Troubleshooting
The lookalike check found nothing
What an empty result means, why it always comes with a coverage count, how to widen the check, and when a known impostor does not show up.
Updated · 2 min read
"Nothing found" is a statement about coverage
The result always says how many variations were checked (100 on the public tool, 150 on Free, 250 on Starter, 750 on Pro, 2,000 on Enterprise). Nothing found means none of those candidates is registered, resolves, or appears in certificate logs. It does not mean nothing is out there.
Widen it
- A bigger plan checks more candidates, in the order most likely to matter. A seven-character name has over a thousand plausible variations.
- Add sister brands and product names as their own domains; each gets its own check.
- Turn on the watch (Starter and up) so a candidate registered next month is caught by the weekly or daily re-check, and the daily new-registration feed catches names registered before they have DNS.
A known impostor is not listed
- It is not a permutation of your name. A domain that merely contains your brand plus another word may be outside the algorithms' output; report it to us (Help in the web dashboard, or Ask NHM in the app) so the case can be looked at.
- It has a verdict. A lookalike marked
ours,unrelatedorknownis silenced or moved. Check the verdict list. - It scored benign. It was registered before your domain, or its homepage redirects to your site, so the assessment ended early. The reasons are on the row.
- The check ran without the homepage comparison. The homepage and favicon comparison, the signals that turn "looks like" into "is impersonating", run only in the account, once the domain you are protecting is verified, never on the public tool. Without them, a copied site is still listed but scored lower.
The variations do not include my TLD swap
TLD swaps are included for the common set. A country TLD not in the list is worth adding as a domain of its own so it is checked directly.
Related
Keep reading
Related articles
- Hosts and open portsEvery host a scan found, grouped by domain, with its services named by what the port means; the 134-port list; and why an empty list is not an all-clear.Vulnerabilities and exposure ·Updated
- The lookalike checkHow variations are generated and ranked, how many are checked on each plan, how many lookalikes are examined in detail, and why the result states its coverage.Impostor domains ·Updated
- What DomainGuard does (and does not do)The checks DomainGuard runs on a domain, the rules every result follows, and the things it deliberately never does.Getting started ·Updated
