Skip to content

Domain monitoring that catches lookalikes before they phish your customers.

New registrations across 1,570 TLDs, checked daily against your brand. Each lookalike is visited before it reaches you: parked or live, asking for passwords, able to send mail. You or your AI agent get the verdict and the facts behind it.

Your first scan looks back over the past month of registrations. No sales calls, unless you want one.

Every TLD, every day.

covered TLDs
1,570
Hundreds of thousands of new registrations checked across gTLDs and ccTLDs.
signals per match
50+
Site, DNS, mail, and hosting facts weighed against your brand on every match.
registration checks
Daily
Lookalikes caught at registration, before they are used against you.

Let your agent triage domain matches.

Connect any AI agent with one URL. Your agent reads new domain matches, DNS records, and risk scores, and can triage the inbox and track self-guided takedowns as you file them.

https://notolens.com/mcp

Connect Cursor, Claude Desktop, or any client supporting remote MCP servers. Included on every plan. notolens never dismisses a match on its own; triage changes only when you or your agent ask.

  1. What came in overnight? Triage it for me.

  2. list_matches3 in inbox
  3. One needs you today. notolens-login.com copies your sign-in page.

    • notolens-login.com

      Sign-in form posting off-site

      9/10

    • n0tolens.io

      Mail active (MX), typo variant

      6/10

    • notolnes.net

      Parked with Sedo

      2/10

  4. Watch the mail one, dismiss the parked one. Options on the phishing site?

  5. update_matches2 moved
  6. get_match3 guides
  7. Done. Possible next steps: anti-phishing lists, registrar and hosting abuse reports, each with verified contacts and steps.

  8. Filed the reports. Track it as a takedown.

  9. start_takedownstarted
  10. add_takedown_eventstep logged
  11. Takedown started, reports logged. Mark it succeeded once the site is down.

Illustrative session with sample data.

Catch the registration, not the fallout.

Some lookalikes start collecting credentials within hours of being registered. Others sit parked for months before they are used. A lookup only shows what exists on the day you check; notolens tells you the day a new one appears.

New registrations, checked daily

Every new domain across 1,570 TLDs is checked against your brand: typos, swapped letters, hyphens, and your name inside longer domains.

Subject domainObserved signalAssessed risk
  • noto-lens.comParked with SedoClear 2/10
  • notolens-login.appAsks for passwordsViolation 8/10
  • n0tolens.ioMail active (MX)Warning 6/10

Reappeared domains

If an impersonating domain expires and is later re-registered, it returns directly to your inbox. You never miss a dormant lookalike becoming active again.

notolens-verify.comReappeared

Previously dismissed domain re-registered after expiration. Returned to inbox with updated DNS and host records.

The facts behind the name

Each match comes with the details that decide what to do next: whether the site is live and what it shows, who hosts the domain, and whether it can send mail.

A Record:104.21.48.12 (AS13335)
MX Record:10 mail.noto-lens.com
Site Probe:200 OK · Asks for passwords

Calibrated AI risk scores

Every match is scored from 0 to 10 on the facts that were observed, so a parked page never looks the same as a site actively harvesting passwords.

  • site content & forms
  • DNS & mail
  • network & threat intel
  • screenshots & registration

From new registration to takedown.

Finding a lookalike is the easy part. notolens scores it, keeps the proof, and tracks self-guided takedowns with step-by-step guidance.

  1. Detect

    New domain registrations across 1,570 TLDs are checked against your brand: typos, lookalikes, plurals, and your name inside longer domains.

    Caught at registration, while there is still time to act.

  2. Assess

    An AI assessor scores each match from 0 to 10 on more than 50 observed signals, checking the live site, sign-in forms, and mail setup directly against your brand.

    A failed check reads as inconclusive, never as low risk.

  3. Record

    Every match keeps its complete paper trail: hosting details, registrar contacts, mail routing, and DNS records. Export a clean evidence PDF with one click.

    Watched domains get a fresh record daily.

  4. Triage

    Matches land in a single inbox. Watch, resolve, or dismiss them in seconds from your dashboard, or let your AI agent handle triage. A lookalike that expires and gets re-registered reappears in your inbox.

    notolens never dismisses a match on its own.

  5. Takedown

    When you need to act, start a self-guided takedown. Follow step-by-step playbooks for domain registrars and hosting providers, complete with verified abuse contacts.

    Takedowns are self-guided; notolens never contacts providers on its own.

Every match backed by its source record.

A name alone does not tell the whole story. Live website captures, mail routing, and hosting records give you the facts to decide whether to watch or act.

notolens-login.com

Last recorded Today, 04:12 UTC Next check Daily on schedule

Watching
Assessment Likely violation

Brand keyword combination with an active sign-in form harvesting credentials via a Telegram bot endpoint. Mail routing configured with no DMARC enforcement.

AI suggested steps
Risk 8 /10
notolens Account Sign In
Record

Why it matched

Match pattern Contains “notolens”
Matched text notolens
Signals Asks for passwords Sends form data to api.telegram.org Sends data to Telegram

The real match view, filled with sample data.

Transparent pricing. No sales calls.

Published monthly prices and self-serve setup. Cancel anytime from the billing page.

Domain Monitor

Every new domain that copies your brand, checked and explained.

$29/ month
Start monitoring in 3 minutes

Immediate self-serve access · Cancel anytime

Included in this plan

  • 1 brand with 1 domain
  • New registrations checked daily across all 1,570 TLDs
  • Typos, lookalikes, and your brand inside longer names
  • 50+ signals checked and explained on every match
  • Live site check, screenshot, and evidence PDF
  • Reappeared domains returned to your inbox
  • Possible next steps with verified abuse contacts and takedown tracking
  • MCP server access for your AI agent

Start with domains. When your trademark and app need watching too, Brand Monitor adds them to the same inbox for $99/mo. Compare the Brand Monitor plan.

Questions about domain monitoring

Something missing? Talk to us.

Stop lookalike domains before they launch.

Add your domain once. The first scan looks back over the past month, then every new registration across 1,570 TLDs is checked daily and reaches you or your AI agent already investigated.

Start monitoring in 3 minutes