Have I Been Squatted
Catch attacker infrastructure
Have I Been Squatted finds attacker infrastructure while it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches.
What you can ask
- Triage this week's lookalike detections for my organization and flag the ones that look malicious
Example path →
MCP connector
- Server URL
https://mcp.haveibeensquatted.com/mcp- Login
- OAuth
Tools
Reads data19
Changes data8
Deletes or can't be undone9
Skills
None in the store listings. The server needs sign-in, so we could not check it
Have I Been Pwned#426
WorkOS#447