Norton
Registered lookalikes
Spellings of Norton's official domains (norton.com, nortonlifelock.com, lifelock.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
12 of the 161 are listed by a source or resolve to a listed address, checked hourly.
- n0rton.com AU · AS133618 · Trellian Pty. LimitedLookalike of norton.com · similar-looking charactersParking page · Trellian / Above.comMX present
DetailsHide details for n0rton.com
- Domain
- n0rton.com
- Spelling
- Spelled like norton.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2010-09-01 · Above.com Pty Ltd.
- Addresses
- 103.224.182.239 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Trellian / Above.com
- Trellian / Above.com (103.224.182.239): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.co US · AS16509 · Amazon.com, Inc.4 addressesLookalike of lifelock.com · the ending .coAmazon Web Services
DetailsHide details for lifelock.co
- Domain
- lifelock.co
- Spelling
- The name of lifelock.com with the ending .co
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2010-07-21 · Key-Systems GmbH
- Addresses
- 5.22.145.16 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)5.22.145.121 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)2a00:18e0:5:2:7577:4e4d:413b:f5072a00:18e0:5:3:dfe2:c743:85aa:61bc
- Amazon Web Services
- Amazon Web Services (5.22.145.16, 5.22.145.121): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.com.ua FR · AS16276 · OVH OVH SASLookalike of norton.com · the ending .com.uaOVH
DetailsHide details for norton.com.ua
- Domain
- norton.com.ua
- Spelling
- The name of norton.com with the ending .com.ua
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2009-04-14 · Internet Invest LLC
- Addresses
- 5.39.10.93 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (5.39.10.93): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifrlock.com AU · AS133618 · Trellian Pty. LimitedLookalike of lifelock.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for lifrlock.com
- Domain
- lifrlock.com
- Spelling
- Spelled like lifelock.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2009-04-04 · Above.com Pty Ltd.
- Addresses
- 103.224.182.252 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates lifrlock.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.252): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · the ending .proCloudflare
DetailsHide details for norton.pro
- Domain
- norton.pro
- Spelling
- The name of norton.com with the ending .pro
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2008-10-19 · EnCirca, Inc.
- Addresses
- 104.21.87.221 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.251 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:57dd2606:4700:3035::ac43:aafb
- Cloudflare
- Cloudflare (104.21.87.221, 172.67.170.251): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.ca SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of lifelock.com · the ending .caParking page · Shared parking pageMX present
DetailsHide details for lifelock.ca
- Domain
- lifelock.ca
- Spelling
- The name of lifelock.com with the ending .ca
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2008-02-27 · Namespro Solutions Inc.
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.mailerhost.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigital.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of gendigital.com · the ending .netParking page · Dan.com
DetailsHide details for gendigital.net
- Domain
- gendigital.net
- Spelling
- The name of gendigital.com with the ending .net
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2007-06-03 · Dynadot Inc
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Dan.com
- The registry delegates gendigital.net to Dan.com’s nameservers, which answer for it. Dan.com: a parking service. It answers for names that are typically for sale or unused. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelok.com AU · AS133618 · Trellian Pty. LimitedLookalike of lifelock.com · a dropped letterRegistry lookup queuedParking page · Above.comMX present
DetailsHide details for lifelok.com
- Domain
- lifelok.com
- Spelling
- Spelled like lifelock.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2006-11-15 · GoDaddy.com, LLC
- Addresses
- 103.224.182.243 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates lifelok.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.243): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- liflock.com VG · AS40034 · Confluence Networks IncLookalike of lifelock.com · a dropped letterParking page · Confluence Networks
DetailsHide details for liflock.com
- Domain
- liflock.com
- Spelling
- Spelled like lifelock.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2006-04-26 · April Sea Corporation Company Limited
- Addresses
- 199.191.50.73 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
- Parking page · Confluence Networks
- Confluence Networks (199.191.50.73): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-financial-services.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · the name with the word “financial-services”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-financial-services.info
- Domain
- norton-financial-services.info
- Spelling
- The name of norton.com with the word “financial-services”
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2005-11-18 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-financial-services.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · the name with the word “financial-services”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-financial-services.org
- Domain
- norton-financial-services.org
- Spelling
- The name of norton.com with the word “financial-services”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2005-11-18 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.org US · AS14618 · Amazon.com, Inc.2 addressesLookalike of lifelock.com · the ending .orgRegistry lookup queuedAmazon Web Services
DetailsHide details for lifelock.org
- Domain
- lifelock.org
- Spelling
- The name of lifelock.com with the ending .org
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2005-02-16 · Tucows Domains Inc.
