DNS Permutation

In use is not the same as hostile

A lookalike with DNS records has been registered by someone: you, a registrar parking it, an unrelated business with a similar name, or an attacker. The report says which ones exist; deciding which ones matter means looking at them.

Check “Accept mail” first

A lookalike with mail exchangers can receive replies to a phishing message, and messages people mean to send you. One that publishes a null MX says it accepts no mail at all, which is what a defensive registration usually looks like.

Received an email from one of them? Email Checker will tell you whether it shows signs of phishing.

Not in DNS, No answer

Not in DNS means the name has no nameservers, address or mail exchangers: it is almost always free to register. No answer means DNS did not reply in time, so we cannot say; it is never counted as free. Check again later: these usually resolve.

What to do about them

On your network, block them: download the blocklist and load it on the firewall, the internal DNS or the proxy. Check the Other TLD ones first, which often belong to the same owner (paypal.de is PayPal's). Outside, for the ones aimed at your customers: register the most convincing free ones yourself, and have those impersonating you taken down through the abuse contacts of the registrar and the host. With EXYS Secure DNS the blocking is done for you, with no list to maintain by hand.