Get warned when someone sets up a lookalike of your domain

Turtini checks public certificate logs every day for new security certificates on domain names that imitate your organization's domains: the mail domains Turtini hosts, your website domains, and DNS zones Turtini runs for you. Changes it looks for include one letter swapped, a 1 in place of an l, words added, or a different ending. It also looks for another organization's Turtini address that is one character from yours.

When it finds a new lookalike domain, your organization's owners and admins get an email. Everything it found is listed under Lookalike domains in Settings, Security (admins only), with the domain each one imitates and whether you use that domain for mail, your website or both.

Mail from a domain on that list is marked as dangerous in Turtini Mail, and links to it are stopped.

What to do:
1. If the name is yours, press Mark reviewed. It then stops counting as a warning.
2. If it is not, warn your team and the people you work with that mail and pages on that name are not from you.
3. Report it to the registrar or host listed for the domain; they can act on abuse reports.

Only certificates issued in the last two weeks are emailed about; older ones are listed without an email. Domains you hold in your own Cloudflare account that are not connected to a Turtini site are not watched yet.