for months before they are used. A lookup only shows what exists on the day you check; notolens flags a new one within a day of registration.
Every new domain across 1,570 TLDs is checked against your brand: typos, swapped letters, hyphens, and your name inside longer domains.
If a domain match you dismissed or resolved expires and is later re-registered, it returns to your inbox marked as reappeared, with a fresh record.
Previously dismissed domain re-registered after expiration. Returned to inbox with updated DNS and host records.
Each match comes with the details that decide what to do next: whether the site is live and what it shows, who hosts the domain, and whether it can send mail.
Each assessed match is scored from 0 to 10 on the facts that were observed, so a parked page never looks the same as a site actively harvesting passwords.
Finding a match is the easy part. notolens scores it, keeps the proof, and tracks self-guided takedowns with step-by-step guidance.
New domain registrations across 1,570 TLDs are checked against your brand: typos, lookalikes, plurals, and your name inside longer domains.
Caught at registration, while there is still time to act.
An AI assessor scores each match from 0 to 10 on 50+ observed signals, checking the live site, sign-in forms, and mail setup directly against your brand.
A failed check reads as inconclusive, never as low risk.
Every match keeps its complete paper trail: hosting details, registration details, mail routing, and DNS records. Export a clean evidence PDF with one click.
Watched domains get a fresh record daily.
Matches land in a single inbox. Watch, resolve, or dismiss them from your dashboard, or let your AI agent handle triage. A dismissed or resolved lookalike that expires and gets re-registered reappears in your inbox.
notolens never dismisses a match on its own.
When you need to act, start a self-guided takedown. Follow step-by-step playbooks for domain registrars and hosting providers, complete with verified abuse contacts.
Takedowns are self-guided; notolens never contacts providers on its own.
A name alone does not tell the whole story. Live website captures, mail routing, and hosting records give you the facts to decide whether to watch or act.
Last recorded Today, 04:12 UTC Next check Daily on schedule
Risk 8 /10
Adds "login" to the brand name and runs a live sign-in form that sends passwords to a Telegram bot. Mail is set up with no DMARC enforcement.
Published monthly prices and self-serve setup. Cancel anytime from the billing page.
Every new domain that copies your brand, checked and explained.
Immediate self-serve access · Cancel anytime
Start with domains. When your trademark and app need watching too, Brand Monitor adds them to the same inbox for $99/mo. Compare the Brand Monitor plan.
Run a point-in-time check on your brand, review step-by-step enforcement procedures, or read up on the threats.
Lookalike registrations of your brand from the last 30 days, ranked by pattern and TLD.
Find registrar and hosting abuse contacts and live domain status codes for any domain or IP.
Find the sponsoring registrar, collect required DNS evidence, and submit an actionable report that gets lookalike domains suspended.
Establish the three mandatory policy elements, assemble observation evidence, and recover infringing domain names through administrative proceedings.
How typosquatters exploit typing errors and lookalike characters, and how to catch them at registration.
What bad-faith domain registration means under the ACPA and UDRP, the cases that built the rules, and the enforcement ladder.
Something missing? Talk to us.
Domain monitoring is the continuous checking of new domain registrations against a brand name. Instead of a one-off search, every new registration across 1,570 TLDs is checked daily and names that imitate the brand, whether typos, lookalike characters, or the brand embedded in a longer domain, are flagged. notolens adds an AI risk score and the registrar, DNS, and site record for each match.
A free lookup tool gives you a snapshot of what exists on the day you check. A domain monitoring tool like notolens checks new registrations across all 1,570 TLDs every day, and a match reaches your inbox within a day of registration with the site, DNS, and registrar details already gathered.
The domain costs the impersonator a few dollars; the damage lands on the brand it copies. Customers who believe they are on your site hand over passwords and payments, and US consumers reported nearly $1 billion lost to business impersonators in 2025, according to the FTC. The lost trust follows the brand: research by the UK consumer group Which? found that people who have been scammed shift toward well-known companies and away from newer and smaller sellers. Knowing the day a lookalike registers leaves time to act before customers meet it.
No. SPF, DKIM and DMARC stop forged mail from your exact domain. A lookalike is a different domain that authenticates as itself, so its mail can pass every check while carrying your name; dmarc.org states that DMARC does not address cousin domain attacks. notolens records whether each lookalike can send and receive mail and whether it enforces DMARC of its own.
If a domain match you dismissed or resolved expires and is later re-registered, it returns to your inbox marked as reappeared, with a fresh record of the new registration.
The Domain Monitor plan watches 1 brand, based on 1 domain you own, against new registrations across all 1,570 TLDs. Every match includes a site check and screenshot, DNS and registrar records, and once assessed, a 0 to 10 risk score with a written summary and possible next steps. MCP access for AI agents is included. Trademark register and app store monitoring are part of the Brand Monitor plan at $99/mo, in the same inbox.
The first scan looks back over the past month of registrations, so it shows what already exists. After that, most days bring nothing new, and that is the expected result: notolens keeps checking every new registration daily, and a match reaches your inbox and daily digest only when a new lookalike appears. Dismissed domains that expire and get re-registered come back too.
No. Monitoring runs entirely on the notolens platform, so there is nothing to install, no DNS changes, and no access to your systems required.
Yes. Every plan includes full access to the notolens Model Context Protocol (MCP) server, so Claude, Cursor, or your own agents can inspect live matches, handle triage, and review records programmatically.
Add your domain once. The first scan looks back over the past month, then every new registration across 1,570 TLDs is checked daily and reaches you or your AI agent already investigated.
Start monitoring in 3 minutes