- Addresses
- 18.208.88.157 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)98.84.224.111 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (18.208.88.157, 98.84.224.111): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.net US · AS31863 · Centrilogic, Inc.Lookalike of lifelock.com · the ending .netRegistry lookup queued
DetailsHide details for lifelock.net
- Domain
- lifelock.net
- Spelling
- The name of lifelock.com with the ending .net
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2002-12-10 · GoDaddy.com, LLC
- Addresses
- 23.92.212.164 · United States · AS31863 DACEN-2 - Centrilogic, Inc.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · the ending .infoParking page · Afternic
DetailsHide details for norton.info
- Domain
- norton.info
- Spelling
- The name of norton.com with the ending .info
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2001-08-10 · Dynadot Inc
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates norton.info to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.cz CZ · AS208414 · WEDOS-GLOBAL WEDOS Internet…2 addressesLookalike of norton.com · the ending .cz
DetailsHide details for norton.cz
- Domain
- norton.cz
- Spelling
- The name of norton.com with the ending .cz
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1998-12-28 · WEDOS Internet, a.s.
- Addresses
- 185.8.237.24 · Czechia · AS208414 WEDOS-GLOBAL WEDOS Internet, a.s.2a0e:acc0::d24
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.org.uk DE · AS8560 · IONOS-AS IONOS SELookalike of norton.com · the ending .org.ukIONOSMX present
DetailsHide details for norton.org.uk
- Domain
- norton.org.uk
- Spelling
- The name of norton.com with the ending .org.uk
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1998-05-31 · Fasthosts Internet Ltd
- Addresses
- 88.208.252.9 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (88.208.252.9): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mailserver.livemail.co.uk
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.nl US · AS8075 · Microsoft CorporationLookalike of norton.com · the ending .nlMicrosoft AzureMX present
DetailsHide details for norton.nl
- Domain
- norton.nl
- Spelling
- The name of norton.com with the ending .nl
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1998-01-15 · DHost B.V.
- Addresses
- 172.201.53.146 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
- Microsoft Azure
- Microsoft Azure (172.201.53.146): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mtaroutes.commx2.mtaroutes.commx3.mtaroutes.commx4.mtaroutes.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.net CA · AS15348 · Tucows.com Co.Lookalike of norton.com · the ending .netParking page · TucowsMX present
DetailsHide details for norton.net
- Domain
- norton.net
- Spelling
- The name of norton.com with the ending .net
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1996-10-08 · Tucows Domains Inc.
- Addresses
- 216.40.34.37 · Canada · AS15348 TUCOWS - Tucows.com Co. · Tucows (parking page)
- Parking page · Tucows
- Tucows (216.40.34.37): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx.netidentity.com.cust.hostedemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · the ending .orgRegistry lookup queuedCloudflareMX present
DetailsHide details for norton.org
- Domain
- norton.org
- Spelling
- The name of norton.com with the ending .org
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1996-02-22 · Network Solutions, LLC
- Addresses
- 172.66.134.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.66.139.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:10::ac42:86462606:4700:10::ac42:8bc1
- Cloudflare
- Cloudflare (172.66.134.70, 172.66.139.193): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- norton-org.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.co.uk IT · AS39729 · REGISTER-AS REGISTER S.P.A.Lookalike of norton.com · the ending .co.ukMX present
DetailsHide details for norton.co.uk
- Domain
- norton.co.uk
- Spelling
- The name of norton.com with the ending .co.uk
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 1995-11-23 · GoDaddy.com, LLC.
- Addresses
- 185.2.5.7 · Italy · AS39729 REGISTER-AS REGISTER S.P.A.
