Know when someone registers your name.
We generate the lookalikes of every domain you protect, flag the ones that get registered, and look at what they serve. You decide what gets taken down, by approval or by your signed rules.
- registered lookalike domains found in the last 30 days
- 2,300+
- brands under continuous monitoring
- 1,800+
Generate, watch, act.
Three steps run for every domain on your account. Each one produces something you can see in your console.
-
Generate
For every domain you protect, we generate the lookalikes an attacker would register: character swaps and your brand plus common words.
acmw.example Generated Character swapacme-pay.example Generated Brand plus a common wordand more, for every domain on your account -
Watch
New registrations are flagged from registry data, usually within a day of registration. Domains that are already registered are re-checked, so you hear when one starts serving a website or receiving mail.
acme-secure-login.example New Registered yesterdayacmw.example Changed Mail server addedacme-pay.example Watching Still parked, re-checked -
Act
We look at what the domain actually serves, so a parked page and a live login page are not treated the same. You get an alert, and a takedown is drafted with its evidence, waiting for your approval or filed under your signed rules. Nothing is filed outside your approval or your signed rules.
acme-secure-login.example High Serving a login pageTakedown draft Awaiting approval Evidence summary attached
Generate
For every domain you protect, we generate the lookalikes an attacker would register: character swaps and your brand plus common words.
Watch
New registrations are flagged from registry data, usually within a day of registration. Domains that are already registered are re-checked, so you hear when one starts serving a website or receiving mail.
Act
We look at what the domain actually serves, so a parked page and a live login page are not treated the same. You get an alert, and a takedown is drafted with its evidence, waiting for your approval or filed under your signed rules. Nothing is filed outside your approval or your signed rules.
Hourly certificate checks.
We check certificate-transparency logs every hour for certificates issued to names that look like your brands, so a lookalike that gets a certificate shows up before it's used.
What's covered, and what isn't.
Every claim on this page has a limit. These are the limits.
| Area | Covered | Not covered |
|---|---|---|
| Which domains | Lookalikes of the domains and brands on your account. | Lookalikes of domains that aren't on your account. |
| Kinds of lookalike | Character swaps and your brand plus common words. | Every possible variation of your name. |
| Timing | Newly registered lookalikes are usually flagged within a day of registration. Registered ones are re-checked. | A promise that every generated variant is checked within a day. |
| What we look at | Whether a lookalike is registered, whether it serves a website or receives mail, and what the page serves. | Proof of intent. A level like High is a likelihood, and you decide what to act on. |
| Certificates | Certificate-transparency checks every hour for certificates issued to names that look like your brands. | Alerts the moment a certificate is issued, and brands you haven't added. |
| Your own domains | Your official domains are recognised and set aside automatically. Tell us your CDNs and partners and we exclude them too. | Self-serve allow-listing in the console. Our team adds them for you. |
| Removal | Takedowns drafted for lookalike domains, with an evidence summary. Removed domains are re-checked. | Filing anything without your approval or your signed rules. |
Which domains
- Covered
- Lookalikes of the domains and brands on your account.
- Not covered
- Lookalikes of domains that aren't on your account.
Kinds of lookalike
- Covered
- Character swaps and your brand plus common words.
- Not covered
- Every possible variation of your name.
Timing
- Covered
- Newly registered lookalikes are usually flagged within a day of registration. Registered ones are re-checked.
- Not covered
- A promise that every generated variant is checked within a day.
What we look at
- Covered
- Whether a lookalike is registered, whether it serves a website or receives mail, and what the page serves.
- Not covered
- Proof of intent. A level like High is a likelihood, and you decide what to act on.
Certificates
- Covered
- Certificate-transparency checks every hour for certificates issued to names that look like your brands.
- Not covered
- Alerts the moment a certificate is issued, and brands you haven't added.
Your own domains
- Covered
- Your official domains are recognised and set aside automatically. Tell us your CDNs and partners and we exclude them too.
- Not covered
- Self-serve allow-listing in the console. Our team adds them for you.
Removal
- Covered
- Takedowns drafted for lookalike domains, with an evidence summary. Removed domains are re-checked.
- Not covered
- Filing anything without your approval or your signed rules.
Takedowns for lookalike domains follow your rules: see how takedowns work.
After the domain, the rest of the impersonation
Find the lookalikes of your domain.
Run a free domain scan, no signup. Or book a demo and we'll set up monitoring for your domains with you.