Skip to main content
DefendDomain
Under attack?
Solutions

Many scams start with a web address that looks like yours

Fake invoices, copied websites and fake login pages run on lookalikes such as yourcompany-invoices.com. We find them, tell you which can send email as you, and get the ones used against you taken down.

Already happening?

Report a live attack

Free to report. No account needed. One of our team calls you back, usually the same working day.

Check for lookalike domains

Checks 150+ lookalikes of your domain in a couple of minutes. No account, no card. We email the report to a work address, not Gmail or Outlook.com.

Out of hours, email security@defenddomain.com.

What criminals do with a fake web address

Every page below describes the same product. What changes is what the criminal does with the fake address.

A fake invoice domain is registered and set up to send email before the first invoice goes out, and we can catch it at that stage.

Other ways it is used

How it works in your sector

What a fake address is used for depends on who pays whom in your business. Each page walks through one attack on your sector and what we watch for you.

What we cover and what we don't

We find

  • Lookalike domains of yours, including ones set up only to send email
  • New security certificates for names that look like yours
  • Copies of your website and your wording, including on free hosting sites
  • Gaps in your own domains’ email and security settings

We report it to

  • The registrar, the host and the email provider, which can switch the domain off
  • Spam blocklists and browser warning lists, so mail filters and browsers block it
  • Search engines, to drop a fake website from their results

Most takedowns take between 2 and 96 hours, depending on the registrar and host involved.

We do not

  • Recover money that has already been paid
  • Remove social media accounts, ads, app-store or marketplace listings
  • Stop text or WhatsApp messages, or remove the numbers they come from
  • Protect a real mailbox that has been hacked

If an ad, a post or a text points to a fake site on a lookalike of your domain or a copy of your website, we can go after that site.

We watch around 500 names per domain that an attacker is most likely to use. A name nobody would predict can slip past that list. Watching new certificates and copies of your website is how we catch more of those.

For IT and security teams

Where your other security tools stop

Email filters, firewalls and staff training guard your own systems. A lookalike domain is registered and run by the criminal, outside all of them.

What we have taken down

Four of our cases, each ending with the fake taken offline.

Find out who is using your name

Start with a free scan of your domain, or book a demo and we will show you what we find, live.

Run a free scanBook a demo

Looking after clients as an MSP or IT provider? See the partner programme