- MX
- athena.hosts.co.ukhermes.hosts.co.uk
- Daily check
- Ended 2026-11-04 22:41 UTC
- genzdigital.shop US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · an added characterRegistry lookup queuedCloudflare
DetailsHide details for genzdigital.shop
- Domain
- genzdigital.shop
- Spelling
- Spelled like norton.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- Addresses
- 104.21.41.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.164.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:a42b2606:4700:3037::6815:2962
- Cloudflare
- Cloudflare (104.21.41.98, 172.67.164.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- life-lock.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · an added hyphenRegistry lookup queuedAmazon Web Services
DetailsHide details for life-lock.shop
- Domain
- life-lock.shop
- Spelling
- Spelled like norton.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- Addresses
- 64.29.17.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (64.29.17.65, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelocksecure.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of norton.com · the name with an added wordRegistry lookup queuedHostinger CDNMX present
DetailsHide details for lifelocksecure.shop
- Domain
- lifelocksecure.shop
- Spelling
- The name of norton.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- Addresses
- 195.35.60.30 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)212.1.212.3 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:1e:b52:ddc9:c3fd:a544:ca932a02:4780:21:75f1:4ded:9909:2174:f108
- Hostinger CDN
- Hostinger CDN (195.35.60.30, 212.1.212.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx1.hostinger.commx2.hostinger.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-payment-department.shopLookalike of norton.com · the name with the word “payment-department”No address or mail server yetRegistry lookup queued
DetailsHide details for norton-payment-department.shop
- Domain
- norton-payment-department.shop
- Spelling
- The name of norton.com with the word “payment-department”
- First found
- 2026-11-01 · the day we first found it in the .shop zone file, already registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nortonlifelock.cn DE · AS47846 · SEDO-AS SEDO GmbHLookalike of nortonlifelock.com · the ending .cnParking page · Sedo
DetailsHide details for nortonlifelock.cn
- Domain
- nortonlifelock.cn
- Spelling
- The name of nortonlifelock.com with the ending .cn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates nortonlifelock.cn to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nortonlifelock.vnLookalike of nortonlifelock.com · the ending .vnMX present
DetailsHide details for nortonlifelock.vn
- Domain
- nortonlifelock.vn
- Spelling
- The name of nortonlifelock.com with the ending .vn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- MX
- mail.nortonlifelock.vn
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.beLookalike of norton.com · the ending .beMX present
DetailsHide details for norton.be
- Domain
- norton.be
- Spelling
- The name of norton.com with the ending .be
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- MX
- mail.norton.be
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.cnLookalike of norton.com · the ending .cnNo address or mail server yet
DetailsHide details for norton.cn
- Domain
- norton.cn
- Spelling
- The name of norton.com with the ending .cn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.co.jp JP · AS9370 · SAKURA Internet Inc.Lookalike of norton.com · the ending .co.jpMX present
DetailsHide details for norton.co.jp
- Domain
- norton.co.jp
- Spelling
- The name of norton.com with the ending .co.jp
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 59.106.19.11 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- MX
- norton.co.jp
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.com.auLookalike of norton.com · the ending .com.auMX present
DetailsHide details for norton.com.au
- Domain
- norton.com.au
- Spelling
- The name of norton.com with the ending .com.au
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au · Domain Directors Pty Ltd trading as Instra
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.com.tr FR · AS20756 · NAMESHIELD NAMESHIELD SAS2 addressesLookalike of norton.com · the ending .com.trMX present
DetailsHide details for norton.com.tr
- Domain
- norton.com.tr
- Spelling
- The name of norton.com with the ending .com.tr
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 81.92.91.56 · France · AS20756 NAMESHIELD NAMESHIELD SAS185.65.58.55 · France · AS20756 NAMESHIELD NAMESHIELD SAS
- MX
- mx3.nameshield.commx4.nameshield.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.com.uyLookalike of norton.com · the ending .com.uyNo address or mail server yet
DetailsHide details for norton.com.uy
- Domain
- norton.com.uy
- Spelling
- The name of norton.com with the ending .com.uy
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.com.vn VN · AS63760 · AZDIGI CorporationLookalike of norton.com · the ending .com.vn
DetailsHide details for norton.com.vn
- Domain
- norton.com.vn
- Spelling
- The name of norton.com with the ending .com.vn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 103.221.223.76 · Vietnam · AS63760 AZDIGI-AS-VN - AZDIGI Corporation
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.dk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · the ending .dkCloudflareMX present
DetailsHide details for norton.dk
- Domain
- norton.dk
- Spelling
- The name of norton.com with the ending .dk
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 104.21.26.10 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.30 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:1a0a2606:4700:3036::ac43:871e
- Cloudflare
- Cloudflare (104.21.26.10, 172.67.135.30): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.norton.dk
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.gr DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of norton.com · the ending .grHetznerMX present
DetailsHide details for norton.gr
- Domain
- norton.gr
- Spelling
- The name of norton.com with the ending .gr
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 88.99.172.145 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (88.99.172.145): a cloud provider. It rents servers and addresses to its customers.
