Domain protection

Know when someone registers a domain that looks like yours.

Every publicly trusted certificate is published to Certificate Transparency logs. NameSignal watches those logs continuously and tells you when a name that resembles yours shows up — before the phishing email does.

What it catches

Typosquats

One keystroke away — acmetimeshets.com, acmetimesheet.com.

Lookalike characters

Cyrillic and Greek letters that render identically to Latin ones.

Combined words

Your name glued to a lure — acme-timesheets-login, secure-acme.

Domain swaps

Your exact name on a different ending, including high-abuse TLDs.

Deceptive subdomains

Your real domain used as a subdomain of somebody else’s.

Your own domains go on an allowlist during setup, so your certificate renewals are never reported back to you as impersonations. That one step is the difference between alerts you read and alerts you learn to ignore.

A domain is never one click away

This is a product about phishing. Every suspected domain is defanged and rendered as plain text — in the app and in email — so reviewing an alert can never take you to the site it is about.

acme-timesheets-login[.]com

combosquat · score 92/100

Investigation, without visiting the site

NameSignal reads public registration (RDAP) and DNS records only. It never opens the suspected website, loads its scripts, or fetches its images.

Registrar: Example Registrar LLC
Abuse contact: abuse@example-registrar.test
Nameservers: ns1.example-host.test, ns2.example-host.test
First seen: 4 March 2026, 09:12 UTC

Illustrative values — real evidence comes from the registrar.

A takedown notice, already written

Investigating an alert also drafts the abuse report, populated with the evidence collected. This is the real generator output, not a sample of what it might look like.

Example

Generated from a fictional alert

Subject: Abuse report — suspected impersonation domain acme-timesheets-login.com

To the Abuse / Trust & Safety team,

I am reporting the domain acme-timesheets-login.com, which appears to imitate the Acme Timesheets brand and may create a risk of customer confusion or phishing.

Evidence:
- Reported domain: acme-timesheets-login.com
- Brand being imitated: Acme Timesheets
- First observed in Certificate Transparency data: 2026-03-04T09:12:00.000Z
- Detection type: combosquat
- Risk score: 92/100
- Detection reason: “acmetimesheets” paired with phishing lure “login”

Please investigate this registration and any associated hosting under your acceptable-use and abuse policies. If you require proof of trademark rights, customer reports, screenshots, or identity verification, please reply with the exact materials needed.

This notice is a request for investigation and does not claim that the registrant has been found legally liable.

Regards,
Authorized representative for Acme Timesheets

You review it, add anything the provider asks for, and send it yourself. NameSignal does not file notices on your behalf and does not give legal advice — a takedown is a claim about your rights, and that is your decision to make and your name to make it under.

What the free plan includes

Free

3 domains

Pro

Every domain

Business

Every domain

The free plan includes 3 suspicious domains, and they stay the same rather than rotating — so you can investigate them properly and follow a takedown through. If we find more, we tell you how many. Upgrading unlocks all of them at once.

What it cannot see

NameSignal watches public Certificate Transparency logs. A lookalike domain appears here when a TLS certificate is issued for it — which is almost always, because browsers require HTTPS, but a registered domain with no certificate will not be seen.
A small number of Certificate Transparency logs are polled, chosen to spread across operators. That covers the large public CAs; it is not every log in existence.
It sees a registration when a certificate is issued for it — which is almost always, because browsers require HTTPS, but a parked domain with no certificate stays invisible until one is issued.