Detect lookalike domains before your customers do.
Fake sites come back on new domains. Monitoring checks for lookalikes of your domain every day, scores what it finds, and alerts you to the ones worth acting on, with the evidence already captured.
Every lookalike domain is scored by risk.
Most lookalike domains are parked and harmless. A few are live sites with a certificate, a web server and a mail server. The score puts those at the top, so you review five names rather than five hundred.
- Seen in a newly issued security certificate
- Registered recently
- Resolves to a web server
- Can receive email
- How closely the name imitates yours
Lookalike candidates · acmepaints.co.uk
Watchingacmepaints-outlet.shop
CT log · dictionary
Open case92acmepaimts.co.uk
Permutation · replacement
Open case71xn--acmepants-9db.com
New domains · homoglyph
Watch58acme-paints.store
CT log · hyphenation
Watch48acmepaintss.com
Permutation · repetition
Watch22
We check three sources every day.
Typo and lookalike permutations
We generate the variations of your domain that a fraudster would register (dropped and swapped letters, characters that look identical, added words like “outlet”, different endings) and check which ones exist.
Certificate transparency
Every HTTPS certificate issued is published to public logs. A fake site collecting payments or passwords almost always has one, so watching the live stream catches many fake sites on the day they are set up, often before they are advertised.
Newly registered domains
Daily feeds of freshly registered domains are matched against your brand terms, catching names our permutations would not guess.
The clone beacon makes scraped copies report themselves.
Fake sites are often made by scraping your site's pages wholesale, scripts included. The beacon is a few lines of code you add to your site's footer. On your real site it does nothing. On a scraped copy, the address is not yours, so it reports the fake site to us and sends the visitor to the same page on your real site.
It works with any platform that lets you add code to the theme or footer, including WordPress, Shopify, WooCommerce, Magento, Webflow and Squarespace, and it is wrapped so it can never break a page.
<!-- your site footer, every page --> <script>(function(){try{ var own=["acmepaints.co.uk"]; // on your real site: does nothing // on a fake site: reports it, sends the visitor to your real site … }catch(e){}})();</script>
Your site was loaded on a domain you do not own
acmepaints-outlet.shop/products/cadmium-red-37ml
Beacon triggered on a scraped copy of your site · case opened for review
Every alert can become a takedown case in one click.
When a candidate scores high, you get an email. By the time you open it, the evidence is already being captured. Turn it into a case and the reports are drafted and ready for you to approve, with daily rechecks and follow-ups after sending. Takedown Packs are unlimited on both plans.
Monitor
£49/mo
Detect the next lookalike domain before your customers do.
- — 1 brand
- — Daily lookalike-domain scan
- — Alerts on new high-scoring candidates
- — Evidence captured automatically
- — Unlimited Takedown Packs
Protect
£149/mo
For groups running several sites or brands.
- — Up to 3 brands
- — Everything in Monitor
- — Follow-up reports on every case
- — Clone beacon for your site
- — Team seats with approver roles
- — Priority support
Launch prices in GBP, including VAT. The price you see is the price you pay. Compare all plans
Start a takedown
Dealing with a fake site today? Start with the free check.
Most people find us because a fake site is already live. Check it free, get it taken down with a Takedown Pack, and add monitoring afterwards if you want it.