- MX
- norton.gr
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.ie US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · the ending .ieCloudflareMX present
DetailsHide details for norton.ie
- Domain
- norton.ie
- Spelling
- The name of norton.com with the ending .ie
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 104.21.11.243 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.193.31 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:c11f2606:4700:3034::6815:bf3
- Cloudflare
- Cloudflare (104.21.11.243, 172.67.193.31): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.norton.ie
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.im US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · the ending .imAmazon Web Services
DetailsHide details for norton.im
- Domain
- norton.im
- Spelling
- The name of norton.com with the ending .im
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 43.199.223.101 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)2406:da1e:526:f63b:e9a3:93cf:50e8:2f8c
- Amazon Web Services
- Amazon Web Services (43.199.223.101): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.jp JP · AS37907 · DigiRock, Inc.Lookalike of norton.com · the ending .jpMX present
DetailsHide details for norton.jp
- Domain
- norton.jp
- Spelling
- The name of norton.com with the ending .jp
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 183.90.180.104 · Japan · AS37907 DIGIROCK - DigiRock, Inc.
- MX
- norton.jp
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.la US · AS16509 · Amazon.com, Inc.2 addressesLookalike of norton.com · the ending .laParking page · Afternic
DetailsHide details for norton.la
- Domain
- norton.la
- Spelling
- The name of norton.com with the ending .la
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates norton.la to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.liLookalike of norton.com · the ending .liMX present
DetailsHide details for norton.li
- Domain
- norton.li
- Spelling
- The name of norton.com with the ending .li
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- MX
- mta-gw.infomaniak.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.myLookalike of norton.com · the ending .myMX present
DetailsHide details for norton.my
- Domain
- norton.my
- Spelling
- The name of norton.com with the ending .my
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.net.cn CN · AS45090 · Shenzhen Tencent Computer S…Lookalike of norton.com · the ending .net.cnMX present
DetailsHide details for norton.net.cn
- Domain
- norton.net.cn
- Spelling
- The name of norton.com with the ending .net.cn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 101.34.243.24 · China · AS45090 TENCENT-NET-AP - Shenzhen Tencent Computer Systems Company Limited
- MX
- hzmx01.mxmail.netease.comhzmx02.mxmail.netease.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.net.nz US · AS16509 · Amazon.com, Inc.Lookalike of norton.com · the ending .net.nzAmazon Web ServicesMX present
DetailsHide details for norton.net.nz
- Domain
- norton.net.nz
- Spelling
- The name of norton.com with the ending .net.nz
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 52.64.213.110 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.64.213.110): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comaspmx4.googlemail.comaspmx5.googlemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.nu DK · AS47292 · SENTIA Sentia Denmark A/SLookalike of norton.com · the ending .nuMX present
DetailsHide details for norton.nu
- Domain
- norton.nu
- Spelling
- The name of norton.com with the ending .nu
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 217.116.232.207 · Denmark · AS47292 SENTIA Sentia Denmark A/S
- MX
- mail.gigahost.dk
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.nz US · AS16509 · Amazon.com, Inc.Lookalike of norton.com · the ending .nzAmazon Web ServicesMX present
DetailsHide details for norton.nz
- Domain
- norton.nz
- Spelling
- The name of norton.com with the ending .nz
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 52.64.213.110 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.64.213.110): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.pe US · AS31898 · Oracle CorporationLookalike of norton.com · the ending .peOracle CloudMX present
DetailsHide details for norton.pe
- Domain
- norton.pe
- Spelling
- The name of norton.com with the ending .pe
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 168.138.125.13 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
- Oracle Cloud
- Oracle Cloud (168.138.125.13): a cloud provider. It rents servers and addresses to its customers.
