Case studies
Seven cases: what was faked, how it was found and what happened next. The companies are not named.
Attacks we got taken down
- Fake online storesUpmarket e-commerce14 taken down
US · October 2026
Upmarket e-commerce brand gets 14 fake stores taken down in its first two weeks, without its lawyers
Read the case studyOutcome
Seven fake stores found within three days. Five taken down in the first week, and 14 in the first two weeks.
- Fake invoices
- Real
- brandname.com
- Fake
- brandname-products.com
E-commerce and wholesale products · Mid-2026
Products company gets a fake domain taken offline after the domain emailed its customers about new bank details
Read the case studyOutcome
On anti-phishing blocklists the same day. The registrar later took the domain offline.
- Copied website
- Real
- brandname.com
- Fake
- brandname.free-host.example
AI solutions and consulting · Mid-2026
AI consultancy gets a copy of its website removed from a free hosting platform in about a day
Read the case studyOutcome
Offline about 24 hours after the copy was confirmed.
- Copied website
- Real
- brandname.com
- Fake
- brandname.io
Software and AI services, PE-backed · Europe · Early 2026
PE-backed software group gets a cloned website taken down before any customer was known to use it
Read the case studyOutcome
Offline before any customer, prospect or employee was known to have used it.
Why companies brought us in
What happened before each company brought us in, and what we watch for now.
- Fake job offersSoftware (customer loyalty platforms)
Scams from July 2025, DefendDomain added later
Software company gets help against fake recruiters who charged job seekers in its name
Read the case studyOutcome
New lookalike domains are flagged when they are registered, and DefendDomain runs the takedowns.
- Marketplace scamsOnline marketplace (vintage and antique furniture)
September 2025
Furniture marketplace goes after fake copies of its site after a TV campaign
Read the case studyOutcome
DefendDomain was brought in to find the fake copies of the site and get them removed.
- Fake invoicesPharmaceuticals
Loss in 2023, monitoring added later
Why a pharmaceutical company added lookalike monitoring after a €150,000 loss
Read the case studyOutcome
The company later brought in DefendDomain to watch for the lookalike domains and fake payment pages that can follow this kind of attack.
Check your own domain
See which lookalikes of your web address are already registered, and which can send email.
Run a free scanChecks 150+ lookalikes of your domain in a couple of minutes and emails the report to your work address. No account, no card.
Happening to you now?
A fake site, or emails to your customers from an address that looks like yours.
Report a live attackFree to report. No account needed. One of our team calls you back, usually the same working day. Out of hours, email security@defenddomain.com.