Skip to main content
DefendDomain
Under attack?

Find fake websites that use your brand

Criminals register web addresses like yours, such as yourbrand-shop.com, and copy your website to sell fakes, take payments or collect logins. We find them, including copies on free hosting, and get the ones used against you taken down.

Already have fake sites live?

Report a live attack

Free to report. No account needed. One of our team calls you back, usually the same working day.

Check for lookalike domains

Checks 150+ lookalikes of your domain in a couple of minutes and shows which are registered or can send email. It does not look for copies of your website. No account, no card. We email the report to a work address, not Gmail or Outlook.com.

Out of hours, email security@defenddomain.com.

We watch four places a fake can show up: web addresses like yours, new security certificates, copies of your website and copies of your wording.

When a fake turns up in any of them, you get the evidence a registrar or host asks for. We get the site taken down, chase the companies that have not acted and keep watching after the takedown in case it comes back.

Where fakes of your brand appear, and what we can do

Fakes of your brand turn up on websites, on social media and in ads, and we cover the websites.

Where we help

Copies of your website, wherever they are hosted

The whole site or a single page, on a domain the criminal owns or somewhere with no domain registered at all.

We look in all four places, so when one misses a copy, another can still find it.

New threat
Example
yourcompany.com

Sign in to yourcompany

Continue
Your login page
yourcompany-login.com

Sign in to yourcompany

Continue
The copy
Alerted: copy of your site
  • Your website marker reported it as it loaded
  • Your sign-in page, on an address that is not yours
  • Screenshot and registration details saved as evidence
Not covered

Fake social media accounts

Profiles that use your name and logo.

We cannot remove these. Report them to the platform.

Not covered

Ads that use your brand

Ads on Google, Facebook or Instagram that use your name.

We cannot remove an ad. Send us the address it points to, and we go after that site.

Brand fakes we find

  • Fake websites

    Fake stores using your brand

    yourbrand-outlet.com

    Your product photos and prices on a lookalike, taking payments for goods that never arrive or are fakes.

  • Fake logins

    Fake login pages

    yourbrand-login.com

    A copy of your customer login on a lookalike of your domain, used to collect passwords.

  • Fake websites

    Fake support pages

    yourbrand-support.com

    A copy of your help page that gives customers a fake number to call.

Who it is for

One person can run it. These teams usually care.

  • Marketing and brand

    Know when your site is copied

    A copy of your site or a fake store reaches you as an alert, with the screenshot beside your real page and what to do next.

  • Legal

    Evidence you can use

    The evidence pack is ready for a domain dispute (UDRP) or a lawyer’s letter.

  • IT and security

    Nothing to search for by hand

    We do the watching; you get sorted findings in the tools you already use, and one click to act.

  • Acquisitions and new brands

    Watch a new brand from the day the deal is announced

    Add an acquired company’s domains and they are watched the same way as your own.

What trademarks and platform reports leave open

Each of these is worth having. None of them tells you when a new lookalike of your domain appears.

“We own our trademarks”

A trademark helps you win a dispute over a domain, not stop one being registered, and a dispute is slow next to a report to the registrar and the host. We send that report, with the evidence attached, the moment you confirm the fake.

How our takedowns work

“We report fakes to Google and the platforms”

Removing an ad does not remove the website it pointed to, and the same site can be advertised again. Only the registrar and host can take the site itself offline, and we report it to both.

Fake stores and the ads that point to them

“Our PR team handles reputation”

PR helps once customers have noticed, and by then people have already used the fake site. We flag a lookalike when it is registered and alert you when it looks set up to attack you.

Acting before or after an attack

“We bought similar domain names”

Worth doing for the obvious ones. There are 240+ domain endings and letters that look the same, like rn for m, so nobody can buy them all. We watch every spelling you did not buy, and leave out the ones you did.

Why buying lookalike domains is not enough

How we find a fake of your brand and get it taken down

Give us your domains. Nothing needs installing unless you choose the website marker.

Step 1

We list lookalikes of your domains

Around 500 per domain: typos, your name plus a word such as -shop or -login, letters that look the same, and other endings such as .co or .shop. Each one is re-checked every hour.

Step 2

We watch new certificates

We watch 100+ public certificate logs as entries appear. A new security certificate for a name containing your brand can show up before the fake site goes live. In our software-group case, the certificate for the copy was matched within seconds of being logged.

Step 3

We look for copies of your site

We search the web for copies of your site’s wording, and the website marker (optional), a small script or a 1×1 image on pages you choose, tells us when a copy loads somewhere else. Both found the copy on free hosting in our consultancy case.

Step 4

You confirm, we report and follow up

You approve with one click and we send the evidence to up to 12 places at once, including the registrar, the host, browser warning lists, and search engines to drop it from search. We chase them automatically and tell you when it is offline.

How the product works

What a brand alert shows you

What we found, why it matters and what to do next, with a screenshot of the fake. The evidence pack adds who registered the domain, where it is hosted and who handles its email, each with the time it was captured.

New threat
CriticalExample
yourcompany-login.com

Impersonating yourcompany.com

Copies your sign-in page.

Threat signals

Copies your website
Reported by your website marker
Login form on the page
Asks for a password
Certificate issued
Public certificate logs
Take it downThis is ours

Lookalikes you registered yourself are recognised and left out. No report goes to a registrar, host or blocklist until you confirm.

Alerts arrive by email, or in Slack, Microsoft Teams, SMS or a webhook. IT teams can also send them to Splunk, Microsoft Sentinel or Wazuh.

What our consultancy case looked like

Case study, mid-2026

Copied website removed in about a day

A company that sells AI solutions and consulting. A full copy of its website appeared on a free hosting platform’s subdomain, with a valid padlock and no domain registered behind it. No client, prospect or employee was known to have reached it.

Read the case study
What happened
Offline
  1. A full copy of the site on a free hosting subdomain, with a working padlock
  2. Found by the certificate logs, a search for its wording and the website marker
  3. The day it was confirmedOne report with the evidence to the hosting platform
  4. About 24 hours laterOffline

From the case. Names changed.

Questions brand and marketing teams ask

No. Report ads and social accounts to the platform that shows them. If they send people to a copy of your website or a site on a lookalike of your domain, that site is what we take down.

At the next hourly check for a lookalike on your list, or as the public logs record a certificate for a name containing yours. With the website marker, we hear when a copy of a marked page loads elsewhere. A copy found only by searching for its wording can take longer.

See what we would find for your brand

In a 30-minute demo we show you the lookalikes of your domain that exist today and what an alert looks like.

  • Which lookalikes of your domain exist now, and which show a website
  • What happens when you approve a takedown
  • A clear annual price for your domains, including any brands you are buying

Rather see results first? Run a free scan