- MX
- norton-pe.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.ps ES · AS57910 · SCIP-AS Soluciones Corporat…Lookalike of norton.com · the ending .psMX present
DetailsHide details for norton.ps
- Domain
- norton.ps
- Spelling
- The name of norton.com with the ending .ps
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 31.214.178.31 · Spain · AS57910 SCIP-AS Soluciones Corporativas IP, SL
- MX
- mx01.dondominio.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.ro RO · AS34358 · Cyber_Folks-RO-DC_FLO Cyber…Lookalike of norton.com · the ending .roMX present
DetailsHide details for norton.ro
- Domain
- norton.ro
- Spelling
- The name of norton.com with the ending .ro
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 37.251.142.217 · Romania · AS34358 Cyber_Folks-RO-DC_FLO Cyber_Folks SRL
- MX
- mail.norton.ro
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.rs DE · AS51167 · CONTABO Contabo GmbHLookalike of norton.com · the ending .rsContaboMX present
DetailsHide details for norton.rs
- Domain
- norton.rs
- Spelling
- The name of norton.com with the ending .rs
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 164.68.127.227 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (164.68.127.227): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.norton.rs
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.st SE · AS8473 · BAHNHOF Bahnhof ABLookalike of norton.com · the ending .stMX present
DetailsHide details for norton.st
- Domain
- norton.st
- Spelling
- The name of norton.com with the ending .st
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 94.254.0.48 · Sweden · AS8473 BAHNHOF Bahnhof AB
- MX
- mail2.bahnhof.se
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.su RU · AS9123 · TimeWeb-AS JSC "TIMEWEB"Lookalike of norton.com · the ending .su
DetailsHide details for norton.su
- Domain
- norton.su
- Spelling
- The name of norton.com with the ending .su
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 82.97.243.107 · Russia · AS9123 TimeWeb-AS JSC "TIMEWEB"
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.uyLookalike of norton.com · the ending .uyNo address or mail server yet
DetailsHide details for norton.uy
- Domain
- norton.uy
- Spelling
- The name of norton.com with the ending .uy
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.vn US · AS13335 · Cloudflare, Inc.4 addressesLookalike of norton.com · the ending .vnCloudflareMX present
DetailsHide details for norton.vn
- Domain
- norton.vn
- Spelling
- The name of norton.com with the ending .vn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 104.21.19.162 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.186.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:baf62606:4700:3037::6815:13a2
- Cloudflare
- Cloudflare (104.21.19.162, 172.67.186.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton.ws US · AS396982 · Google LLC2 addressesLookalike of norton.com · the ending .wsGoogle Cloud
DetailsHide details for norton.ws
- Domain
- norton.ws
- Spelling
- The name of norton.com with the ending .ws
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 67.199.248.12 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)67.199.248.13 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (67.199.248.12, 67.199.248.13): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.com.cn SG · AS134963 · Alibaba Cloud (Singapore) P…Lookalike of lifelock.com · the ending .com.cn
DetailsHide details for lifelock.com.cn
- Domain
- lifelock.com.cn
- Spelling
- The name of lifelock.com with the ending .com.cn
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 170.33.12.185 · Singapore · AS134963 ASEPL-AS-AP - Alibaba Cloud (Singapore) Private Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.de DE · AS6724 · STRATO Strato GmbH2 addressesLookalike of lifelock.com · the ending .deMX present
DetailsHide details for lifelock.de
- Domain
- lifelock.de
- Spelling
- The name of lifelock.com with the ending .de
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 81.169.145.164 · Germany · AS6724 STRATO Strato GmbH2a01:238:20a:202:1164::
- MX
- smtpin.rzone.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock.it SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of lifelock.com · the ending .itParking page · Shared parking pageMX present
DetailsHide details for lifelock.it
- Domain
- lifelock.it
- Spelling
- The name of lifelock.com with the ending .it
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigital.com.ve US · AS30277 · DFW DatacenterLookalike of gendigital.com · the ending .com.veMX present
DetailsHide details for gendigital.com.ve
- Domain
- gendigital.com.ve
- Spelling
- The name of gendigital.com with the ending .com.ve
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 67.222.142.122 · United States · AS30277 DFW-DATACENTER - DFW Datacenter
- MX
- mail.gendigital.com.ve
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigital.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of gendigital.com · the ending .esHostingerMX present
DetailsHide details for gendigital.es
- Domain
- gendigital.es
- Spelling
- The name of gendigital.com with the ending .es
