Spot the impostors.

Type a website to see what it exposes and who is pretending to be it. Type a username to find everywhere it lives.

Domain or username

Try , or

0scanning

Following the trail…

Results land on the board as each check finishes.

Case closed

Target
Subdomain
Server
Risky port
Lookalike
Account
Possible impostor

Email security

Website

Where the servers are

Subdomains

Highlighted names suggest test, admin or internal systems.

What the archive remembers

No registered lookalikes yet.

Possible impostors

Handles one step away from the real one, on platforms where fake support accounts are common.

Where the handle exists

How Sleuth works

It only reads what's already public. Nothing is attacked, logged into or probed beyond loading a homepage, like any visitor would.

Exposure. DNS and email records, registration data, certificate logs for subdomains, Shodan's open-port index, server locations, security headers and the Wayback Machine.
Lookalike domains. Hundreds of typo, swapped-letter, foreign-alphabet and “-login” variants are generated and checked. Registered ones are profiled: can they receive mail, how new are they, do they show a login page?
Accounts. The handle is checked on 200+ sites using the open-source Sherlock project's rules, plus support-style variants on scam-prone platforms.

Use it on organisations you work for or study, and on your own usernames. Results are kept for six hours, so repeat scans replay instantly.