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 72.62.184.211 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (72.62.184.211): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx01.dondominio.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigital.gt US · AS13335 · Cloudflare, Inc.4 addressesLookalike of gendigital.com · the ending .gtCloudflareMX present
DetailsHide details for gendigital.gt
- Domain
- gendigital.gt
- Spelling
- The name of gendigital.com with the ending .gt
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 104.21.21.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.199.91 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:c75b2606:4700:3037::6815:15a1
- Cloudflare
- Cloudflare (104.21.21.161, 172.67.199.91): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx.zoho.commx2.zoho.commx3.zoho.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigital.pe CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of gendigital.com · the ending .peHostinger CDNMX present
DetailsHide details for gendigital.pe
- Domain
- gendigital.pe
- Spelling
- The name of gendigital.com with the ending .pe
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Addresses
- 88.223.87.165 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)145.223.124.249 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:4a:2617:e93f:f321:6c0d:992a02:4780:4c:f9c:be51:8c05:9653:68d4
- Hostinger CDN
- Hostinger CDN (88.223.87.165, 145.223.124.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Norton's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
- lifelocksprotection.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for lifelocksprotection.shop
- Domain
- lifelocksprotection.shop
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · lifelocksprotection.shop resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- getmylifelocks.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for getmylifelocks.online
- Domain
- getmylifelocks.online
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-03-09 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · getmylifelocks.online resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mylifelockspro.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for mylifelockspro.site
- Domain
- mylifelockspro.site
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-03-09 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mylifelockspro.site resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- getlifelocks360.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for getlifelocks360.site
- Domain
- getlifelocks360.site
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-03-04 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · getlifelocks360.site resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mylifelocks.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for mylifelocks.shop
- Domain
- mylifelocks.shop
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-03-03 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mylifelocks.shop resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- poweredbylifelock.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for poweredbylifelock.online
- Domain
- poweredbylifelock.online
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-03-03 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · poweredbylifelock.online resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelock360.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “lifelock”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for lifelock360.shop
- Domain
- lifelock360.shop
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-03-02 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · lifelock360.shop resolved to it 2026-11-05 00:44 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton360.online IL · AS58182 · wix_com Wix.com Ltd.3 addressesContains “norton”WixMX present
DetailsHide details for norton360.online
- Domain
- norton360.online
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-09-02 · Global Domain Group LLC
- Addresses
- 185.230.63.107 · Israel · AS58182 wix_com Wix.com Ltd. · Wix (site builder)185.230.63.171 · Israel · AS58182 wix_com Wix.com Ltd. · Wix (site builder)185.230.63.186 · Israel · AS58182 wix_com Wix.com Ltd. · Wix (site builder)
- Wix
- Wix (185.230.63.107, 185.230.63.171, 185.230.63.186): a site builder. It hosts pages for anyone who signs up.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton360.app US · AS13335 · Cloudflare, Inc.4 addressesContains “norton”Cloudflare
DetailsHide details for norton360.app
- Domain
- norton360.app
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-07-21 · Dynadot LLC.
- Addresses
- 104.21.79.15 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8c072606:4700:3034::6815:4f0f
- Cloudflare
- Cloudflare (104.21.79.15, 172.67.140.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- www-norton-com-setup.xyz US · AS22612 · Namecheap, Inc.Contains “norton”Namecheap
DetailsHide details for www-norton-com-setup.xyz
- Domain
- www-norton-com-setup.xyz
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2026-06-18 · NameCheap, Inc.
- Addresses
- 66.29.145.86 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (66.29.145.86): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- n360lifelock.storeContains “lifelock”MX present
DetailsHide details for n360lifelock.store
- Domain
- n360lifelock.store
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2026-06-09 · NameCheap, Inc.
- MX
- n360lifelock-store.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-com-setup.online SG · AS63949 · Akamai Connected Cloud8 addressesContains “norton”Parking page · Shared parking page
DetailsHide details for norton-com-setup.online
- Domain
- norton-com-setup.online
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-02-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gendigitalmx.infoContains “gendigital”No address or mail server yetRegistry lookup queued
DetailsHide details for gendigitalmx.info
- Domain
- gendigitalmx.info
- Match
- A registered domain containing “gendigital”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-02-02 · GoDaddy.com, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-helpline-n821.shop CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “norton”Parking page · Hostinger expired-domain page
DetailsHide details for norton-helpline-n821.shop
- Domain
- norton-helpline-n821.shop
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2025-10-19 · HOSTINGER operations, UAB
- Addresses
- 2.57.91.92 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger expired-domain page (parking page)
- Parking page · Hostinger expired-domain page
- The registry delegates norton-helpline-n821.shop to Hostinger expired-domain page’s nameservers, which answer for it. Hostinger expired-domain page (2.57.91.92): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-guard.site US · AS16509 · Amazon.com, Inc.2 addressesContains “norton”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-guard.site
- Domain
- norton-guard.site
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2025-09-30 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vpn-norton.info AU · AS154653 · ParkLogic Pty LtdContains “norton”Parking page · Sav.com
DetailsHide details for vpn-norton.info
- Domain
- vpn-norton.info
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2025-09-23 · Sav.com, LLC
- Addresses
- 162.4.84.252 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · Sav.com
- The registry delegates vpn-norton.info to Sav.com’s nameservers, which answer for it. Sav.com: a parking service. It answers for names that are typically for sale or unused. ParkLogic (162.4.84.252): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-com-setup.site US · AS13335 · Cloudflare, Inc.4 addressesContains “norton”Registry lookup queuedCloudflare
DetailsHide details for norton-com-setup.site
- Domain
- norton-com-setup.site
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2025-08-31 · GoDaddy.com, LLC
- Addresses
- 104.21.80.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.130 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b4822606:4700:3035::6815:5074
- Cloudflare
- Cloudflare (104.21.80.116, 172.67.180.130): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- lifelockllc.org US · AS53831 · Squarespace, Inc.Contains “lifelock”SquarespaceMX present
DetailsHide details for lifelockllc.org
- Domain
- lifelockllc.org
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-05-29 · Squarespace Domains II LLC
- Addresses
- 198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.185.159.145): a site builder. It hosts pages for anyone who signs up.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-uk-health.orgContains “norton”No address or mail server yetRegistry lookup queued
DetailsHide details for norton-uk-health.org
- Domain
- norton-uk-health.org
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2012-11-17 · GoDaddy.com, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- golifelock.info US · AS16509 · Amazon.com, Inc.2 addressesContains “lifelock”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for golifelock.info
- Domain
- golifelock.info
- Match
- A registered domain containing “lifelock”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2007-11-05 · Wild West Domains, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- MX
- golifelock-info.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-financialservices.info US · AS16509 · Amazon.com, Inc.2 addressesContains “norton”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-financialservices.info
- Domain
- norton-financialservices.info
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2005-11-18 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-financialservices.org US · AS16509 · Amazon.com, Inc.2 addressesContains “norton”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-financialservices.org
- Domain
- norton-financialservices.org
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2005-11-18 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-finance.info US · AS16509 · Amazon.com, Inc.2 addressesContains “norton”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-finance.info
- Domain
- norton-finance.info
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2001-10-10 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- norton-finance.org US · AS16509 · Amazon.com, Inc.2 addressesContains “norton”Registry lookup queuedAmazon Web Services
DetailsHide details for norton-finance.org
- Domain
- norton-finance.org
- Match
- A registered domain containing “norton”, one of the names we match for Norton
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2001-10-10 · Mesh Digital Limited
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC

